Who is responsible
The operator of FunSesh is the data controller for information processed through this service. For privacy questions or requests, email support@funsesh.com.
Privacy at FunSesh
What we collect, why we use it, how long it stays, and the choices you control.
Last updated: 2 August 2026What we collect
Hosts provide an email address for secure sign-in. We store account details, hosting access, billing status and game usage. Players provide a display name and may suggest a topic. Birthday Spotlight can contain personal facts, an age and an optional photo. We also process limited security information, such as a protected network fingerprint, session data and operational error records. Stripe receives payment details directly; FunSesh does not store full card details.
Why we use it
We process account, room and payment-status information to provide the service and fulfil our agreement with hosts. We use limited security and operational data for our legitimate interests in preventing abuse and keeping FunSesh reliable. We use information needed for legal and accounting obligations. Marketing emails are based on separate, optional consent, which can be withdrawn at any time.
Birthday information
The host must confirm permission before saving information about another person. Do not add health, religion, ethnicity, sexuality, political views or other sensitive details. Extra care and parental or guardian permission are required for children. Birthday facts may be sent to Cloudflare Workers AI to generate questions. The facts, photo and generated birthday questions are deleted when the game finishes; abandoned birthday setup data is deleted after 24 hours.
Providers and international processing
Cloudflare provides hosting, database, file storage, security and AI processing; Resend delivers sign-in emails; Stripe processes payments. These providers may process information outside your country. We rely on applicable adequacy decisions or contractual transfer safeguards where required. Contact us for more detail about a provider or transfer relevant to your data.
How long we keep data
Finished non-birthday rooms, player display names and scores are retained for up to 30 days; abandoned rooms for up to 24 hours. Magic links expire after 15 minutes and host sessions after 30 days. Operational events are kept up to 30 days, administrative security records up to 90 days, and question-history records up to 365 days. Account, entitlement and necessary transaction records are kept while the account is active and for any additional period required by law. We may retain an unsubscribe record to respect your choice.
Cookies and browser storage
We use a strictly necessary, HttpOnly host-session cookie for up to 30 days. The browser stores a random FunSesh host identifier so free usage and paid access can be linked to the correct host; it is not an advertising identifier. We do not currently use advertising or analytics cookies. If that changes, we will ask for consent where required.
Your rights
Depending on where you live, you may have rights to access, correct, erase, restrict or receive your data, and to object to processing. You may withdraw marketing consent without affecting earlier lawful processing. Signed-in hosts can download their data or request account deletion on the account page. You can also email support@funsesh.com. You may complain to the UK Information Commissioner’s Office or your local EU data-protection authority. FunSesh does not make automated decisions that have legal or similarly significant effects.