Privacy Policy
Last updated: 29 October 2026
Crowdpit (crowdpit.io) is a small independent project: browser games where one player takes the hot seat and everyone watching plays against them. This policy explains what the site processes when you watch or play, why, and what you can do about it. It covers the landing page and every game on crowdpit.io.
The short version
- No accounts. There is nothing to sign up for. We never ask for an email address, a password or a payment method.
- No ads, no analytics, no trackers. Crowdpit sets no cookies and runs no third-party scripts.
- What we do keep is what the games need: a name you choose, the things you type into the games, and your IP address for a short time to keep the pit fair.
What we process and why
| Data | Why | Where it ends up |
|---|---|---|
| Your chosen name | Required to take the hot seat, chat, place a block or pitch an idea. Spectating needs no name. Names pass through a word filter before they are accepted. | Shown publicly next to your actions: the Wall of Legends, leaderboards, fallen bodies on the bridge, blocks in the tower, Hand-Me-Down chains and the suggestion board. Kept on our server for as long as those records exist. |
| What you type | Chat lines in One vs. Everyone, the note you leave in Hand-Me-Down, and pitches on the suggestion board. Text passes through the same word filter. | Chat is held in memory only (the last few lines are replayed to newcomers) and disappears when the server restarts. Hand-Me-Down notes are saved with the item chain and shown to later players. Pitches are saved and shown publicly. |
| Game inputs | Cursor positions, direction calls, votes, block drops and similar moves run the games in real time. | Processed live and not stored per person. Only the outcome (a score, a body on the bridge, a block in the tower) is kept, with your chosen name on it. |
| IP address | Every connection carries one. We use it in memory to cap connections and message rates per address, to apply chat mutes and to rate limit the suggestion board. | Kept in memory while you are connected and for the length of the limit, then dropped. Written to disk only inside the chat report log described below. |
| Connection details | Your browser sends standard headers such as its user agent and the page origin. We use the origin to accept or refuse WebSocket connections. | Not stored by Crowdpit. Our hosting provider keeps ordinary server logs (see below). |
Pick a nickname, not your real name. Names and anything you type are visible to everyone else in the pit and may appear in other people's streams and clips.
Moderation and reports
Every game checks names and text against a profanity filter. In One vs. Everyone, anyone can report a chat line. When that happens we record the reported line, the chosen names and IP addresses of the reported player and of the reporter, and the time. A player reported by three different addresses is muted for the rest of their session. The report log is used only to review abuse and tune the filter. It is kept only as long as needed for that purpose and is never shared beyond it.
Data kept in your browser
Crowdpit sets no cookies. It uses your browser's local storage for a few conveniences that never leave your device unless you act:
- the name you chose, so you do not have to type it again;
- a random token for the suggestion board, so you can change or withdraw your vote;
- small per-game progress such as Stack of Babel coins and your Hand-Me-Down guessing streak.
Clearing site data for crowdpit.io in your browser removes all of it.
Third parties
- Fonts. The headline font is loaded from Google Fonts. When a page loads, your browser requests the font files from Google, which receives your IP address and browser details in the process. Google describes its handling of that data in its privacy policy.
- Hosting. The site runs on a hosting provider's servers and content delivery network. Like any host, it processes your traffic and keeps standard server logs (IP address, requested URL, time, user agent) for security and operations.
- Nothing else. No analytics, no advertising networks, no social media widgets, no embedded video. If you reached Crowdpit from a stream, a chat or a social post, that platform has its own policies and we have no part in them.
Sharing
We do not sell or rent any of this data, and we do not share it with anyone except the providers above, or where the law requires us to.
Legal basis
If you are in the European Economic Area, the United Kingdom or another place with similar rules: we process your chosen name and the text you submit because that is necessary to provide the feature you asked for. We process IP addresses and connection details on the basis of our legitimate interest in running the service and protecting it from abuse.
How long we keep things
- Names and text stay as long as they are part of a live game record. Leaderboards and the Wall of Legends hold a limited number of entries and push out the oldest. Corpse Bridge archives each finished season. Hand-Me-Down keeps the chain of items, curses and notes.
- Chat lives in memory only and is gone when the server restarts.
- IP addresses are dropped as soon as the rate limit or mute they serve expires, except in the report log, which is kept only as long as needed to deal with abuse.
- Browser data stays until you clear it.
Your choices and rights
You can play almost everything without giving us anything beyond an IP address: watching, steering the Crowd and voting are anonymous. If you want a name, a note, a pitch or a chat report that concerns you removed, write to us with the game, the name you used and roughly when, and we will take it down.
Depending on where you live you may also have the right to access, correct, delete or restrict the use of your personal data, to object to its processing, and to complain to your local data protection authority. Email us and we will help.
Children
Crowdpit is not directed at children under 13, or under the minimum age for consenting to data processing where you live. We do not knowingly collect data from them. If you believe a child has left a name or text on the site, contact us and we will remove it.
Security
The site is served over HTTPS with strict security headers, connections and message rates are limited per address, and there are no accounts or passwords to lose. No system is perfectly secure, which is one more reason to use a nickname.
Changes
If this policy changes, the new version is published here with a new date at the top. Significant changes are noted on the landing page for a while.
Contact
Crowdpit is run by an independent developer. For anything about this policy or your data, email support@crowdpit.io.