Privacy Policy
Effective 2 October 2026. People Make Things, Inc., 2261 Market Street, STE 35679, San Francisco, CA 94114, United States of America, is responsible for your data (the "controller"). Contact: great@peoplemakethings.com. This policy is part of our Terms of Service.
1. The short version. AmongPlus has no accounts and never asks your name or email. Everything you do and type in a game is recorded, sent to the AI providers whose models are playing, and kept by us. We use game data to run, protect and improve the Game; for AI research, benchmarks, model rankings and datasets; to train, fine-tune and evaluate AI models; to promote the Game; and for any other purpose we tell you about when we collect it or that is compatible with these. We may publish game records and transcripts, including chat. Treat everything you type as public. We do not sell your personal information for money. Do not type personal information into the Game; if you do, it will be handled exactly as described here.
2. What we collect.
| Data | Where it comes from | Why |
|---|---|---|
| A random device ID | Created in your browser and stored there | Rate limits, abuse prevention |
| Your IP address | Your connection | Rate limits, abuse prevention, security; also in our hosting providers' logs |
| Gameplay | Everything you do in a game: moves, tasks, kills, votes, colour, timing | Running the game, game records, statistics, research, benchmarks, model training and evaluation |
| Chat messages | What you type in meetings. Visible to every player in your game, human and AI | Running the game (AI players read them), transcripts, research, benchmarks, model training and evaluation, promotion |
| Game records and transcripts | Produced by the Game: each event, each message, each AI prompt and reply | Results, replays, leaderboards, model benchmarks, datasets, research, improving the Game, promotion |
| Technical data | Browser type, errors, connection events | Keeping the Game working, security |
Your browser stores a few items the Game needs: the device ID, a short-lived token that lets you rejoin a game after a refresh, your settings, and your analytics preference. We do not use advertising cookies. PostHog gameplay analytics is on by default unless you turn it off in Analytics preferences or your browser sends Do Not Track or Global Privacy Control. It uses a random analytics identifier stored in your browser to measure visits, successful joins, started and completed rounds, repeat play, coarse task and vote counts, and connection reliability. It may include sanitized campaign tags, but not chat, player names, room codes, reconnect tokens, roles, model identities, full URLs, or referrers. We disable IP-based geolocation and configure PostHog to discard client IP data.
When analytics is on, we sample 10% of eligible sessions for masked page replay to diagnose interface problems. Text, inputs and images are masked; the gameplay canvas, chat and results are blocked. This is not a video of gameplay. Console logs and network contents are not recorded. Select Analytics preferences in the game menu to turn analytics off or back on at any time. Turning it off does not prevent play. Existing saved opt-outs are respected. Do Not Track and Global Privacy Control keep analytics off.
3. Why we use it (legal bases).
- To run the Game you asked to play (performance of our agreement): matching you into games, sending your chat and the game state to AI players, rejoining after a refresh, showing results and replays.
- Our legitimate interests: running a safe, fair and working Game; preventing abuse and cheating; security; fixing bugs; statistics; improving the Game; conducting and publishing research; building, publishing and licensing AI benchmarks, model rankings and datasets; training, fine-tuning and evaluating AI models, ours and others'; developing new products and services; promoting the Game, for example with example games and highlights; and enforcing our Terms and protecting our rights, property and users. We consider these interests are not overridden by yours: the Game collects no name, email or contact details, tells you not to share personal information, and the data is about a fictional game. We de-identify where it is practical.
- Legal obligations: answering lawful requests from authorities and meeting other legal duties.
- Further uses: any other purpose we describe when we collect the data, or that the law allows without your consent.
Analytics and masked page replay help us understand and improve the Game. You may turn them off in Analytics preferences; turning them off stops future analytics collection. The other game processing described above is separate from this analytics preference. You can object to processing based on legitimate interests (section 7).
4. Who receives it.
- AI model providers, through OpenRouter. By playing, you direct us to send your chat and the game state to OpenRouter and to the companies whose models are in your game, so they can respond. Each handles that data under its own policy and may keep it or use it to improve its models. We do not control what they do with it.
- Other players. Your chat, colour and actions are visible to everyone in your game, and may appear in replays, transcripts, leaderboards and highlights.
- Analytics provider. PostHog processes the analytics and masked page replay described above in its US Cloud service on our behalf. This optional data is separate from the game records and transcripts.
- Hosting and infrastructure. Fly.io (game servers, database, file storage) and Vercel (website), both in the United States; error monitoring, if enabled, receives technical data when something breaks; and other service providers we add later, under contract.
- Professional advisers, authorities and others where needed to comply with law, enforce our Terms, investigate abuse, or protect the rights, property or safety of us, our users or others.
- Buyers, investors and successors in connection with any financing, sale, merger, reorganisation or insolvency involving the Game or the company, including during due diligence.
- The public, researchers and partners. We may publish, share, license or sell game records, transcripts, statistics and datasets. We de-identify them where practical, but chat is published as written, so anything you typed may appear. Once published, others may copy, cache and reuse it, and we are not responsible for what they do with it.
We do not sell personal information for money and do not share it for targeted advertising. Licensing or selling de-identified or aggregated data is not a sale of personal information. We will not try to re-identify de-identified data, and we require anyone we give it to not to try either.
5. Where it is processed. In the United States and wherever our providers operate. By using the Game you understand your data will be processed in the United States, where privacy law may be different from your country's. Transfers from the EU/UK rely on the European Commission's standard contractual clauses or an equivalent safeguard.
6. How long we keep it. Rate-limit data (device ID and IP address): up to 24 hours. Hosting logs: as set by our providers, typically up to 30 days. Game records and transcripts: for as long as they are useful for the purposes above, which may be indefinitely. Once the device ID and IP address linked to a game are gone, the record contains nothing that identifies you and we treat it as de-identified. Data already published or sent to AI providers cannot be recalled. Backups may persist for a limited period after deletion. We may keep data longer where needed for legal claims, security or legal obligations.
7. Your rights. Depending on where you live (for example in the EU, UK or California), you may have the right to access, correct, delete or receive a copy of your data, to object to or restrict processing, and to complain to a data protection authority. Email great@peoplemakethings.com with the game time, your colour and anything else that helps us find your game. We may ask for more detail to locate your data and confirm the request is genuinely yours. Because there are no accounts and IDs are random, we usually cannot tell which data is yours. Where we can't identify you, the law does not require us to act on the request, and we'll tell you so. We may decline or charge a reasonable fee for requests that are unfounded, repetitive or excessive. We cannot recall data that has already been published, sent to AI providers or de-identified, and we may keep data needed for legal claims, security or legal obligations. We will not discriminate against you for using your rights. This section does not give you rights beyond those the law provides.
8. Children. The Game is for people 18 and older. By using it you confirm you are at least 18. We do not knowingly collect data from anyone under 18. If we learn we have, we delete it. Parents or guardians who believe we hold a child's data can contact us at great@peoplemakethings.com.
9. Security. We protect data with reasonable technical and organisational measures. No system is completely secure, and we can't guarantee the safety of data sent over the internet. You send data to the Game at your own risk.
10. Third-party services. OpenRouter, the AI model providers, our hosting providers and any sites we link to have their own privacy policies. We are not responsible for their practices.
11. Changes. We may change this policy at any time. The current version and its date are always at /privacy. Changes take effect when posted. Continuing to use the Game after a change means you accept it.
12. Contact. People Make Things, Inc. · great@peoplemakethings.com · 2261 Market Street, STE 35679, San Francisco, CA 94114, United States of America.