Privacy notice

Effective October 18, 2026. This notice describes the first playable release of Game Night Show, operated by the developer team identified on its Discord application profile.

Information we store

We store your chosen display name and an internal account identifier. Username/password accounts also store the username and an Argon2id password hash, never the password itself. Discord sign-in stores your verified Discord user ID and display name. We request basic identity access, not access to your messages or email.

We store hashed session credentials, temporary sign-in state, room membership, scores, host actions, and match state so you can sign in, play, and reconnect. Saved boards include your category names, questions, answers, accepted alternatives, explanations, and source links. Automatic matches store private answer submissions as part of match state until that match expires. A short-lived Discord access token is used to authenticate the Activity. It is not included in game snapshots or logs.

Sharing and hosting

Your room's participants can see your display name and score. The nonplaying host receives the current answer key when judging a response. You can see your own locked automatic-mode submission after reconnecting. Submissions are not sent to other players unless their author explicitly shares one for a group review after the reveal. Review votes and the shared answer are stored with match state. The correct answer is revealed after submissions close. Account credentials and sign-in tokens are not shared with players.

Saved boards are private unless you explicitly enable an unlisted play link. Anyone who has that link, including someone it is forwarded to, can view the board title, category titles and question counts, and start a match using that board followed by two fresh boards. The preview does not include stored question prompts, answer fields or the owner's account identity. Questions and correct answers appear as the match progresses. A play link does not grant permission to edit the original board. It uses the current saved board when a new match is created.

You can revoke a board's play link. Revocation prevents subsequent requests to preview the board or create a match with the link; it does not remove copies already frozen into a match. Editing or deleting the original board, or deleting its owner's account, likewise does not interrupt those matches. We do not automatically publish saved boards or list them in a searchable public board directory. Unlisted pages ask search engines not to index them; possession of the link still grants access, so share it only with people you want to play the board.

Discord subscriptions

If you use Show Pass, we use your verified Discord user ID to ask Discord whether you have an active subscription for our product, including its end time when provided. We keep a short-lived access-status cache in memory. Discord may send signed subscription notifications containing application, product, user and entitlement identifiers. We use verified notifications to discard stale cached checks; notifications alone do not grant paid access. We do not retain subscription event bodies as payment records, and we do not receive or store payment card details. Discord handles checkout and billing information under its own policies.

Service providers

Railway hosts the application and PostgreSQL database. Discord processes Discord sign-in, Activity requests and subscription checks. This release has no advertising trackers, third-party analytics or Patreon integration.

Retention

Inactive match records are removed after seven days. Expired session credentials and temporary sign-in state are cleaned up periodically. Inactive guest accounts are removed after thirty days. Permanent accounts and their saved boards remain until you delete them. Unlisted play-link records remain until you revoke them or delete the board or account. Board and account deletion remove the associated play links. Deleting a board or account does not rewrite a shared match's frozen questions; those records expire with the match. Hosting security and operational logs follow Railway's applicable retention policies.

Your controls

You may play on the website as a guest without linking Discord. Account controls let you sign out or delete your account and its active sessions. Shared match records may retain your display name and results until their seven-day expiry; deletion does not interrupt other participants' game. For privacy questions or account requests, contact ronald@aibaker.io.

Essential cookies

The website uses an essential HttpOnly session cookie and a temporary OAuth security cookie. The embedded Activity uses a short-lived session token held in memory because embedded browser storage differs from normal website storage.