Privacy

Privacy Policy

Last updated: 20 August 2026

You can still play primecade with no account at all: type a display name, play a game, and when the room closes the game is gone. If your team connects primecade to Slack, there is a little more — a sign-in, a monthly leaderboard and the results behind it. This page explains both.

01Who we are

PrimeHammer s.r.o. (“we”, “our”, “us”), a company registered in the Czech Republic, operates the primecade web application (the “Service”). We are the controller of the personal data described below.

02What we collect

• Your display name. The name you type before joining a room. Other players in that room see it. Pick a nickname if you would rather not use your real name.
• A random player ID. Generated in your browser so you can rejoin a room after a dropped connection. It is a random string, not linked to your identity.
• What you send during a game. Guesses, clues, drawings, letters and moves. These are relayed to the other players in your room while the game runs.
• Technical request data. Our hosting provider records standard server logs, including IP address, browser type and timestamps, to keep the Service running and secure.

We never ask for a password or a payment method.

If your team connects Slack, we additionally hold, for as long as that team keeps using primecade:

• Your Slack identity. Your Slack user ID, display name, profile picture and timezone, taken from Slack when you first join through it. The timezone is used only to propose game times you could actually make.
• Your Slack display name. The name shown on the leaderboard and in every Slack post. It is a copy of your Slack display name, refreshed each time you sign in; there is nothing to change here, and changing it in Slack changes it here too.
• Your results. Which games you played, when, how you placed and the tournament points that came from it.
• A session cookie when you sign in — see section 04.
• Your team's Slack access token, so primecade can post results to the channel you chose. It is encrypted at rest.

We do not receive your Slack email address, we do not read your Slack messages, and we ask Slack for the narrowest set of permissions that lets us post results and see who is playing.

03How we use it

• To run the game. Your name, ID and moves are what make multiplayer work.
• To keep the Service available. Server logs help us diagnose faults and prevent abuse.
• To answer you. If you email us, we use your message to reply.

We do not profile you, we do not advertise to you, and we do not sell or rent personal data to anyone.

04Cookies and browser storage

If you never sign in, the Service sets no cookies at all. It keeps a few things in your browser’s local storage so you do not have to set them up again — the display name you chose, the random reconnection ID, your colour, and your sound preference. They never leave your device except as described above, and clearing your browser’s site data for primecade removes them.

If you sign in with Slack, we set one cookie: a session cookie that keeps you signed in for 30 days. It holds a random value and nothing else — no name, no identifiers. It is strictly necessary to keep you signed in, so it is not used for analytics or advertising, and signing out deletes it. There are no third-party cookies and no tracking pixels anywhere on the Service.

05Who else sees data

We do not sell, rent or trade personal data, and we do not share it with advertisers or analytics companies — the Service runs no analytics at all. Only three parties are involved:

• Other players in your room. They see your display name, your colour and what you play.
• The providers that deliver the Service. Our hosting provider runs the servers, and, as on most websites, fonts and code libraries are delivered by standard content delivery networks. Like any web request, these receive your browser’s IP address — nothing about you or your game.
• Slack, if your team has connected it. primecade posts game results and leaderboard updates to the channel your team chose, which means the names and scores in those messages are visible to everyone in that channel — that is the point of the feature. Slack processes them under its own privacy policy.
• Google, only if your team connects Google Meet. We then create Meet links for scheduled sessions. We ask for permission to create meetings only — we do not read anyone’s calendar, email or files.
• Authorities, where the law requires it. We may disclose data if we are legally obliged to, or to protect our rights and the safety of users.

Slack and Google are used only when your team deliberately connects them. Without that, neither receives anything.

06How long we keep it

Rooms live in server memory only. If you are playing without a team, your name, ID and everything played in a room are discarded when the room closes.

Tournament data is different, because a monthly leaderboard has to outlive the games that made it. When your team has connected Slack, we keep your name, your Slack mapping and your game results for the current tournament and the past twelve, then delete them. A finished tournament becomes read-only: it is kept so you can look back at it, not changed. Ask us, or your team admin, and we will delete your player record sooner.

The one exception is the final scoreboard of a finished game, so that players who did not screenshot it can still look it up. We keep the game type, the time it ended, and each player’s display name, colour and placement for 14 days, after which it is deleted automatically (the scoreboard of a scheduled team tournament game is kept for as long as the team’s tournament results are). A scoreboard is only ever shown to someone who played in that game: it is looked up using the random ID your browser already stores, that ID is never included in a response, and the record is not linked to any account, email or IP address. If you are signed in to a team, you can see everything kept about you under “Past results” in the lobby; if you play without a team, it is kept the same way but not shown to you, and expires on its own.

Server logs are kept by our hosting provider for a short period for security and diagnostics, then rotated out. Emails you send us are kept only as long as needed to deal with your request.

07Your rights

Under the GDPR you can ask us to give you access to your personal data, correct it, erase it, restrict or object to its processing, or provide it in a portable format. If you have never signed in there is very little stored about you: clearing your browser’s site data removes the random ID that links you to the 14-day scoreboards, and they expire on their own anyway. If you have played in a team tournament, write to us at the address in section 11 and we will delete your player record, your Slack mapping and your name; past game results are anonymised rather than removed, because deleting one player’s rows would rewrite a leaderboard other people took part in.

To exercise a right, email hello@primehammer.com. You also have the right to lodge a complaint with your local data-protection authority; in the Czech Republic that is the Office for Personal Data Protection (ÚOOÚ).

08International transfers

Some of the providers above operate servers outside the European Economic Area. Where data is transferred, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

09Children

The Service is made for workplace teams and is not directed at children under 16. We do not knowingly collect data from them.

10Changes to this policy

We may update this policy when our practices or the law change. The revised version is posted here with a new “last updated” date. Continuing to use primecade after a change means you accept the updated policy.

11Contact