Privacy Policy

Every round you finish is recorded: the category or pool you played, the names shown, the picks made, and your country, which is worked out from your connection (we never store your IP address). Rounds you leave unfinished are recorded the same way. That’s what the leaderboards count. When you share a round with a friend, we also store it so the link works. Shared rounds are automatically deleted after 30 days, and the leaderboards aggregate the same rolling 30-day window.

To see how often people come back, your browser gets a random, anonymous play ID, kept in a cookie. The rounds you finish are filed under that ID and grouped into play sessions. Unless you sign in to Plus (see below), it isn’t linked to your name, your email, or anything else that identifies you. We keep the round-by-round record for 90 days, and the totals (how many rounds and sessions) until 400 days after you last played, then delete them.

We keep the picks themselves permanently, in anonymized form, to follow how opinions change over time: without your play ID, with the time rounded to the hour, and with no location finer than the country. Each pick also carries broad ranges describing your play so far: roughly how long since your first round, how many rounds you’ve played in total, how far into the current session you are, and whether you subscribed to Plus at the time. They are ranges, never exact counts. Once the 90-day record above is gone, nothing links them back to any player. Statistics that don’t relate to any one player may also be kept.

Your saved settings (the pool and category you last played, plus a short list of the names you were recently shown so the game can avoid repeating them) stay in your own browser. So does the count of free rounds you’ve played today in Random, Pop Stars, Models, Sports, K-Pop, TV and Influencers. The pool you play is sent along with each round, as described above.

To sign in, you give us your email address and we email you a one-time code. There is no password. We use your email address to sign you in and to contact you about your account or your subscription. The codes are sent through an email delivery provider acting on our behalf.

When you sign in, the anonymous play ID on that browser is linked to your account, so your personal stats can include the rounds you played there before signing in. Each browser you sign in on is linked the same way. Signing out gives that browser a new play ID, so rounds played there afterwards aren’t linked to you.

Your stats are worked out from your linked rounds from the last 90 days, compared with the same anonymous 30-day totals anyone can see on the leaderboards. Only you can see them. Your account is kept until you delete it; the round-by-round record behind your stats still expires after 90 days, as described above.

Plus payments are handled by Stripe, which processes your card details under its own privacy policy. We never see or store your card number. We keep your Stripe customer and subscription IDs, your subscription’s status and price, and when the current period ends, so we know whether you have Plus. Stripe keeps payment and invoice records for as long as tax and accounting law requires, including after you delete your account.

We use a third-party analytics service to understand how the game is used. Nothing it collects identifies you personally. Our analytics and hosting providers process data only on our behalf to run the site, and we do not sell data to anyone.

If you sign in, the analytics service links your activity on that browser to a random identifier derived from your account. It never receives your email address.

You can clear cookies and site data in your browser at any time. That removes the anonymous analytics identifier, your anonymous play ID and your saved preferences, and your next round starts under a new ID. Shared rounds delete themselves after 30 days.

You can cancel your Plus subscription, or delete your account, at any time from your account page. Deleting cancels any subscription straight away and deletes your account, your email address and the rounds linked to it. The anonymized picks described above stay, because they were never linked to you.

Fuck Marry Kill is run by Formfield, a business in the Netherlands, which is responsible for the personal data described in this policy. For questions about this policy or about your data, email formfieldformfield@pm.me.

If this policy changes, we’ll update this page and the effective date above.