Privacy policy
This policy explains what Describe This collects, why it is used, when service providers receive it, and the choices available to visitors and players.
Information you provide
When you play, the service stores the display name you choose, game and waiting-room settings, guesses, scores, game state, and related timestamps. A host may also provide a custom judging rule. Avoid putting real names, contact details, secrets, or other sensitive information in a display name, guess, room name, or custom rule.
Messages sent to support@describethis.art contain whatever contact information and message content you choose to provide.
Session, device, and security data
The application uses a signed, pseudonymous session cookie named dt_session to keep a player connected to the correct game and protect state-changing requests. It is HTTP-only, uses SameSite=Lax, is secure in production, and expires after 14 days. The browser also stores the chosen player name and sound preference locally so they can be reused on that device.
The server processes ordinary request information such as IP address, browser request details, and security or rate-limit signals to operate, protect, and troubleshoot the service. Firebase Authentication is used only for authorized administrators.
AI judging and generated content
Describe This uses OpenAI services for content generation and judging. For judging, the hidden image prompt, submitted guesses, the active scoring instructions, and any host-provided custom judging rule are sent to OpenAI. Player display names are not needed for the judging request. OpenAI processes this data under its own terms and privacy practices.
Analytics and advertising
When enabled and permitted by your consent choices, Google Analytics 4 measures page use and bounded game events such as games created, joined, started, and completed. These events do not include game, player, round, session, or Firebase identifiers; names; prompts; guesses; email addresses; or invitation codes. Page locations sent to analytics exclude query strings.
When advertising is enabled, Google AdSense may use cookies, device identifiers, IP address, and browsing information to select, deliver, limit, and measure advertisements and detect invalid traffic. Google may use data from this site as described in How Google uses information from sites or apps that use its services.
Google's certified consent platform presents applicable European and US-state privacy choices and communicates consent signals for advertising and analytics storage. You can revisit those choices with the “Privacy and cookie settings” control in the footer when the platform is available.
Why information is used
- Provide waiting rooms, live rounds, scoring, standings, and recaps.
- Generate and judge game content and account for provider usage.
- Secure the service, enforce limits, diagnose failures, and prevent abuse.
- Understand aggregate acquisition, device, engagement, and game funnels when analytics consent permits.
- Fund the public service with advertising and monitor ad policy or invalid-traffic issues.
Retention and disclosure
Game records and AI-usage accounting are kept in the service database for operational history until the operator deletes them under its maintenance practices. Browser storage remains until it expires or you clear it. Security and infrastructure logs are retained according to the hosting provider's operational settings.
Information is shared only as needed with hosting and infrastructure providers, OpenAI, Google services when configured, professional advisers, or authorities when required by law. Describe This does not sell game prompts or guesses as a standalone data product.
Your choices
You can decline or manage optional Google storage through the consent message, clear the site's cookies and local storage in your browser, avoid joining a game, or stop using the service. Clearing browser data may sign you out of a game and remove saved preferences. To ask a privacy question or request help concerning data, email support@describethis.art. Some records may need to be retained for security, legal, or operational reasons.
Children and general audience
Describe This is a general-audience service and is not directed to children under 13. Do not use the service if local law requires parental consent that has not been provided.
Changes
This policy may change as the service and its providers evolve. Material updates will be published here with a new effective date.
This policy describes the current product and is not legal advice. The site owner should review it before enabling production analytics or advertising.