Blindtus Logo

Privacy Policy and Legal Notices

Last updated: August 9, 2026

At Blindtus, we value your privacy and aim to provide transparency about how your data is handled. This page also includes important legal notices about the ownership and hosting of this website.

1. Privacy Policy

Playing Without an Account

Playing Blindtus does not require an account. You can use the site anonymously: we do not ask for your name, email address, or any other personal information in order to play. Creating an account is optional and unlocks additional features (see below).

Analytics

We use Plausible Analytics, a privacy-friendly analytics tool, to understand how visitors interact with our site. Plausible collects only anonymous, aggregated data:

  • Number of visitors.
  • Pages visited.
  • Approximate country of origin.

Plausible does not use cookies or collect personal data. For more details, see Plausible's data policy.

Cookies

Blindtus sets no advertising, profiling, or third-party tracking cookies. The only cookies we set are essential to running the site:

  • a session cookie (better-auth.session_token), set only when you sign in to an account. It is not readable by page JavaScript (httpOnly), is limited to our own domain, and expires after 30 days. During a sign-in via Discord, Twitch, or Google, short-lived technical cookies are also used to secure the exchange;
  • a language preference cookie (locale), set when you change the site language so we can restore it on your next visits.

These cookies fall under the exemptions provided by the regulation (authentication and user-expressed preferences): they do not require your consent and serve no advertising purpose. You can delete them at any time from your browser settings; you will simply be signed out.

Local Browser Storage

Some preferences and game data are stored locally in your browser (using localStorage):

  • daily and solo game progress and scores when you play without an account;
  • your preferences, such as audio volume;
  • which screens you have already seen (game introduction, mode rules, announcements, this cookie notice), so we do not show them again;
  • a reconnection token per multiplayer game, which lets you regain your seat in a room after a page refresh.

Apart from that reconnection token, which is sent to our server to restore your seat in the game, this data does not leave your device and is not sent to any server. It can be cleared at any time by clearing your site data.

User Accounts

Creating an account is optional. It lets you keep your statistics, track your daily games, and add friends. When you create an account, we process the following data:

  • your username (publicly displayed) and your email address (never shown to other players);
  • your password, stored in encrypted (hashed) form — we never have access to it in plain text;
  • an avatar you choose: this is an automatically generated robot image (no personal photo is requested or uploaded);
  • your game results (daily and solo games): attempts, scores, and statistics tied to your account;
  • your friends list and any pending friend requests;
  • if you sign in via Discord, Twitch, or Google, the authentication tokens provided by those providers;
  • for each session, the IP address and user-agent, for security purposes.

We use the better-auth authentication service to manage accounts and sessions.

Friends and Visibility

The friends system lets you search for other players by username and send them friend requests. Other players can see your username and avatar, but never your email address. You remain free to accept or decline any request.

Transactional Emails

Emails related to your account (welcome, address verification, password reset, email change, friend requests, account suspension, scheduled deletion and completed deletion) are sent by our own mailing service, hosted on the same infrastructure as the rest of the site. We do not send any promotional emails, and every notification email carries an unsubscribe link.

Administration Accounts

Some accounts have administration rights, reserved for site administrators and granted manually. They are subject to the same data handling as the user accounts described above.

Third-Party Services

To operate, Blindtus relies on third-party services that may process some technical data:

  • The Movie Database (TMDB) for movie and TV show information;
  • Cloudflare R2 for hosting media assets (images, posters);
  • DiceBear for avatar generation;
  • Plausible (analytics), mentioned above.

Use of Data

The data collected is used solely to:

  • operate and secure the website;
  • manage your account, statistics, and friends;
  • improve performance and the gameplay experience;
  • understand general usage patterns.

We do not sell or rent any data to third parties.

Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to access, rectify, erase, restrict, and port the personal data concerning you. You can edit your account information at any time from your settings. For any request, contact us at the address provided below.

Deleting Your Account

You can request the deletion of your account at any time from your settings. Here is how it goes:

  1. Immediately: your account is locked and all your sessions are closed. Signing in is no longer possible.
  2. For 30 days: nothing is erased yet. You receive an email with a link that cancels the deletion and restores the account untouched. After that window, the link stops working.
  3. After 30 days: the deletion becomes permanent and irreversible.

Erased at that point: your username, email address, avatar, password, Discord, Twitch or Google sign-ins, sessions, friendship links, notifications and notification preferences.

Kept, but detached from your identity: your game results (daily games, solo games, multiplayer games) and your media suggestions. They are needed for the game's statistics and leaderboards to stay consistent, and nothing links them back to you any more.

An administrator may also delete an account for breaching the terms of use; in that case the deletion is immediate, with the same effects.

Hosting

Blindtus is hosted by Hetzner Online GmbH, which complies with applicable data protection laws.

2. Legal Notices

Website Owner

Hosting Provider

  • Provider: Hetzner Online GmbH
  • Address: Industriestr. 25, 91710 Gunzenhausen, Germany.
  • Website: https://www.hetzner.com

Limitation of Liability

Blindtus is provided "as is" without any warranties, express or implied. We are not responsible for any damages arising from the use of our website.

External Links

Blindtus may contain links to third-party websites. We are not responsible for the content, privacy policies, or practices of these websites. You access these links at your own risk.

3. Contact

If you have any privacy-related questions or require legal information, contact us at:

Email: [email protected]