Privacy

The short version

• Hosting and playing a game need no account and no personal details.
• Nothing about a game in progress is written to our database. Live game state lives on the relay and expires on its own (8 hours by default).
• An account is optional and only used to save games you can share and host again.
• We do not sell your data.

Playing and hosting (no account)

When you join a room, your player identity is derived from the room code and the name you type. It is not tied to an account and is not stored in our database. Your answers, votes, and the live tallies travel over the CLASP relay (clasp.to), which holds them only briefly: every value carries an expiry (8 hours by default) and then clears itself. Re-entering the same name in the same room reclaims your inputs from that temporary state.

Accounts (optional)

You only need an account to save a game. If you create one we store your email address, a securely hashed password (we never see or keep the plain password), and anything you choose to add such as a username or short bio. Your sign-in is kept in a single secure, http-only cookie. There are no advertising or tracking cookies.

Saved games and uploads

A saved game stores what you authored: its title, rounds, theme, optional description and tags, and an optional cover image. You control its visibility. A game set to public is listed on Explore and credited to your chosen @handle (never your email). Images you upload are stored on DigitalOcean Spaces and served from there. You can change a game's visibility or delete it at any time from Your Games, which removes it from our database.

Connect with Claude

Doot can connect to Claude through the Model Context Protocol so your own Claude can write a game and save it straight to your Doot account. You authorize this with a standard OAuth flow and an explicit consent screen, and you can disconnect it at any time. Doot runs no AI itself and stores no AI provider keys: the work happens in your Claude, and only the finished game (and any image you ask it to attach) is saved to your account, exactly as if you had built it in the editor.

What we never do

• We do not sell or rent your personal data.
• We do not write your in-room gameplay to a long-term database.

Your choices

Delete any saved game yourself from Your Games. To delete your whole account and the games tied to it, or to ask what we hold about you, open an issue on our GitHub and we will take care of it.

Changes

If this policy changes in a meaningful way we will update the date above. Continued use after a change means you accept the updated policy.