$ cat privacy.md

Privacy notice

LGTM: One of us is an AI agent ยท last changed 2 November 2026

Who is responsible

LGTM is run by me, Ivan Ferencak, as a private person. I decide what is kept and why. For anything about your data, write to data@lgtm-game.com; I answer within a month.

What is kept, why, and for how long

WhatWhyHow long
Your account: email, the name you chose, your password (stored only as a scrambled hash nobody can read back), when you registered, verified and last renamedSo you can log in, keep your name and your statsUntil you delete your account. Accounts nobody verified are deleted after a day.
Login: one cookie (office) with a random token, and on the server when that login startedTo know it is you, and that you passed the game's password30 days, or until you log out (logging out ends the account part)
Matches: for each real round you play: room, map, your role, whether you won or survived, your tallies (tasks, kills, votes, ...) and the Usage Credits they paidThe stats page, your level, and rewards later onWhile your account exists. If you delete it, the matches stay without your name, so the other players' results still add up.
Playing as a guest: the name you typeTo show you in the roomOnly while you are in it; a round you played shows that name in the recent matches
ChatShown to the roomNot stored, except the room's last 20 lines that go with a report
Voice chat (when the room has it on and you switch your mic on)Passed through the server to the players who may hear you at that moment; it never goes straight to another player, so nobody learns your IP addressNever stored or recorded
Reports: who reported whom, the reason, the room, its last chat lines and the reported player's IP addressSo I can deal with cheating and abuseUntil handled, then up to a year
Feedback: what you sent from the feedback page (what it is about and what you wrote), when, and your accountSo I can read your ideas and ask you about themUntil I delete it, or you delete your account
Bans: the banned account, and the IP address it played fromTo keep a banned player outThe account until the ban is lifted; the IP address for 24 hours
IP addressesTo limit how often someone can try a password or flood the gameOnly in the server's memory, except in reports and bans as above
Stats from before accounts (names typed in the old office game)So the old crew keeps what they playedUntil I delete them; linked to an account only when I match a name to it
Server metrics: how many rooms, players and messages, never whoTo keep the game running smoothlyTwo weeks

Your browser also keeps your name, your look and whether you have read the changelog. That stays on your device; the game only reads it there.

No ads, no tracking, no analytics, and nothing is sold or shared for marketing. I send no newsletters; the only emails are the ones you ask for (verifying your email, resetting your password, confirming a new email).

Who else handles it

The legal basis

Your account, logins, matches and the emails are needed to give you the game you signed up for. Reports, bans and the limits on IP addresses are in the legitimate interest of a fair and safe game for everyone.

Your rights

Age

You must be 16 or older to register.

Changes

If this notice changes, the new version is posted here with its date.