Legal

Privacy Policy

Draft. This Privacy Policy is a draft for NOJU's review and isn't in force yet. A lawyer should check it before it is.

Updated 2 November 2026

This policy explains what Joinable stores and why. NOJU ([legal entity name and address: Ghassan to fill in]) is responsible for it. In short: we keep what's needed to run your account and bill it, we don't store players' IP addresses, and we never see card numbers.

If you're a developer with an account

We store:

• Your account: your email address, your plan, when you signed up, and your Stripe customer id.
• Your games: each game's name, its project key, the live sites you allowed, when it was first and last seen, and the last site it ran on.
• Usage and billing: player-hours per game per month, your prepaid credit and its top-ups and spending, and which warning emails we've sent.
• Signing in: a one-time code (stored hashed, deleted after 10 minutes) and a session (stored hashed, ended when you sign out or after 30 days). The dashboard keeps your session in your browser's local storage.

We use this to run your games, bill you and email you about your account: sign-in codes, usage warnings and billing notices. We don't sell it or use it for advertising.

If you're a player of a game that uses Joinable

You don't have a Joinable account. When you play online:

• the room gets a random name and colour for you (or the name the game gives it), and a random id that lets you rejoin your seat;
• the game's shared state passes through the room and is kept only until an hour after the last player leaves;
• chat messages are passed to the other players and aren't stored;
• our logs record events such as a player joining or a round ending, with the country your connection comes from. We don't store your IP address.

The game's developer decides to use Joinable and is responsible for telling you about it. For player data, we act on the developer's behalf.

On this website

getjoinable.com sets no cookies and runs no analytics or advertising. Its pages serve their fonts from our own domain; the dashboard currently loads its fonts from Google Fonts, which sees your IP address when it does. The live demo on the home page connects to our relay like any game does.

Who else processes data

• Cloudflare hosts the website, the relay, the database and the logs.
• Stripe takes payments. Card details go straight to Stripe; we never see or store them.
• Resend sends our emails (sign-in codes and account notices).

These providers may process data outside your country, under their own safeguards for international transfers.

How long we keep it

• Account and game data: while your account is open. Ask us and we'll delete it, except what we must keep by law.
• Billing records: as long as tax law requires.
• Logs: [Ghassan to confirm: Cloudflare Workers Logs keep them for a few days].
• Room state: until an hour after a room empties.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it, by emailing hello@getjoinable.com. If you're in the EU or UK, you can also complain to your data protection authority. Players should contact the game's developer first; we'll help them answer.

Changes

If this policy changes, we'll update this page and, for changes that matter, email account holders.