Who What Where?
Last updated: August 2026
This Privacy Policy explains how Jessica Liu (“we”, “us”, “our”) collects, uses, and shares information when you use the Who What Where? mobile app (the “App”). If you have questions, contact us at support@whowhatwhereplay.com.
Account information. If you create an account, we collect your email address, a display name you choose, and a securely hashed password. You can also play as a guest without an account; guest play uses an anonymous identifier and does not require an email address.
Content you create. If you create custom characters, we store the images you upload and the names you give them. If you create custom packs, we store the pack name, its share code, and the list of characters it contains.
Gameplay data. We store game sessions you host or join, in-game moves, and aggregate statistics (games played, games won, win rate).
Purchase information. Purchases are processed by Apple and by our payments provider, RevenueCat. We receive a purchase/entitlement status (whether you have unlocked “Pack Builder”) and a RevenueCat customer identifier. We never receive or store your payment card details.
Technical data. Basic technical information needed to operate the App, such as device platform and app version, and diagnostic logs.
Analytics data. We use PostHog to understand how the App is used so we can improve it. We record events such as signing in, hosting or joining a game, finishing or leaving a game, and creating custom characters or packs, along with basic device information (device model, operating system and version, app version, language, and time zone) and an identifier that ties those events to your account or guest session. We have configured PostHog not to store your IP address or infer your location. We do not record your screen, and the names and images of your custom characters are never sent to our analytics provider.
We do not sell your personal information, and we do not use your data for third-party advertising.
Your data is stored using Supabase (database, authentication, and file storage) and processed by the providers listed below solely to operate the App:
During multiplayer games, limited information is shared with the other player by design — for example, your display name and the characters on the shared board. Your secret character is not revealed until the game logic reveals it.
We may disclose information if required by law or to protect the rights, safety, or property of our users or us.
We keep your information for as long as your account is active. You can delete your account at any time from within the App (Profile → Delete Account). Deleting your account removes your profile, custom characters and packs, and associated data, subject to limited retention where required for legal or security reasons. You may also email support@whowhatwhereplay.com to request deletion.
The App is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.
Depending on where you live, you may have rights to access, correct, or delete your personal information, or to object to certain processing. To exercise these rights, contact support@whowhatwhereplay.com.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, via an in-app notice.
Jessica Liu
Email: support@whowhatwhereplay.com