Privacy Policy
Effective 19 October 2026. People Make Things, Inc., 2261 Market Street, STE 35679, San Francisco, CA 94114, United States of America, is responsible for your data (the "controller"). Contact: great@peoplemakethings.com. This policy is part of our Terms of Service.
1. The short version. Playing AmogSchool as a guest needs no account, and we never ask your real name or email. If you play ranked without signing in, your browser keeps a random player key so your rank can follow you; it is not linked to your name, email or any account. Where ranked asks you to sign in, you sign in with your phone number: Google's Firebase Authentication texts you a code, and you choose a nickname, which must not be your real name. Your rank, and your progress in the Game (your Aura, the items you unlock and how many games you have played), are then kept under your account, so they follow you to other devices. Our servers never store your phone number; Google keeps it to sign you in. Other players see your nickname, never your number. Everything you do and type in a game is recorded, sent to the AI providers whose models are playing, and kept by us. We use game data to run, protect and improve the Game; for AI research, benchmarks, model rankings and datasets; to train, fine-tune and evaluate AI models; to promote the Game; and for any other purpose we tell you about when we collect it or that is compatible with these. We may publish game records and transcripts, including chat. Treat everything you type as public. We do not sell your personal information for money. Outside the EU/EEA, the UK and Switzerland, and only while analytics is on, we use the Meta Pixel and Meta's Conversions API to measure and improve our ads on Facebook and Instagram; some US state laws call this sharing for targeted advertising, and you can opt out at any time (section 2). Apart from signing in, do not type personal information into the Game; if you do, it will be handled exactly as described here.
2. What we collect.
| Data | Where it comes from | Why |
|---|---|---|
| A random device ID | Created in your browser and stored there | Rate limits, abuse prevention |
| A random player key (ranked only) | Created by our server when you first press PLAY RANKED as a guest and stored in your browser. When you sign in, your browser drops the key. If the key has played ranked games, we first ask whether to keep that rank on your account: only if you say yes does the key in the browser where you first sign in carry its rank into your account; a key your browser holds at a later sign-in is no longer used either way; and a key whose rank you did not keep stays a guest key, under no account | Keeping your rank and your ranked results together; stopping one player from taking two seats at a ranked table |
| A ranked account: your nickname and an account ID (your phone number stays with Google) | You sign in with your phone number and Google's Firebase Authentication checks it by texting you a code; Google then gives us an account ID, and you type the nickname in. Our servers never store the phone number | Signing you in; keeping your rank and your ranked results under one account; one seat per account at a ranked table; stopping abuse |
| Your progress in the Game: your Aura points, how many games you started and finished, your tasks, kills and wins, your play time, when you first played, and the items you have unlocked and which of them you wear | The Game counts it as you play. As a guest, it is kept only in your browser. If you are signed in, your browser sends what you earn in each game, with that game's ID, to our server, which keeps your progress with your account, a list of which games earned you what in the last 14 days (each game kept as a scrambled, or hashed, form of its ID, never the ID itself), and a random ID for each of the last 20 times guest progress was added to your account (made new each time, so it does not identify your browser). When you sign in, the progress you made in that browser as a guest is added to your account and then removed from the browser. When you sign out, your progress is removed from the browser; anything not yet saved to your account waits there for up to 14 days, until you sign in again. If the browser could not reach our server at all while you were signed in, what you earned stays in it as guest progress instead, and is added to the next account that signs in there | Showing your progress and the items you have unlocked; keeping your progress when you play on another device; counting each game only once |
| Your IP address | Your connection | Rate limits, abuse prevention, security; also in our hosting providers' logs |
| Gameplay | Everything you do in a game: moves, tasks, kills, votes, colour, timing | Running the game, game records, statistics, research, benchmarks, model training and evaluation |
| Chat messages | What you type in meetings. Visible to every player in your game, human and AI | Running the game (AI players read them), transcripts, research, benchmarks, model training and evaluation, promotion |
| Game records and transcripts | Produced by the Game: each event, each message, each AI prompt and reply | Results, replays, leaderboards, model benchmarks, datasets, research, improving the Game, promotion |
| Technical data | Browser type, errors, connection events | Keeping the Game working, security |
| Product analytics and match ratings (only while analytics is on) | Your browser and our game server, under a hashed device ID: your device and browser, load speed, frame rate, errors, the buttons and screens you use, taps, idle time; your lobby waits and, for each game, your role, whether you won, tasks, votes, meetings, chat counts (never the text), emotes, outfit, disconnects and rank change; a 1 to 5 match rating and an optional line of up to 140 characters | Understanding how people play, what makes a match fun and where the Game breaks, and improving it |
| Ad attribution (only while analytics is on) | The link you arrived by: its campaign tags (utm_source, utm_medium, utm_campaign, utm_content, utm_term), the Meta campaign, ad set and ad IDs, the ad's placement and site, Meta's click ID (fbclid), the name of the website that sent you and when you arrived; kept in your browser as your first and your latest visit, and on our servers under a scrambled (hashed) form of your device ID, with your country and counts of the games, tasks and votes you played and the days you visited | Measuring which ads bring players who enjoy the Game, and improving our ads |
| Meta Pixel and Conversions API events (outside the EU/EEA, the UK and Switzerland, only while analytics is on) | The Game, in your browser and on our server: that you opened the Game, pressed play, joined a lobby, started and completed a game, did your first task and cast your first vote in a game, played your 3rd, 5th or 10th game, played again, played for ten minutes, came back on a later day, or made an account; each with a random event ID, the campaign tags above, a hashed device ID, Meta's browser IDs (the _fbp and _fbc cookies), your IP address, your browser's user agent, the page address and your approximate location (country, region and city, hashed) | Measuring and improving our ads on Facebook and Instagram |
Your browser stores a few items the Game needs: the device ID, a short-lived token that lets you rejoin a game after a refresh, your settings, your progress in the Game (if you sign in, a copy of your account's progress and anything not yet saved to it), your analytics preference, if you play ranked without signing in, your player key, and, if you sign in, your sign-in state (your account ID, your phone number and Google's sign-in tokens, kept in your browser by Google's sign-in library) and a sign-in token of ours, with your nickname, so you stay signed in between visits until you sign out. Outside the EU/EEA, the UK and Switzerland, while analytics is on, Meta's Pixel and our Game also store two Meta cookies (_fbp, a random browser ID, and _fbc, the click ID of the ad you arrived by) for up to 90 days; we do not use them anywhere in the EU/EEA, the UK or Switzerland, which we tell from your device's time zone and the country our website's host resolves from your connection. PostHog gameplay analytics is on by default unless you turn it off in Analytics preferences or your browser sends Do Not Track or Global Privacy Control. It uses a random analytics identifier stored in your browser to measure visits, successful joins, started and completed rounds, repeat play, coarse task and vote counts, connection reliability and, if you sign in, how the sign-in itself went (that it was opened and from where, that a code was sent, a failure with Google's error code for it, a completed sign-in and whether it made a new account, a nickname set, the profile opened, a sign-out, an account deletion; never your phone number, account ID or nickname). It includes the ad attribution described above (campaign tags, ad IDs, the click ID and the name of the website that sent you, for your first and your latest visit), a hashed device ID, your game counts and the Meta event ID of each event. It also records your device and browser (operating system and version, browser and version, device type, screen and window size, pixel density, touch support, processor cores and memory, connection type and speed, language and time zone), how fast the Game loads and how smoothly it runs (load timings, frame rate, slow frames, Google's web vitals), errors in the page with their technical details, which buttons and screens you use, named by the Game's own internal names, never by what you type, where on the page you tap or click (heatmaps) and taps that do nothing, and how long you are idle. It also records which version of the Game's help and rewards you are shown and, as you play, your Aura level and the items you unlock and wear. Our game server sends PostHog, under the same hashed device ID, what happened in your lobbies and games: how long you waited in a lobby and why you left it, how many people and computer-controlled players were there, and for each game its settings, your role, whether you won and survived, your tasks, votes and whether they named an Opp, the meetings you called, the bodies you reported, how many chat messages and characters you sent (never what they said), your emotes, your outfit, disconnects, idle time and, in ranked games, your rank change. After some completed matches the Game asks you to rate the match from 1 to 5 and, if you like, to say in up to 140 characters what would make it better; a line that looks like contact details (an email, a link, a handle or a phone number) or contains a rude word is dropped before it is sent, and you should not type personal information there. Analytics never includes chat text, player names, room codes, reconnect tokens, model identities, full URLs or full referrer addresses. Analytics also records your approximate location (country, region and city), as our website's host resolves it from your IP address (GeoIP); we configure PostHog to discard the IP address itself.
When analytics is on, we sample 50% of eligible sessions for masked page replay to understand how people play and to diagnose problems. Text, inputs and images on the page are masked, and chat, meetings, results and the sign-in are blocked. The game's picture (the map and the players, with the names drawn above them) is recorded at two frames a second and low resolution, so a replay shows the gameplay. Console logs and network contents are not recorded. Select Analytics preferences at the top of this page to turn analytics off or back on at any time. Turning it off does not prevent play, and also turns off the Meta Pixel and the Conversions API events: from then on the Game sends nothing to Meta. Existing saved opt-outs are respected. Turning analytics off also stops our game server from sending PostHog anything about your lobbies and games. Do Not Track and Global Privacy Control keep analytics off, and with it everything we send to Meta and our game server's analytics; we treat either signal as your request to opt out of sharing for targeted advertising.
3. Why we use it (legal bases).
- To run the Game you asked to play (performance of our agreement): matching you into games, signing you in and keeping your account, and the progress saved with it, if you make one, sending your chat and the game state to AI players, rejoining after a refresh, showing results and replays.
- Our legitimate interests: running a safe, fair and working Game; preventing abuse and cheating; security; fixing bugs; statistics; improving the Game; conducting and publishing research; building, publishing and licensing AI benchmarks, model rankings and datasets; training, fine-tuning and evaluating AI models, ours and others'; developing new products and services; promoting the Game, for example with example games and highlights; and enforcing our Terms and protecting our rights, property and users. We consider these interests are not overridden by yours: guests give us no real name, email or contact details, a ranked account holds only a nickname, an account ID, a rank and game progress (the phone number stays with Google), the Game tells you not to share personal information in chat, and the data is about a fictional game. We de-identify where it is practical.
- Legal obligations: answering lawful requests from authorities and meeting other legal duties.
- Further uses: any other purpose we describe when we collect the data, or that the law allows without your consent.
Analytics, masked page replay and ad measurement help us understand and improve the Game and our ads (our legitimate interests in understanding which ads bring players and in growing the Game). You may turn them off in Analytics preferences; turning them off stops future analytics collection. The other game processing described above is separate from this analytics preference. You can object to processing based on legitimate interests (section 7).
4. Who receives it.
- AI model providers, through OpenRouter. By playing, you direct us to send your chat, your nickname if you have one, and the game state to OpenRouter and to the companies whose models are in your game, so they can respond. Each handles that data under its own policy and may keep it or use it to improve its models. We do not control what they do with it.
- Other players. Your chat, colour and actions, and your nickname if you have one, are visible to everyone in your game, and may appear in replays, transcripts, leaderboards and highlights.
- Analytics provider. PostHog processes the analytics, the game server's gameplay analytics, the match ratings and the masked page replay described above in its US Cloud service on our behalf. This optional data is separate from the game records and transcripts.
- Meta (advertising measurement). Outside the EU/EEA, the UK and Switzerland, and only while analytics is on, Meta Platforms, Inc. receives the Pixel and Conversions API events described in section 2 from your browser (the Meta Pixel, loaded from Meta's servers) and from our server (the Conversions API), to measure and improve our ads on Facebook and Instagram. Meta matches them to its own users to tell us which ads work, and uses them under its own terms and policy, which may include improving its ad delivery. We never send Meta your phone number, nickname, chat or account ID.
- Sign-in provider. Where ranked asks you to sign in, Google (Firebase Authentication) receives your phone number to text you the code and to keep you signed in, along with your IP address and browser details; Google's reCAPTCHA check also runs on the sign-in screen. Google says that phone numbers people provide for authentication are sent and stored by Google to improve its spam and abuse prevention across Google services, that the service runs only from US data centers, that it keeps logged IP addresses for a few weeks, and that it removes the rest of the sign-in record from live and backup systems within 180 days after the account is deleted. Google handles that data under its own policy.
- Hosting and infrastructure. Fly.io (game servers, database, file storage) and Vercel (website), both in the United States; error monitoring, if enabled, receives technical data when something breaks; and other service providers we add later, under contract.
- Professional advisers, authorities and others where needed to comply with law, enforce our Terms, investigate abuse, or protect the rights, property or safety of us, our users or others.
- Buyers, investors and successors in connection with any financing, sale, merger, reorganisation or insolvency involving the Game or the company, including during due diligence.
- The public, researchers and partners. We may publish, share, license or sell game records, transcripts, statistics and datasets. We de-identify them where practical, but chat is published as written, so anything you typed may appear. Once published, others may copy, cache and reuse it, and we are not responsible for what they do with it.
We do not sell personal information for money. Sending the Meta events described above is "sharing" for cross-context behavioral advertising, or "targeted advertising", under some US state laws, such as California's. You can opt out of it at any time: select Analytics preferences at the top of this page and turn analytics off, or turn on Global Privacy Control or Do Not Track in your browser; we honour either signal as an opt-out. Licensing or selling de-identified or aggregated data is not a sale of personal information. We will not try to re-identify de-identified data, and we require anyone we give it to not to try either.
5. Where it is processed. In the United States and wherever our providers operate. By using the Game you understand your data will be processed in the United States, where privacy law may be different from your country's. Transfers from the EU/UK rely on the European Commission's standard contractual clauses or an equivalent safeguard.
6. How long we keep it. Rate-limit data (device ID and IP address): up to 24 hours. Account data (your nickname, your account ID, your rank, your ranked results and your progress in the Game): until you delete your account or ask us to; the list of which games earned you progress (a scrambled form of each game's ID, its date and what it earned) covers the last 14 days, and older entries are deleted each time your progress is saved; after a deletion we keep the account ID, its dates (when it was created, last signed in and deleted) and the dates and scrambled tokens of its sign-in sessions; the rank and ranked results stay under a random player key that is no longer linked to any account, and Google removes its sign-in record within 180 days of your browser asking it to (section 7; section 4 says what Google keeps for spam and abuse prevention). Ranked player keys and the rank and ranked results kept under them: until you ask us to delete them or until we retire ranked keys. Clearing your browser's site data removes the key from your browser and starts you over; it does not delete the rank kept on our side. Hosting logs: as set by our providers, typically up to 30 days. Game records and transcripts: for as long as they are useful for the purposes above, which may be indefinitely. Once the device ID and IP address linked to a game are gone, the record contains nothing that identifies you and we treat it as de-identified. A ranked game's record also carries the random player key of each person at the table; it identifies a browser's or an account's rank, not a person, and it is kept as long as the rank is. Data already published or sent to AI providers cannot be recalled. Backups may persist for a limited period after deletion. We may keep data longer where needed for legal claims, security or legal obligations.
7. Your rights. Depending on where you live (for example in the EU, UK or California), you may have the right to access, correct, delete or receive a copy of your data, to object to or restrict processing, and to complain to a data protection authority. Email great@peoplemakethings.com with the game time, your colour and anything else that helps us find your game. We may ask for more detail to locate your data and confirm the request is genuinely yours. For guests there are no accounts and IDs are random, so we usually cannot tell which data is yours. If you played ranked without signing in, you can show us the player key stored in your browser and we can then find and delete the rank and the ranked results kept under it. If you have a ranked account, you can delete it yourself from your profile page in the game. That removes your account on our side at once: your nickname and your progress in the Game are deleted, every device is signed out, and your rank is unlinked and stays in our records with your ranked results under a random player key no longer tied to you (section 6 says what else we keep). Your browser then asks Google to remove your sign-in record, and Google removes it within 180 days. If that request does not go through, for example because your connection dropped, the browser you used tries again the next time you open the game in it; until it has gone through, Google may keep your sign-in record, your phone number included. Signing in again with the same number makes a new account; the deleted one is not brought back, though ranked games played as a guest on that device can be kept with the new account if you choose, as at any sign-in. If you want the rank and ranked results deleted as well, email us with the phone number you signed in with while your account still exists, and we will find the account and delete it together with them. Game records and chat lines stay as they were played, including any nickname you used in them (section 6). Where we can't identify you, the law does not require us to act on the request, and we'll tell you so. We may decline or charge a reasonable fee for requests that are unfounded, repetitive or excessive. We cannot recall data that has already been published, sent to AI providers or de-identified, and we may keep data needed for legal claims, security or legal obligations. We will not discriminate against you for using your rights. This section does not give you rights beyond those the law provides.
8. Children. The Game is for people 13 and older. If you are under 18, you may use it only with the permission of a parent or guardian. Nobody under 13 may use the Game. By using it you confirm you are at least 13 and, if you are under 18, that a parent or guardian has agreed. We do not knowingly collect data from anyone under 13. If we learn we have, we delete it. Parents or guardians who believe we hold their child's data can contact us at great@peoplemakethings.com.
9. Security. We protect data with reasonable technical and organisational measures. No system is completely secure, and we can't guarantee the safety of data sent over the internet. You send data to the Game at your own risk.
10. Third-party services. OpenRouter, the AI model providers, Google (Firebase Authentication), Meta (the Meta Pixel and Conversions API), PostHog, our hosting providers and any sites we link to have their own privacy policies. We are not responsible for their practices.
11. Changes. We may change this policy at any time. The current version and its date are always at /privacy. Changes take effect when posted. Continuing to use the Game after a change means you accept it.
12. Contact. People Make Things, Inc. · great@peoplemakethings.com · 2261 Market Street, STE 35679, San Francisco, CA 94114, United States of America.