itsybits (“we”, “our”, “us”) builds and operates the Stampede app. This policy covers what we collect when you play, why we collect it, and what we will (and won't) do with it. Written in plain English because legalese serves nobody.
What we collect
Your team's email or phone number
When you set up a team, the app may ask for one email address or phone number for the whole team. Whether it asks depends on how the organizer set up your game.
We use it only so your team can rejoin on another device (“Rejoin my team”). We don't send it to our analytics or error-tracking tools.
Hosts and organizers: your email
If you sign in to run a game, we collect the email you sign in with so we know it's you.
Photos and videos you submit
When you complete a photo or video challenge, we store the media with your team. Teammates and hosts can see it; that's the point.
Usage data (via PostHog)
We use PostHog to see how the app gets used. This data is linked to a team identifier (“team_” followed by a number), not to your name or email. We don't use it to identify you personally. It isn't anonymous, though, because it's tied to your team's activity.
We track:
- Which screens you visit in the app
- Which features you use
- App lifecycle events (open, close, foreground, background)
- Which organization and game you're playing, and how your team joined
- Challenge activity: which challenge and what type, the points earned, and whether an answer was correct (never the answer itself)
- Upload sizes and durations, and the app version
We never send answer text, email addresses, phone numbers, rejoin codes, or photo and video content in these events.
PostHog stores this data in the United States. We don't use cookies for it. The identifier lives in your device's local storage.
It helps us figure out what's working and what's busted.
Error data (via Sentry)
When something breaks, we collect an error report so we can fix it. That includes:
- Device or browser type, and OS version where available
- App version
- Error logs and stack traces
- Performance traces (how long things take) for about 10% of sessions
In our native apps, error reports also include your IP address. On the web, we don't collect IP addresses, cookies, or request bodies.
Session recordings and diagnostics
On top of the usage data above, the web player app collects a few diagnostics. They help us see where people get stuck and why things break.
Session recordings
PostHog records replays of what happens on screen in the app: the screens you see and where you tap.
All text inputs are masked, so what you type is not recorded. That includes your typed answers and captions. Photos and videos are not recorded either.
Replays are kept for 30 days.
Clicks and heatmaps
We track taps and clicks to build heatmaps of where people tap. That includes “dead clicks,” where you tap something and nothing happens. It points us to buttons that are confusing or broken.
Performance data
We measure how fast pages load and respond (often called “web vitals”), so we can spot slow spots.
Console logs
We capture the app's console log messages. These are the technical notes the app writes about itself while it runs, and they help us track down bugs.
How we use it
- To run the game. Your contact details and media power core gameplay.
- To improve the app. Usage data and recordings tell us what to build next.
- To squash bugs. Error reports, recordings, and logs help us keep your day smooth.
What we don't do:
- Sell your personal information. Ever.
- Use your data for advertising or cross-app tracking.
- Share your information with data brokers.
Where it lives
Your data is stored with Supabase, a reputable cloud database provider. We use standard technical and organizational safeguards to keep unauthorized people out.
How long we keep it
As long as we need it to run the service. Photos and videos are retained for the duration of your game event. Session recordings are kept for 30 days. You can ask us to delete your data at any time. See contact info below.
Third-party services
- Supabase · database and file storage
- PostHog · product analytics, session recordings, and heatmaps (US cloud)
- Sentry · error tracking, crash reporting, and performance monitoring
Each has its own privacy policy governing how they handle data.
Children's privacy
Stampede is not for kids under 13, and we don't knowingly collect their information. If you think we have, tell us and we'll fix it.
Your rights
You can always:
- Ask to see the personal data we have about you
- Ask us to correct anything inaccurate
- Ask us to delete it
- Withdraw your consent at any time
Email us at the address below and we'll handle it.
Policy changes
If we update this policy, we'll post the new version here and update the “last updated” date at the top.
Contact
Privacy questions or data requests: [email protected]