Privacy Policy

Effective September 27, 2026. Whiskerway is a free game for all ages, built so that it can be played without giving us any personal information at all.

1. Who we are

Whiskerway (playwhiskerway.com) is made and run by Mid Cities Business Services, based in Texas, USA ("we", "us"). For anything about privacy, email midcitiesbusinessservices@gmail.com.

2. Everyone can play, including children

Whiskerway is for all ages and is designed to be safe for young children. We do not collect personal information from anyone who plays, including children under 13. Because of that, there is nothing for a parent to consent to under the U.S. Children's Online Privacy Protection Act (COPPA), and nothing we could use to contact, identify or profile a player.

Player names are made by the game from two word lists (like "Sneaky Biscuit"); nobody can type a name. There is no chat and no typing: players communicate only with emotes (a heart, a star…) and four preset phrases. Pictures taken with the game's photo mode are saved to your own device and are never uploaded.

If you believe a child has sent us personal information (for example, in an email), contact us and we will delete it.

3. What stays on your device

The game uses your browser's local storage to remember your progress: quests done, treats, hats and looks, your word-list name, pets and decorations, your settings, and your cloud-save code if you turned cloud save on. If you install the game (Add to Home Screen) or open it once online, the browser also keeps a copy of the game's own files so it can open without internet. None of this is sent to us.

To erase it: in the game, Settings → Start over, or clear this website's data in your browser. Removing the installed app removes its copy too.

4. Playing with friends (rooms)

Friends play together in a room. A room has a code of four words and an invite link; only people who have one of them can join, and a room holds at most 8 players.

While you're in a room, the game sends the other players: which animal you are and where it is and what it's doing, its color and hat, your word-list name, and any emotes or phrases. These messages are relayed live by Supabase (our service provider) and are not stored by us. Like any internet service, the relay sees your device's IP address in order to deliver messages. To leave: Friends → Leave room, play alone.

5. Cloud save (optional, off unless you turn it on)

Cloud save keeps a copy of your game progress online, so you can continue on another device. It stores the same game progress described above (no personal information), the time it was last saved, and a scrambled (hashed) form of your six-word save code, never the code itself. Anyone who has the code or the save link can load that progress, so please keep it private.

The online copy is kept until you delete it: Settings → Cloud save → Stop cloud saving. If you no longer have the device, email us the six save words and we'll delete it.

6. Hosting and the services we use

• Cloudflare hosts the website. Like every web host, it processes standard technical information about each visit (such as IP address, browser type and the page asked for) to deliver the site and protect it from attacks, and may keep it in short-lived server logs. We don't use this to identify or follow anyone, and we don't run analytics.
• Supabase relays room messages (section 4) and stores cloud saves (section 5).

These providers process data only to provide their service to us. They may do so in the United States or other countries.

7. What we don't do

• We don't use cookies, advertising, analytics or tracking tools of any kind.
• We don't sell or share personal information, and we don't use it for targeted advertising (as those terms are used in California and other U.S. state privacy laws).
• We don't build profiles, and we don't ask for location, contacts, camera or microphone (the site blocks them).
• There are no in-game purchases and no links out of the game.

8. Cookies and local storage

We don't set cookies. The local storage described in section 3 is used only because it is needed to play (to remember your game), which is why there is no cookie banner.

9. Your rights

Wherever you live, you can ask us what we hold about you and ask us to delete it. Since the game doesn't know who you are, the only thing we can find is a cloud save, using its save words. If you're in the EU or UK: we process the small amount of data above on the basis of our legitimate interest in running the game you chose to play; you can also complain to your local data protection authority. California and other U.S. state residents have the same access and deletion rights, and we will never treat you differently for using them.

10. Security

Save codes are stored only in scrambled form, room messages are checked so that only allowed names, looks, emotes and phrases get through, and the site only connects to itself and Supabase. No online service can promise perfect security, but we keep what we hold as small as possible.

11. Changes

If this policy changes, we'll update it here and change the date at the top. We will not start collecting personal information from children.

12. Contact

Mid Cities Business Services, Texas, USA. Email midcitiesbusinessservices@gmail.com.