What we collect
- Access requests: when you enter an email for sign-in or sign-up, we store that address in an expiring link record and send it to Resend to deliver your requested email, even if you never create an account. Link records are normally removed about a day after expiry through periodic cleanup.
- Hosts: email, first and last name, verification/invitation status, profile and theme preferences, account status, and game activity. Players do not need an email account.
- Players: your chosen name/nickname, a random browser identifier, game/team membership, session activity, and scores. The identifier is generated by Lulu, not a hardware serial, advertising ID, or cross-site fingerprint.
- Private access history: sign-in/join time, role, related account/game identifier, IP address, approximate country/region/city and timezone when Cloudflare provides them, and a shortened browser user-agent. This network location can be wrong and is not GPS.
- Displays: pairing/session records, link times, optional nicknames, and approximate network location. Host actions and played questions also create operational and audit records.
- Support: information you email to hello@partywithlulu.com. Don’t send private codes, sign-in links, payment/health data, or other sensitive records.
Why we use it
We use this information to verify access, run games and scoring, reconnect players, pair displays, remember preferences, send requested access/security emails, troubleshoot, and prevent abuse.
We do not currently run advertising trackers or sell personal information. Access emails are transactional; signing up does not subscribe you to marketing. A nickname does not establish a player’s real identity.
Who sees it
- Participants and linked displays can see player/team names, game information, and scores. Use a nickname if you do not want your full name on a shared screen.
- Hosts see registrations, team membership, game scores, and approximate locations of displays linked to their game. They do not receive players’ private IP/access histories.
- The single super admin can see host profiles, game/audit records, and private access history, and can use a recorded Sign in as host feature for support.
- Cloudflare supplies hosting, database, image storage, security, approximate network location, and support-email routing. Resend sends transactional emails. Support email is forwarded to the operator’s Gmail inbox, so Google also processes those messages. Providers handle information as needed to deliver these services.
- We may disclose information when legally required, to investigate abuse, or to protect users and the service. Private account data is not part of the public question library.
How long information stays
Private access-history records are kept for up to 90 days and operational audit records for up to 180 days, with periodic cleanup. Expired sign-up links have a short cleanup window. Self-sign-up profiles that never finish onboarding and have no games are eligible for cleanup after 72 hours.
Completed host profiles, games, scores, and question-play history remain for service operation and non-repetition until removed by the operator or a deletion request is handled. There is no automatic account-deletion tool in the app yet. Backups and records needed for security or legal obligations may remain longer.
Unpaired, unused display setup records normally expire after about one hour. Unlinked or released display records, including their approximate network location, normally expire after 30 days without contact. Linked displays are released after their game ends, including when a display no longer polls. Cleanup runs periodically rather than exactly at the threshold.
Cookie/storage lifetimes are described separately. Clearing browser data does not itself delete server records.
Choices and privacy requests
Hosts can edit names, verify a new email, and change defaults in My profile. Players can choose a nickname and ask the host to correct an open round’s score or membership. Avoid entering unnecessary personal information.
For access, correction, deletion, or other privacy requests, email hello@partywithlulu.com. We may verify control of the relevant email or ask for game context before sharing or changing records. Rights and exceptions depend on applicable law; we review requests accordingly.
You can clear or block browser storage, but sign-in, reconnecting scores, and pairing may stop working. We do not request precise location permission for network-location records.
Children and adult content
Lulu is not designed for children under 13. Do not create an account or submit a child’s personal information for someone under 13. Hosts must choose age-appropriate content and follow rules that apply to their audience.
Adult categories and After Dark are intended only for participants aged 18 or over. Host choices and content filters do not replace supervision. Contact us if a child’s information may have been submitted improperly.
Security, processing, and updates
We use HTTPS, private sessions, expiring access links, access controls, and request limits. No online system can promise complete security. Keep private links and codes private, and report suspected unauthorized use.
Providers may process information in countries other than yours. We may update this notice as Lulu changes; the effective date identifies the current version. Material changes will be communicated through the service where appropriate.