Privacy policy
Last updated: 17 September 2026
Bileteles has no accounts or ads and does not sell your data. It processes the information needed to run the game, prevent abuse and investigate technical problems. Here is what happens.
What we process
Your IP address. Bileteles receives your IP address to deliver the service and limit abuse. The game server uses it in memory for rate limits and writes only a shortened form in its application logs. Infrastructure providers may process the full address. Technical identifiers and IP addresses can be personal data; we do not use them for advertising or to build player profiles.
Gameplay data, in memory only. Your name, secret words, individual and team scores and chat are kept in the server's memory while the room exists. They are not written to the game's application logs or a database. Disconnected seats are kept briefly to allow reconnection; the server deletes an empty room after those grace periods expire.
Returning to a room. After a disconnected seat expires, the room can retain your temporary player number, name, avatar, team and reconnect token in memory so you can return from the same tab. Unsubmitted lobby preparation is not recovered; submitted slips can be restored only in the same lobby before another game starts. A return during a later game waits for a lobby place and has no access to that game or its chat. The saved return is removed when you explicitly leave, the host removes it or the room closes. It is not saved in a database or application logs.
Technical diagnostics. To investigate connection failures and blocked games, short-lived application logs record times, room codes, temporary player and connection numbers, a broad device category (mobile, tablet or desktop), game phases, turn durations, host changes and error or disconnect reasons. After recovery, your browser may report a timeout or the recovery of game state, together with the app version and number of retries. These reports contain no names, secret words, chat text, scores or reconnect tokens; at most eight pending reports are held in browser memory, and reports older than two minutes are not sent.
Aggregate counters. We retain totals such as rooms created, games started or finished, counted guesses and operational outcomes. These counters contain no names, IP addresses, room codes or player identifiers and remain after rooms close or the server restarts.
Functional storage on your device. Your sound and language preferences are saved in local storage until you change them or clear browser data. The room code, name and reconnect token are saved in the tab's session storage and sent to the game server when restoring your seat. Leaving the room clears that saved session; closing the tab normally clears session storage, although browser session restoration may retain it. We do not use tracking cookies.
Security in transit. All connections to Bileteles are secured via HTTPS - chat messages and secret words move encrypted between your browser and the server.
What we do not do
No accounts or email required to play. No advertising, advertising trackers, cross-site tracking or player profiles. We do not sell data or share it for advertising. Operational diagnostics and aggregate counters are used for running and troubleshooting the game, not for following people across games or websites.
Who else is involved
Technical service providers. Hosting, content delivery and traffic protection providers process technical data, including IP addresses, to operate and secure the service. The game server is hosted in the EU. Browser diagnostic reports go to the game server, not to a separate analytics service.
Legal basis and retention
We rely on our legitimate interest in keeping the game available, diagnosing failures and preventing abuse for limited technical logs and rate limiting. Logs are for investigating recent incidents and are deleted through rotation according to the age and size limits configured on the hosting systems. In-memory gameplay data lasts only while the room exists; aggregate counters contain no player or room identifiers.
Functional browser storage is used to remember your choices and restore the game session you requested. Diagnostic reports are not saved in browser storage. If you contact us, we use the information you provide to handle your request.
Your rights
Under the GDPR you have rights of access, rectification, erasure, restriction and objection, subject to the applicable conditions, and may complain to the Romanian data protection authority (ANSPDCP). You can object to processing based on legitimate interests. Contact us to exercise your rights; we will explain what data we can locate and what information is needed to handle your request. Do not send your reconnect token.
Children
Bileteles is not directed at children. It is a general-audience party game meant to be played with friends.
Changes to this policy
This policy may be updated. The "last updated" date above reflects the current version.
Contact
Questions about privacy, or a request? Reach the operator at [email protected].