Privacy Policy

Guess Who Builder is a guide to creating a custom guessing game by Ben Brady. This policy explains what data is collected when you visit or follow a link to one of our games and how it's handled. The short version: we collect minimal data to keep the site running and don't sell it to anyone.

Prompts & questions. The prompts you use to create boards and the questions you ask during gameplay are sent to our servers and forwarded to third-party AI providers (currently via OpenRouter) to generate responses. These may be logged for debugging, abuse prevention, and improving the game.

Game sessions. Board configurations, secret cards, guess history, and answer results are stored on our servers to power gameplay, puzzles, and the daily leaderboard.

First-party analytics. We collect first-party product analytics to understand how the game is used and where people get stuck. Events include page views, board loads, gameplay actions such as questions, clue reveals, card views, shortlist/elimination actions, guesses, wins, give-ups, shares, replay starts, and privacy-safe OpenRouter usage metadata (operation, model, provider, latency, token counts, cache usage, and cost). We do not store prompts, questions, answers, or generated text in these analytics events.

Local storage. Game history, daily streaks, theme and AI model preferences, eliminated-card state, and a random analytics visitor ID are stored in your browser's localStorage. These records remain on your device, although your selected AI model is sent with questions so we can honor the preference.

Accounts. Guess Who Builder does not offer accounts. To create a board, follow a link to WhoGuessr or WhatGuessr and review that site's privacy policy before signing in.

Cloudflare. The game is hosted on Cloudflare Workers. Cloudflare may process standard web request data (IP addresses, headers) per their privacy policy.

OpenRouter / AI providers. Your questions and board prompts are sent to AI models via OpenRouter to generate answers and board content. See OpenRouter's privacy policy.

Analytics storage. First-party analytics events are stored in a Cloudflare R2 bucket operated by Guess Who Builder. Browser events may include page paths, a random visitor ID, a per-page session ID, the landing referrer, UTM campaign fields, request country, and user-agent data.

Google Analytics. We use Google Analytics 4 to measure visits and page views. Your browser sends usage information to Google, which uses analytics cookies and processes data under Google's privacy policy.

Wikipedia. Board images and summaries are fetched from the Wikimedia API. No user data is sent to Wikipedia.

Our first-party analytics do not use cookies, but Google Analytics uses analytics cookies. If you sign in, authentication uses cookies; other client-side state and the random first-party analytics visitor ID are stored in localStorage.

This site is not directed to children. If you believe a child has provided personal information, please contact us using the details below. Usage analytics, including Google's analytics cookies, are collected as described above.

Server-side game session data is retained as long as needed for gameplay and analytics. First-party analytics events are retained in Cloudflare R2 until they are rotated or deleted. Question/answer logs may be periodically purged. You can clear local game state and the analytics visitor ID by clearing your browser's localStorage for this site.

If you have questions about your data or want to request its removal, get in touch via the contact details below. Google's processing is described in its privacy policy above.

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the game constitutes acceptance of any changes.

Questions or concerns about this policy? Reach out:

contact@sleuththetruth.com