Privacy Policy
Last updated: September 17, 2026
Icebreaker Bingo ("the app") is a free, mobile-friendly bingo game for icebreaker activities.
This page explains what information the app collects, how it's used, and who it's shared with.
Who this applies to
The app has three kinds of users, with very different data footprints:
- Hosts sign in with Google to create a set of 24 phrases and start a session.
- Guest hosts tap "Continue as Guest" to start a session with the app's
built-in default phrase pack — no account, sign-in, or personal information involved at all.
- Players join a session via a shared link or QR code — no account or sign-in required.
Information we collect
If you sign in as a host:
- Your Google account email address and a unique account ID, provided by Google when you sign in.
- The 24 phrases you write, AI-generate, or import from a file for your bingo board. A phrase
pack file you import is read and parsed entirely in your browser — it is never uploaded
anywhere as a file, only the resulting phrase text is stored if you save it.
- A record of each session you start (a randomly generated session ID and the time it was created).
If you host as a guest:
- No account, email, or personal information is collected or requested.
- Nothing is written to our database — the share link and QR code for a guest-hosted game are
generated entirely in your browser, and always point to the same built-in default phrase pack.
If you join a game as a player:
- No account, email, or personal information is collected or requested.
- Names you jot down on your board while playing (e.g. who matched a square) stay in your
browser's memory for that game only. They are never sent to or stored on any server, and are
lost when you close or reload the page.
We do not use cookies or trackers for advertising or analytics. The app doesn't run any
analytics scripts.
How we use this information
- Your Google sign-in identifies your host account so your phrases and sessions are kept separate from other hosts'.
- Your phrases are read (without requiring sign-in) by anyone who opens one of your session links, so their board can be built.
- Your email is shown back to you on your own dashboard so you can confirm which account you're signed into.
We do not sell, rent, or use your information for advertising.
Where your information is stored
Host account data (email, account ID, phrases, and sessions) is stored in a
Supabase database with
row-level security, so a host can only read and write their own phrases and sessions.
Guest-hosted games never reach this database at all — there's no guest account or row to
store. The app itself is static and hosted on GitHub Pages.
Third-party services
The app relies on the following third-party services, each with their own privacy policy:
- Google Sign-In — used to authenticate hosts. Google's handling of your data is covered by Google's Privacy Policy.
- Supabase — hosts the database and manages authentication sessions. See Supabase's Privacy Policy.
- GitHub Pages — serves the app's static files. See GitHub's Privacy Statement.
- jsDelivr — a CDN used to load JavaScript libraries (Supabase's client library and a QR code generator).
- Google Fonts — used to load the app's typefaces.
Data retention & deletion
Your phrases and session records are kept until you delete them or ask us to. Since the app
doesn't currently have a self-service "delete my account" option, you can request deletion of
your host data at any time — see Contact below.
Children's privacy
The app is intended for general audiences, including use in classrooms and youth groups.
Players never provide any personal information, and guest hosting involves no sign-in or
personal information either. Signing in as a host with a Google account is not intended for
children without appropriate supervision or consent under applicable law.
Changes to this policy
If this policy changes, the "Last updated" date at the top of this page will be revised.
Continued use of the app after a change means you accept the updated policy.
Contact
Questions about this policy, or requests to access or delete your data, can be raised via
this form:
forms.gle/ensetAvBYwgijehcA.