A little clarity about privacy.

What stays on your device

Session progress, recent question IDs and preferences are saved in this browser so you can resume. The app also caches its shell and question library to help with loading and interrupted connections. Optional notes stay only in the current page’s memory. Download them before refreshing or closing; they are never sent to us.

Someone using the same browser may see saved progress. Anyone viewing your screen can see notes you have typed. Clearing browser storage removes saved local progress; it does not delete a notes file you have downloaded.

Optional usage analytics

First-party analytics are on by default. Existing opt-outs, Do Not Track and Global Privacy Control are respected. You can switch them off in privacy choices. A random tab-session ID resets after 30 minutes of inactivity. It is not a persistent browser identifier and is never linked across devices or to your account.

We count page visits, conversation starts, selected play modes, question views, Go Deeper clicks, completed games and successful feedback actions. Only recognised UTM source categories are retained. Unknown values become “other”. No raw campaign text, full URLs, referrers, names, emails, IP addresses, device fingerprints, answers or notes are collected by analytics. PostHog is separate and loads only after your explicit permission, as described below.

Turning analytics off clears the tab-session ID and unsent events. Events expire after 90 days and are removed when the service next receives a submission. Anonymous sessions cannot measure unique people or cross-visit retention reliably.

Optional PostHog analytics and masked replay

Only if you choose “Allow analytics & masked replay”, we use PostHog in the EU to measure visits, play choices, question IDs, follow-up depth, completed or ended sessions, sharing actions, language and successful feedback submissions. A random identifier stored in this browser helps recognise return visits; it is not your identity and is not linked across devices. Clearing storage or declining breaks that continuity.

We retain campaign labels (UTM source, medium, campaign and content) and referring domains to understand which posts lead to play. Do not put personal information into campaign links. Full query strings are removed from analytics URLs. IP storage and location enrichment are disabled. We do not use fingerprinting, named profiles, email addresses, private answers, notes, voice content or feedback text in PostHog.

Replay records page structure and interactions, with text masked and input fields, dialogs and media blocked before transmission. Console logs and network request bodies are excluded. Replays are retained for 30 days. Behavioural events use the PostHog project's retention policy and are not covered by the 90-day first-party cleanup described above.

You can withdraw permission using “Analytics choices” at the bottom of any public page. This stops future capture and clears PostHog's local persistence; it does not erase events already received. Do Not Track, Global Privacy Control and your main usage-analytics opt-out override permission. People who decline still have full access to the game.

These statistics describe consenting browsers, not all visitors or identifiable people. PostHog privacy information.

Feedback you choose to send

Optional feedback is sent only when you press the submit button, even if usage analytics are off. It contains the option you chose, mode, a random session reference and, where relevant, a question ID. Any optional additional comments you submit are also stored with your feedback. Please leave out names, contact details and private stories. Feedback expires after 90 days, with cleanup on a later submission.

Turning analytics off or clearing local data does not remove records already submitted. Those records remain until their retention period ends.

Hosting and sharing

BTW runs on Sites hosting using Cloudflare infrastructure and a hosted database. Hosting services process connection information, such as an IP address, to deliver and secure the site. They may maintain operational logs under their own policies; these are separate from our optional game analytics. Owner sign-in is used for the protected admin area and is not required to play.

Public sharing links contain a game or question reference, never your answers, private notes or session identifier. Opening WhatsApp or your device’s share sheet uses those services, which have their own privacy policies. BTW does not upload your contact list.

Advertising is currently disabled

No Google advertising or consent scripts are loaded by BTW in this release. Preparing ownership verification for AdSense does not enable ads or create advertising consent.

Before serving ads, we will update this notice, explain the providers and choices, and configure the required consent platform. The game’s existing usage-analytics choice will not be treated as consent to advertising.

Questions and choices

Use the controls in Privacy & choices to stop optional analytics or clear local progress and preferences. This beta is intended for adults in every play mode.

For a privacy question, contact Motiv8ldn@gmail.com. Please do not include private answers or other players’ stories in an email.