Privacy Policy

Last updated: 5 September 2026

1. Who controls your data

Leviathan Studios operates No Forking Idea and is the data controller. Contact: [email protected].

2. What we collect

• A randomly generated room code and session token stored in your browser's sessionStorage.
• An optional display name you choose to enter.
• Connection and security metadata, including IP address, processed by Cloudflare and our hosting infrastructure.
• Aggregate operational counts, selected venue and area, and round duration, without room codes, participant names or individual votes. These records are kept for up to 35 days.
• If you consent to analytics, a tab-scoped random visitor identifier for first-party visit counts, plus usage and device information collected by Leviathan DataAF, Google Analytics and Microsoft Clarity.

3. What we do NOT collect

• We do not ask for an account, email address or phone number to use a dining room.
• Optional analytics is only enabled after you choose to accept it.
• Individual swipes stay within the private table until it expires; they are never included in analytics.

4. Why we use data and our legal bases

We process room and session data to provide the service you request. We process limited security and connection data for our legitimate interests in operating and protecting the service. We use aggregate operational counts to monitor reliability and report venue popularity, and optional visitor analytics only with your consent. Google AdSense ad requests are paused across the entire site during publisher review.

5. Retention and recipients

Waiting tables expire after 30 minutes of inactivity; active tables expire after two hours of inactivity. Confirmed results and their table data expire 12 hours after confirmation by default; the host can choose 24 or 48 hours. Private rejoin links contain a seat credential: share one only with yourself. Browser consent choices remain until you change them or clear site data. Cloudflare hosts the service. If you consent to analytics, Leviathan receives limited product usage through its DataAF service, while Google and Microsoft receive analytics data under their own privacy terms and may process it outside the UK; their applicable transfer safeguards apply.

6. Your rights

Depending on where you live, you may have rights to access, correct, erase, restrict or object to processing, receive portable data, and withdraw consent. Contact [email protected]. UK users may complain to the Information Commissioner's Office; EEA users may complain to their local supervisory authority.

7. Cookies and similar technologies

See our Cookie Policy for the storage and third-party technologies we use and for a control to change your choice.

Contact: [email protected]