Privacy & your data
Effective September 6, 2026. These details describe the current HuddleJoy web apps.
What is saved
HuddleJoy saves the content and activity needed to run your rooms: drawings, text, votes, choices, participant identifiers and timestamps. Content is stored with our hosting provider, Cloudflare, in its D1 database. We do not send your room content to a live AI model. Simulated characters use procedural rules.
Browser access, not registered accounts
Your browser stores a participant credential so you can return to your seat and, if you created a room, use its host controls. Keep this browser data private. Clearing it or moving to another device can remove your access. A room invitation is not proof of a person’s identity; we cannot guarantee that separate browser participants are different people.
Who can see a room
Invite links grant access to shared rooms. Only share them with people you trust, and do not submit sensitive, confidential or identifying material. Room content is not end-to-end encrypted. The service operator may access stored content when needed to operate the service, investigate abuse or handle a verified support request.
Parallax strokes are revealed to room members when all three strokes are sealed. A shared emblem link lets anyone holding that link view the completed artwork. Presence contributions are shown after the expected participants consent. RelDelta interpretations and replies are shown to the corresponding recipient and the author. Other room information follows the selected activity’s sharing controls.
Expiry, deletion and sharing
Sessions expire 30 days after creation. Expired content becomes unavailable through the app and is removed by scheduled cleanup in bounded batches, so physical cleanup can lag behind expiry. The host can delete the current session from the live app using its privacy controls. Other sessions and later Parallax rounds are separate. Any Parallax member can permanently stop public emblem sharing for that round.
Downloaded copies, screenshots and content already received by others cannot be recalled. Hosting recovery copies may temporarily retain deleted data according to Cloudflare’s recovery settings; live deletion is not a promise of immediate erasure from every backup.
Private visit statistics
We keep daily aggregate counts of public activity-page views and estimated browsing sessions for up to 365 days. These counters do not save visitor IDs, IP addresses, user-agent strings, referring URLs, query strings, room identifiers or room content. The dashboard is restricted to the owner.
A timestamp in session storage estimates when a browsing session starts; it contains no visitor identifier and is not sent to the server. A new estimate starts after 30 minutes without a measured page view, or in a new tab. No analytics cookies are set. Do Not Track and Global Privacy Control are respected for this measurement. Known crawler labels are filtered, but these totals are not verified counts of people.
Service delivery and security
Cloudflare processes connection information to deliver and protect the service. HuddleJoy uses a hashed connection address for short-lived abuse limits, separately from visit statistics. Limited technical error information may be recorded to diagnose failures; room content and full invitation URLs are not intentionally logged by the application. Owner sign-in is handled by Cloudflare Access using the owner’s approved email.
There are no advertising trackers or sale of room content in the current apps. Browser fonts and application assets are delivered with the site.
Requests and reports
For access, correction, removal, contribution-withdrawal requests, or abuse reports, contact support@huddlejoy.com. Your email and message are used to respond. Start with the activity name and a general description; do not include credentials, private invitation links or sensitive details in your first message. We may need to verify your connection to a session before making changes and cannot promise recovery when browser credentials have been lost.