Privacy policy
Effective November 6, 2026
This policy covers the Country Call Party room service, its phone controller website and the Fire TV party edition. TV party play, including single player, needs Internet access. The other Country Call editions may have additional features and privacy notices.
What we use to run your party
You choose a nickname; you do not need to give us your real name, email address or an account password. We receive your nickname, a random host or phone-seat credential, room code, game settings, calls and connection requests. The room database stores credential hashes, nicknames, table membership, country and category deals, calls, scores, timing and the state needed to authenticate turns, prevent duplicate actions and reconnect your table. Short-lived connection tickets let your phone receive live updates.
The host screen and other players at your table see nicknames, submitted calls and scores. Answer values and actual ranks remain hidden until the reveal. Room codes invite people into the party, so share them only with people you want to play with.
What stays on your devices
The phone website saves your last nickname and a random credential for each joined room in this browser's local storage. They remain until you clear this site's data; a credential stops granting access when its room expires. Closing a tab does not remove this stored information. Browser history may also contain the room link.
The Fire TV app keeps a random host credential encrypted with Android Keystore and remembers the last room so it can reconnect. Its Android backup settings exclude app credentials. Clearing the TV app's data resets that local host identity and prevents it from recovering an existing party. The app also caches shared game content. Close the party before resetting the app.
The TV can also keep a small pending purchase-fulfillment queue containing receipt IDs, the associated app-specific Amazon user ID and product ID so interrupted acknowledgements can be retried. These entries are removed as the queue is processed or when you clear the app's data. This queue does not independently grant access to paid packs.
Hosting and connection diagnostics
Cloudflare hosts the controller website, game content and room service. It processes IP addresses and request metadata to deliver and protect these services. We use the connecting IP and credential hashes to limit excessive creation, join and game requests. IP addresses are not written into the party game database.
Our service diagnostics record action types, response status, request duration and host connection timing. Our custom event fields omit nicknames, credentials, room codes, raw request bodies and IP addresses. Cloudflare may attach infrastructure request metadata to log records. Query-bearing requests, including WebSocket connection URLs that carry a ticket, do not generate our custom request logs. TV and browser diagnostic messages help troubleshoot connectivity; the controller does not upload its browser console.
The Fire TV store edition does not include advertising SDKs, display in-app advertisements or enable Country Call's optional gameplay analytics. The phone controller does not include advertising or third-party analytics scripts. Amazon's distributed app can still communicate with the Appstore and collect program analytics under Amazon's policies, including when Amazon DRM is not enabled. Your browser or operating system may also process information under its own policies. See Amazon's privacy notice and Cloudflare's privacy policy.
Fire TV category purchases
Health, Everyday Atlas and World in Motion are free in the Fire TV edition. Other category packs are permanent Amazon in-app purchases, subject to Amazon refunds or cancellations. The TV host owns the selected paid pack; people joining with phone browsers do not need to buy it. Amazon handles payment. We do not ask for payment-card details.
To verify and restore ownership, the TV sends its current app-specific Amazon user ID, marketplace and purchase receipt IDs to our service. Our server checks receipts with Amazon's Receipt Verification Service. A separate purchase database stores the Amazon user and receipt IDs, product and pack IDs, purchase and cancellation dates, verification status and verification times. A host purchase session connects verified ownership to the TV's random host identifier. These records do not depend on optional analytics or campaign saves.
Changing the Amazon account or refreshing its session clears the previous session's paid access until the current account's receipts are verified. Amazon's SDK and Appstore may also cache purchase information on the device. Purchase ownership currently applies to the Amazon Fire TV edition; it is not automatically linked to an iPhone, Mac, web or Steam account.
Retention and ending a party
Party room data is scheduled for deletion 12 hours after the host creates the room. This includes the room's stored host and player identifiers, nicknames, calls and scores. End Party stops access to the game but does not immediately erase the stored room. Cleanup runs through the service's scheduled alarm and can be delayed by a service interruption.
A party pauses after 45 seconds without the host and closes after 5 minutes without the host. These connection limits do not replace the 12-hour deletion schedule. Refreshing or closing a phone page does not remove its seat from an active party.
The 12-hour room cleanup does not delete purchase ownership. Purchase records have no fixed automatic expiry: we keep them to restore verified purchases, apply refunds and avoid granting canceled receipts again. Inactive host purchase-session bindings are scheduled for removal 30 days after their last account or receipt refresh. Deleting local TV data removes that device's host identity but does not cancel Amazon purchases. Use Restore Purchases to verify them again. Contact us for access or deletion requests about our purchase records; Amazon handles its own account, payment and refund records under its policies.
Operational logs are separate from room data. Our service uses Cloudflare Workers Logs, whose documented retention is currently up to seven days depending on the service plan. Cloudflare's database recovery system supports recoverable history for up to 30 days. These are provider retention windows, not the live room's 12-hour lifetime. Recovery history is not used to show expired parties in normal gameplay. See Cloudflare's log retention and database recovery documentation.
Your choices and privacy requests
Use a nickname that you are comfortable sharing with the table. The host can select End Party to close the room. To remove the phone's saved nickname and credentials, clear site data for this website in your browser. To remove local TV data, use the TV's application settings to clear Country Call's data or uninstall it. Clearing local data does not immediately delete the server room.
For access, correction, deletion or other privacy questions, email b@aught.digital. Include the approximate time and nickname for the party if relevant. We may need enough information to locate the record and verify your request. Never send a host credential, phone credential, connection ticket or purchase receipt ID. If you contact support, we use your email and message to respond and resolve the request; those messages are separate from the room's automatic deletion schedule.
Adult topics
After Dark is an adult-topic category covering sexual behavior, contraception and clinical anatomy statistics. Choose it only for a group of adults comfortable with those topics. The Fire TV store edition shows the host an adult-content confirmation before opening that party. This confirmation does not collect a date of birth, identity document or age-verification record.
Contact and changes
Country Call support and privacy contact: b@aught.digital. We will update this page and its effective date when these practices change.