Privacy Policy

Last updated: July 2026

This describes what Caught Up collects, why, and who it's shared with. We built the Game deliberately without traditional user accounts or passwords, so there's less of your data for us to hold in the first place.

What we collect

• Email address — only if you buy the app or a pack, or use it to log in. Used to send purchase confirmations and one-time login codes, and to restore your purchase on a new device. We store a one-way cryptographic hash of your email, not the plaintext address, alongside your purchase record.
• Profile picture and display name — if you add one, it's shown to the other people in your game session for the life of that game.
• Gameplay content — the cards played and the in-game replies generated during a round, held only for the duration of the game and deleted automatically (see Retention below).
• Payment details — collected and processed entirely by Stripe on its own hosted checkout page. We never receive or store your card number.
• Basic technical data — IP address, used transiently to prevent abuse (e.g. rate-limiting repeated code attempts). Not linked to your identity or retained in a searchable log.

How we use it

Solely to operate the Game: processing your purchase, emailing login codes and receipts, running the game session you're in, and preventing abuse of the service. We do not use your data for advertising, and we do not sell it.

Who we share it with

We use a small number of service providers to run Caught Up, each only for the purpose below:

• Stripe — payment processing.
• Resend — sending login-code and purchase-confirmation emails.
• Anthropic — generates the in-character replies during gameplay, based on the cards played in your session.
• Vercel — hosting, and temporary storage of active game state.

None of these providers are permitted to use your data for their own purposes.

Retention

Game/room data is automatically deleted after 48 hours of inactivity. Purchase records (the hashed-email entitlement that lets you restore access) are kept so your purchase isn't lost — email us if you'd like that record deleted, understanding that you'd need to repurchase or re-redeem a code to restore access afterward.

Local storage

Your device keeps a small amount of data in browser localStorage — your unlock tokens, display preferences, and a room code if you're mid-game. This never leaves your device except when sent to our server to verify a token or sync game state. We don't use third-party advertising or tracking cookies.

Children's privacy

Caught Up is not directed at children under 13, and hosting a game (the paid action) is intended for adults. The Family Function pack is written to be appropriate for teens playing alongside adults, but an adult is expected to be the one purchasing and hosting.

Your choices

You can clear your local device data at any time by clearing your browser's site data for app.caughtupgame.com. To request deletion of your purchase/entitlement record, email us at the address below.

Changes

We may update this policy as the Game changes. Material changes will be reflected by an updated "Last updated" date above.

Contact

Questions about your data? Email support@caughtupgame.com.