Privacy policy

Missing Link is a party game you play in your browser. We collect as little as we can: players don't have accounts, and what they type in a game disappears when the room closes. This page explains exactly what we keep, why, and for how long.

Who is responsible

Missing Link, based in the Netherlands, is the “controller” of your personal data under the General Data Protection Regulation (GDPR). Questions about privacy: privacy@missinglinkgame.com.

If you play (no account)

When you join a room we store, inside that room only:

• the name and colour you pick, and a generated nickname used when the host hides names;
• your answers and score in that game;
• a random seat token (so you can reconnect after a reload) and, stored only as a scrambled hash, a random device id (so a player the host removed can't rejoin that room).

We need this to run the game (our legitimate interest in providing the game you chose to join). All of it is deleted completely when the room closes: at the latest 4 hours after the room was created, plus 10 minutes to see the final results, or 30 minutes after the last activity.

Your answers and name are shown to the other people in the room, and possibly on the host's stream if they broadcast the game. Hosts can hide names and answers from the stream. Please don't type anything in a game that you wouldn't want the room to see.

If you host (account)

Hosts sign in so we can keep their rooms and (later) their purchases. For a host account we store:

• Email address, display name and the sign-in method (Twitch, Google or email code) with its account id and username (for example your Twitch login), refreshed from our sign-in provider at most once a day;
• when the account was created and last used, and your settings (such as “I'm streaming”);
• passes and packs on your account, and codes you redeemed;
• statistics about your rooms: number of games and rounds, most players at once, how long rounds took, which packs were used and whether a stream screen was used. No player names or answers.

We use this to provide the account and the game to you (performance of a contract), and the room statistics to improve the game and follow up on promotional codes (legitimate interest). We keep your account data until you delete your account. Room statistics are kept for 13 months.

Technical data

• Logs. Our hosting provider records requests (including IP address, the page requested and your browser type) for debugging and to stop abuse. Logs are kept for a few days, and in production only a sample of requests is logged.
• Rate limits. To block abuse we count requests per IP address for about a minute. These counts are never written to our database.
• Error reports. If the game crashes in your browser, it sends us the error message and the page (without the room code), so we can fix it.

Cookies and storage on your device

This website sets no cookies and uses no analytics or advertising trackers. The game keeps a few things in your browser's local storage so it works smoothly:

• your seat in each room you joined (to reconnect after a reload);
• your last name, colour, nickname and host choices (to fill in the form next time);
• a random device id (see above);
• stream screen links the host opened.

Hosts who sign in also get the sign-in cookies of our sign-in provider, Clerk. All of these are strictly necessary for the service, so no consent banner is needed. You can clear them in your browser at any time.

Who helps us

Service	What for	Data
Cloudflare, Inc.	Hosting, database (stored in Western Europe), game servers, logs	Everything described above
Clerk, Inc.	Host sign-in	Host email, name, sign-in accounts, sign-in cookies
Google, Twitch	Sign-in, if you choose them	Handled under your own account with them

Cloudflare and Clerk are based in the United States. Transfers are covered by the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses. We have data processing agreements with both. We never sell your data.

Your rights

You can ask to see, correct, export or delete your data, and object to or restrict how we use it.

• Hosts: in the game, open your account menu → Account & data to download everything we hold about you or to delete your account. Deleting closes your open rooms and removes your account at our sign-in provider too.
• Players: your game data is deleted automatically when the room closes, usually within hours.
• For anything else, email privacy@missinglinkgame.com. We answer within one month.

When an account is deleted, records of passes and purchases are kept without any link to you, because bookkeeping law requires us to keep sales records. If you think we handle your data wrongly, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Children

Missing Link is for players aged 16 and over. Hosting requires an account and is for adults. Packs with adult humour (marked 18+) can only be used after the host confirms that everyone playing is 18 or older.

Changes

If we change how we handle personal data, we update this page and the date at the top. For important changes we will tell hosts by email before they take effect.