Privacy Policy

Last updated 2 August 2026

The display name

You can set a display name in the app's Settings screen, or in the name box on this site before starting or joining a match. It is optional. If you leave it empty you are shown to everyone as "Player 1", "Player 2" and so on.

• What it is used for. Showing who occupies which seat, in the lobby roster and on the board. That is the only use.
• Who can see it. The other players in the same match, and anyone holding a link to that match.
• How it is handled. Control characters and text-direction override characters are stripped, surrounding whitespace is trimmed, and the result is capped at 16 characters. Nothing else is done to it.
• Changing or removing it. Edit it at any time. Clearing it removes it from your device, and your next match shows the "Player N" fallback instead.

When you send a game invite from Messages, your display name also appears in the message text ("Alex started Backgammon"). If you have not set one, the invite says "A friend" instead.

What is not collected

None of the following is requested, read, derived, or stored, anywhere in the app or on this site:

• No account, sign-in, email address, phone number, or password.
• No contacts, photos, location, calendar, microphone, or camera access.
• No advertising identifier (IDFA), no App Tracking Transparency prompt, and no tracking domains. The app's privacy manifest declares tracking as false with an empty tracking-domain list.
• No analytics or crash-reporting SDK, no advertising SDK, no social login, no third-party service of any kind. The Swift game package and the web worker both ship with zero runtime dependencies.
• No advertising and no in-app purchase. Version 1 is free and shows no ads.
• Nothing is sold, rented, or shared with anyone for their own purposes, because there is nothing to share.

The content of your Messages conversations is never visible to MimiGames. The app runs as an iMessage extension and only ever sees the game bubbles it created itself.

What is stored on your device

Three things, all of them local to the device and none of them sent anywhere except as described below:

• Your display name, so you do not have to retype it. In app preferences on iOS, in browser local storage on the web (the key mimigames.profile.name).
• Per-match capability tokens. A token is a random 128-bit value that proves the holder may act on one seat of one match. It is a permission, not an identity: it says nothing about who you are, and it never leaves the match it was minted for. The app keeps yours in app preferences; on the web it stays in the fragment of your match link rather than in browser storage.
• A per-match flag recording that a match fell back to offline play on this device, so it is not accidentally resumed against the server.

Deleting the app, or clearing this site's browser storage, removes all of it.

What is stored on the server

Matches that are played across devices are held on a match server running on Cloudflare Workers. Each match gets its own isolated Durable Object with its own SQLite database, holding exactly one match record:

• A random match identifier, and which game is being played.
• The game state itself: board positions, dice, cards, scores, whose turn it is, and the shuffle seed.
• One capability token per seat, plus the join token an invite link carries. Redeeming it fills one open seat; once the match is full it is refused.
• Per seat: whether it is claimed, whether the player has readied up, whether they left the lobby, and the optional display name.
• Created and last-updated timestamps, whether the match is a live lobby or a turn-by-turn one, and whether anyone resigned.

That is the whole record. IP addresses, device identifiers, and anything else about who you are do not appear in it.

How long it is kept

Every match deletes itself. There is no archive and no backup copy kept afterwards.

• Finished matches (someone won, the game drew, or someone resigned) are deleted about 48 hours after they end. The delay only exists so both players can look at the final board.
• Lobbies that never start (a live table where not everyone readied up, or a match set up for more than two players that never filled) expire 24 hours after they were created, and are deleted when the match's cleanup timer next runs. A two-player match is live from the moment it is created, so an unaccepted two-player invite is covered by the idle rule below rather than this one.
• Matches in progress that simply go quiet are deleted after 30 days with no moves. Every accepted move pushes that deadline out, so an active match is never collected out from under you.

Deletion removes the entire match record, including any display names in it.

What other players can see

Players in a match can see each other's display name (or the "Player N" fallback), which seats are claimed, who has readied up, whether a player currently has the match open, and the public board.

Hidden information stays hidden. For games with concealed cards, the server redacts the state separately for every recipient before sending it: your hand, the undealt deck, and the random-number generator state are removed from the copy your opponents and any spectators receive. Nobody is trusted to hide it client-side.

Links, tokens, and who can join

An invite link is a capability. Anyone who has the link can take an open seat in that match, so share it only with the people you meant to play. Once every seat is filled the link no longer admits anyone. Match pages ask search engines not to index them.

Tokens are deliberately kept out of the parts of a URL that get recorded. On the web they travel in the URL fragment, which browsers never send to the server, and live match connections pass them in the connection handshake rather than the address. Match pages are also served with a no-referrer policy, so opening a link from one does not hand your match address to another site.

Hosting and server logs

This site and the match server run on Cloudflare, which is the hosting provider and processes requests on our behalf. As with any website, Cloudflare handles the ordinary technical records that serving a request involves, such as the requesting IP address, the address requested, and a timestamp. Those are Cloudflare's own platform records, kept under Cloudflare's terms rather than ours. The separate request log we switch on for the match server keeps only 5 percent of requests, and we read it for debugging.

Our own code logs only application errors, and those entries contain no IP address, no display name, and no token.

Starting a new match is rate limited per network address to keep the free service from being abused. That check happens at Cloudflare's edge and the address is used only as a short-lived counter key. It is never written into a match record.

Children

MimiGames is not directed at children under 13, and nothing in it knowingly collects personal information from them. The only field anyone can type is the optional display name described above. There is no account, no chat, and no way to send another player free text beyond that name.

Your choices

• Play without a display name and stay "Player N".
• Change or clear your display name at any time in the app's Settings screen or in the name box on this site.
• Finish or resign a match to start its 48-hour deletion clock, or simply stop playing and let it expire.
• Delete the app, or clear this site's browser storage, to remove the display name and any tokens held there. On the web the match link itself carries a token, so clear it from your browser history too if you no longer want it to work.

Changes to this policy

If what the software does changes, this page changes with it, in the same release. The date at the top always reflects the current version.

Contact

MimiGames is made by Alex W-F and served from alex-wf.com. For questions about this policy, or to ask for a match to be deleted, email support@alex-wf.com.

Back to MimiGames · Support