Who runs Rent Party?
Rent Party is run by the Rent Party team, and in this policy “we” and “us” mean that team. This policy covers the website at rentparty.aoneahsan.com and the Rent Party app for Android.
Rent Party’s operator, responsible for your data under this policy, is Ahsan Mahmood, an individual (sole trader) based in Pakistan.
Can you play without an account?
Yes. Pass-and-play and CPU games work without signing in. They’re saved only on your device, in your browser’s storage or the app’s own storage. We never receive those saves.
Error reports and analytics can still run while you play as a guest.
Guests can use most of the AI features too: the help assistant, trade reads, fresh table-talk lines and voice recordings. Not recaps. A recap is written only for a finished online game, and online play needs an account. What do we keep when a guest uses them? covers the one thing we count for guests.
Does Rent Party show ads?
No third-party ads. A small panel can promote our own other apps, at the foot of the home, results and Help pages and beside the lobby while a room fills up. It’s picked from our own list, and the only thing about you it uses is whether you’re signed in.
What do we get when you sign in?
Your basic Google profile, including your name and email address. Google is the only way to sign in to Rent Party, and your Google password never reaches us.
From that and the choices you make, your account keeps these:
| What we keep | What it’s for |
|---|---|
| Your email address | Signing you in and sending you Rent Party emails. If you pay by card, it also goes to Polar, our payment partner. Other players never see it. |
| Your display name | It starts as your Google name, and you can change it to a name of 2 to 24 characters. Anyone can see it. |
| Your avatar and equipped items | Your avatar from Rent Party’s own set, and the token, board, dice skin and frame you’ve equipped. Anyone can see them. |
| Your time zone | Making quiet hours start and end at your local time. |
| Your alert choices | Whether push and email alerts are on, and your quiet hours. |
| Your keyboard shortcuts | Bringing your key bindings with you to another computer. |
| Your theme and appearance choices, and which one-time notices you’ve seen | Bringing the way Rent Party looks with you to another device, and never showing a notice twice. |
| Your table-talk choices | Bringing your choices for CPU characters’ spoken lines, speech bubbles and fresh lines with you to another device. |
| Your leaderboard choice | Whether your name can appear on the leaderboard. |
| Your invite code | The code in your invite link. |
Your account also holds what the game adds as you play: coins, your collection, badges, daily-challenge progress, stats, your rating and your plan. If the team has muted your chat, locked your name or suspended your account, that’s kept on your account too, with the team’s reason, as the Terms describe.
What are coins?
Coins are in-app only. They can’t be withdrawn, cashed out or exchanged for money, and they have no cash value. Coin packs follow our Terms.
When you get a coin pack, we keep the pack, the coins it added, the amount, and our payment partner’s order number, so your coin history stays right.
What do we store when you play online?
Our server, where online games run, stores each room and its seats, every move including trades, bids and pause votes, and the result with any rating and coins it awarded. That move record is what plays back a replay, and it lets us check that a game was played fairly.
Chat you type in a room is kept for 7 days, then deleted. Emotes and quick-chat phrases are never stored.
While you’re in a room or a game, the others at your table can see whether you’re connected and ready.
What else do we store?
Only what a feature needs, when you use it:
| What | When we store it |
|---|---|
| A cloud save | When you keep a pass-and-play or CPU game in the cloud. It holds the game itself, including the seat names you typed, and a random id for the device that saved it. |
| A CPU game’s moves | When you finish a CPU game while signed in. Our server replays the moves to check the result before it awards coins. |
| A spectator seat | When you open a game’s Watch link, so the table can see who’s watching and the host’s spectator limit can be counted. |
| Friends and blocks | When you add a friend, answer a friend request or block someone. |
| Messages to friends | When you send a friend a message. It holds your words, who sent them and at what time, and when each of you last read the conversation. Only you and that friend can read it, unless one of you reports a message. If you delete your account, the messages you sent are deleted. Your friend keeps the messages they sent you until those are cleared. |
| A report | When you report a profile, a chat message, a message from a friend or a room. It keeps a copy of what you reported, so the team can review it after the chat is cleared. |
| Your inbox | When we send you a notification, such as a turn alert, a game invite or a message from a friend. |
| A push address | When you turn on alerts on a device, along with that device’s random id and the browser or app description it reports. |
| An email log entry | When we send you an email. It records which email and whether it was delivered, and it holds no email address. |
| Payment records | When you buy a plan: the plan, seats, months, amount, currency and payment method, plus your plan history. A payment you report adds the reference you gave and any note. A card payment adds which payment partner took it, that partner’s order reference and our own reference for the checkout. A returned payment stays on record, marked as returned. We never receive or store your card details. |
| A friend invite | When you join through a friend’s invite. We record who invited you, and once your email address is confirmed we tell them your display name. If you delete your account, that invite stays in their list of invites with no name on it, marked as canceled because the account was deleted. |
| A Family invite | When you invite someone to your Family plan. We keep the email address you entered with the invite. |
| Your message to us | When you write to us from the Help page. We keep the message and, if you’re signed out, the email address you give us so we can reply. |
| A voice recording | When you finish a recording. It holds the audio file, its length and size, what your browser heard of it, what our transcription service heard, and the question, message or trade offer it became. |
| A game recap | When a player in a finished online game presses Write the recap. It holds the recap’s title, its text and which player asked for it. Every signed-in player seated in that game reads the same one. |
| Your AI allowance counts | When you use an AI feature while signed in: how many of each you’ve used that day, that month or in that game. |
| A record of each AI request | When the help assistant, a recap, a trade read, fresh lines or a voice recording asks Anthropic for words. It holds which feature, the model and level, how much it used, whether the reply was cut short or refused, when, and your account’s random id; a guest’s record has no id and is marked as a guest’s. It never holds your question, your words or the reply. |
| A guest’s daily count | When a guest uses an AI feature: a one-way hash made from the network address they connect from, and how many times each feature was used that day. |
| A community post or comment | When you post or comment in Community. It holds your words, who it’s shared with, any table record or game it links to, and who liked it. Deleting it takes it out of every feed at once. |
| A table record | When you keep a record of a game played on a real board. It holds the names typed for each seat, the deeds, bucks and the box, the people you’ve added, and a log of every change and who made it. |
| Your reputation and daily streak | When you play online and when you sign in each day. It counts your finished and left online games, connection drops in live games and the days you sign in, and works out your reputation and your streak from them. |
| A match search or a challenge | When you look for a match or challenge friends. A search clears when you find a match or stop looking, and a challenge keeps who sent it, who it went to and whether it was taken up. |
| Coins you send | When you send coins to another player: who sent them, who got them, the amount, the fee and when. A transfer PIN is kept only as a one-way hash, never the digits. |
We also count daily totals, such as how many game moves and emails the service handled, so we stay inside our server limits. Those totals aren’t linked to anyone.
What can other people see?
Anyone can see your public profile, even without signing in: your display name, avatar, equipped items, rating, number of rated games and badges. Search engines are asked not to index profile pages.
The people at your table see your moves, your chat in that room and whether you’re connected. If the host allows spectators, signed-in people who have the game’s Watch link can follow your moves as well, but they can’t see the chat in your room. Replays can be watched only by the people who played or watched that game.
A recap you ask for is read by every signed-in player seated in that game, and what the AI features send covers what goes into one. Nobody at the table ever hears your recording or sees its words; what happens to a voice recording has the rest.
The leaderboard leaves you out until you switch it on. Once it’s on and you’ve played 5 rated games, it shows your display name, token, rating, rank and number of rated games, and anyone can read it without signing in. The team can also take your name off the leaderboard. The Terms cover that.
If you host a public room, anyone signed in can see it in the room list while it waits to start. A friends-only room shows there only to your friends. Anyone signed in can also find your public profile by typing your invite code or the first 3 or more characters of your display name, unless one of you has blocked the other.
Other players never see your email address or the stats on your profile, such as your wins and the rent you’ve collected. A result card you share goes wherever you send it.
A post or comment shared with everyone can be read by anyone signed in; one shared with friends reaches only your friends. Your display name and token show beside it. Someone you’ve blocked, or who has blocked you, never sees it.
While you’re signed in, other signed-in players can see you on Online now, unless you turn off “Show me on Online now” in Settings. Your reputation shows on your profile; only you see how it’s worked out.
A table record is seen only by its owner and the people they add to it. When you send coins, the other player sees your display name in their coin history and their inbox.
What can our team see?
The Rent Party team can see account data and uses it to confirm payments, review reports, fix stuck games and answer your messages. They can also read the chat in any room while it’s kept, to handle reports. They don’t read messages between friends. A message you report reaches them only as the copy in your report.
Every change the team makes to an account is recorded in our audit log. So is every time a team member opens a read-only window on your account, through the team’s own pages and for a limited time. They can’t act as you. The audit log is kept for as long as Rent Party runs.
Which services see your data?
| Service | What it does for Rent Party |
|---|---|
| Supabase | Hosts our database, sign-in and server functions, including the live connection during online games. Everything we store about your account is kept there. |
| Runs sign-in with Google. On Android, Firebase Cloud Messaging delivers push alerts. | |
| Your browser’s push service | Delivers alerts to a browser where you turned them on. |
| Cloudflare | Hosts the website. On the help form, and before each guest request that spends an allowance, its Turnstile check confirms that a person is there. |
| Anthropic | Writes the help assistant’s answers, game recaps, trade reads, fresh table-talk lines (only if you turn them on) and what a voice recording becomes. |
| Groq | Turns a voice recording into words. |
| Your browser’s maker (Google in Chrome, Apple in Safari, Microsoft in Edge) | On the website, where your browser offers it, its own speech recognition shows your words while you record, and it can send what you say to its maker to do that. |
| Polar | Takes card payments for plans on its own page, as the seller of record, and emails the order confirmation. |
| Our own email and file service | Sends every Rent Party email, and keeps each voice recording as a private file until it’s deleted. |
| Our own update service | Delivers new versions of the game’s files to the Android app. |
| Sentry | Receives a report when something breaks: what failed, and where. |
| Google Analytics | Counts visits and actions. |
| Amplitude | Shows what happened, in what order, during a session. |
| Microsoft Clarity | Records how a page was used, such as clicks and scrolling, and can replay a visit with the page’s text hidden, so we can see what went wrong. |
When your device connects to any of these services, the service sees your device’s IP address, as every website does, and may keep it in its logs.
If you pay by card, we send Polar your email address, your account’s random id and our own reference for the checkout, along with the plan, seats and months you chose. Polar collects what you enter on its page, such as your name, billing address and card details.
We don’t give refunds for plans. “Can you get a refund?” in the Terms has the full answer.
When you’re signed in, analytics events and error reports carry your account’s random id. Analytics events never include your email address, your name or anything you type. Clarity’s replays show a page’s layout and where you clicked, tapped and scrolled; its text is replaced with dots on your device and is never sent to Clarity. Error reports never include your email address.
What do the AI features send, and where?
Each AI feature sends a short list of things, the same list every time, from our server to Anthropic. For a voice recording, the audio also goes to Groq. It happens only when you ask: you press that feature’s button or, for fresh table-talk lines, turn them on in Settings. Until then, nothing goes.
This is exactly what each one sends:
- The help assistant: your question, up to 500 characters, with the text of up to three pages from the Rent Party docs and the Help page that come closest to it. It answers only from those pages.
- A game recap: a summary of one finished online game. A recap is written once; after that nobody’s press sends anything. The summary has the mode, the rounds, who won and how it ended, each seat’s rank and net worth, whether each seat was still in at the end, the rent each seat paid and collected, deeds bought, auctions won, trades made, hotels built, trips to Jail, who went out and the biggest rent of the game. Seats are named “Player 1”, “Player 2” and so on, or by the CPU character’s name. Never by a display name.
- A trade read: the numbers the game works out from the trade you’re building. For each side, that’s its seat number, its bucks before and after, and the color sets it completes or breaks up. For each deed that changes hands, it’s the deed’s place on the board, its kind (street, station or utility), its color set, its price, whether it’s mortgaged, which way it goes and its rent before and after. Then come the Jail passes each way and anything that makes the trade impossible as written. The page adds the names of those deeds and color sets. Nothing about the dice or the card decks goes with it.
- Fresh table-talk lines: for each moment, which CPU character it is, its seat number and what just happened to it, in a fixed phrase such as “buys a street or a utility”, “pays rent to another player” or “is sent to Jail”, with a one-line sketch of each character in those moments. No player’s name. No deed’s name. No amounts.
- A voice recording: Groq gets the audio file and nothing else about you. Anthropic then gets what your browser heard and what Groq heard, along with the page you recorded on: help, a message to the team or a trade.
None of these requests carries your account’s random id, your email address or your name; our server sends every one of them, so Anthropic and Groq see our server’s address and never your device’s. Our own email and file service also gives Rent Party its AI credit. For each request, it’s told only the model, how much was used and when.
We don’t keep your question, its answer or a trade read. A recap stays with its game. A recording is deleted within 24 hours: what happens to a voice recording has the details.
When CPU characters read their lines aloud, a voice on your browser or phone reads them, and nothing is sent for that. With no such voice, their bubbles show without sound. Settings has a switch for speaking aloud, one for the speech bubbles and one for fresh lines.
What happens to a voice recording?
We keep a recording as a private file, use it for one thing and delete it within 24 hours, or sooner if you delete it yourself. A recording stops at 2 minutes.
The file is stored as a private file, with no public web address, by our own email and file service. Beside it, our server keeps what your browser heard of it and what our transcription service heard.
Its one use is turning what you said into a question, a message to the team or a trade offer, which you check before anything is sent. What you send from it is then kept the way that thing always is: a question to the help assistant isn’t kept at all, a message to the team joins your support thread, and a trade offer becomes part of the game’s record. As a guest, a message to the team also needs your email address, the same as on the Help form, so the team can reply.
Other players never hear it. They never see its words either. The microphone is used only while you record; the Permissions page says when.
We delete the recording, both transcripts and what it became, within 24 hours of recording it. If our own email and file service can’t be reached at that moment, we keep trying until the file is gone. You can delete it sooner from the recording sheet, with Delete this recording under what we heard. Deleting your account deletes them too.
What do we keep when a guest uses them?
A hash a day, and the same request record we keep for everyone, with no id on it. To count a guest’s daily allowance, our server makes a one-way hash out of the network address you connect from, that day’s date and a secret that only our server holds. It never stores the address itself. The hash is a scrambled value that doesn’t show the address, and it changes every day. We keep it with a count of how often each feature was used, until that day ends in UTC, then delete it within the hour.
When a guest’s request asks Anthropic for words, we keep the same record of it as for anyone else: which feature, the model, how much it used and when, marked as a guest’s, with no id, for 400 days.
A guest’s recording belongs to a one-time code their device gets back once, and we keep only a hash of that code. That recording is deleted within 24 hours too. Each guest request that stores a recording or asks for words passes Cloudflare’s person check first.
What’s stored on your device?
Rent Party keeps a few things on your device, in your browser’s storage or the app’s own storage: your saved games, your settings and theme (your table-talk choices among them), your keyboard shortcuts, a random id for the device and your sign-in session. That session keeps you signed in.
Google Analytics, Amplitude and Microsoft Clarity use cookies or similar storage to count visits and sessions.
They load on every visit. That’s how we learn which pages and features people actually reach for, between the first roll and the last rent payment, so we can keep making the game better. No switch. The note at the foot of your first page says so once.
Clearing your browser’s site data, or uninstalling the app, deletes games saved only on that device. A game you’ve kept in the cloud isn’t affected.
How long do we keep your data?
Your account stays until you delete it. Here’s how long everything else lasts:
| What | How long |
|---|---|
| Chat messages | 7 days |
| Messages to friends | Until the chat clears, 7 days after each message |
| Inbox notifications | 90 days after you read them, or twice that if you never do |
| The move record of a finished online game | 30 days after the game ends, or longer while a saved replay of it lasts |
| A saved replay | 30 days if you saved it on Free, 365 on Pro and 365 on Family |
| A room that never started | Until its lobby closes, 24 hours after it opened, or 1 day after it’s canceled |
| A push address | Until you sign out on that device, or the push service reports that it no longer works |
| The email log | 90 days |
| The alert delivery queue | 7 days |
| An unaccepted Family invite | 30 days after it expires |
| A closed support thread | 365 days after it closes |
| Daily usage totals, linked to no one | 400 days |
| Live game messages between devices | 3 days, cleared by Supabase |
| A voice recording, its transcripts and what it became | Deleted within 24 hours, or sooner if you delete it |
| A guest’s daily count | Until that day ends (UTC), then deleted within the hour |
| Your AI allowance counts | A day’s count for 2 days after that day, a month’s for 2 months after that month, and a game’s for 2 days after the game ends, or within the hour if the game is deleted. All of them go at once if you delete your account |
| Cloud saves | Until you delete them or your account |
| Payment records | While your account exists, then only as long as tax law requires |
| Finished online games and their results | As long as Rent Party runs, with your seat shown as “Former player” after you delete your account |
| A game recap | As long as its game, so as long as Rent Party runs |
| A record of each AI request | 400 days, with no link to you after you delete your account |
| Connection drops in live games | 90 days |
| The days you signed in | 400 days |
| A post or comment you’ve deleted | 30 days after you delete it |
| A table record | Until its owner deletes their account |
| Coins sent between players | As long as Rent Party runs, so the other player’s coin history stays right. After you delete your account, it shows “Former player” in place of your name |
| Reports | As long as Rent Party runs |
| The audit log | As long as Rent Party runs |
Deleting your account changes some of this: Delete your account lists what goes at once, what stays, such as the payment records tax law requires, and what happens to your sign-in record.
How do we protect your data?
Each table in our database checks who’s asking before it answers, so other players can’t read your saves, your inbox or your payment records. Game state, coin balances and ratings change only on our server, never from anyone’s device.
Connections to Rent Party use HTTPS. No online service can promise perfect security, and we don’t claim to.
What can you change or delete?
- Change your display name, avatar and equipped items on your profile, unless the team has locked your name after a report.
- In Settings, turn push and email alerts on or off and set quiet hours.
- Show your name on the leaderboard with the switch on your profile; it’s off until you turn it on, and you can turn it off again whenever you like.
- Remove a friend, or block someone, from Friends.
- Delete a cloud save or a saved replay whenever you like.
- In Settings, turn off CPU characters speaking aloud or their speech bubbles. Fresh table-talk lines have their own switch there.
- Delete a voice recording from the recording sheet. Otherwise it’s deleted within 24 hours.
- In Settings, choose whether you show on Online now, and set or remove your transfer PIN.
- Delete your own posts and comments in Community, and remove people from a table record you own.
- Download a copy of your data from Settings.
- Delete your account from Settings.
Payment, plan, final-call and deletion emails can’t be switched off. Announcements always reach your inbox. They arrive by push or email only if you’ve turned those on.
For anything else, such as correcting something we hold about you, email aoneahsan@gmail.com.
Do we sell your data?
No. We don’t sell your personal data.
Is Rent Party for children?
Rent Party is for anyone aged 13 and over, and the game’s own content is family-friendly.
If we learn that an account belongs to someone under 13, we delete it, the same way any account is deleted.
Where is your data stored?
Our database is stored with Supabase in the AWS Asia Pacific (Mumbai) region, ap-south-1, and the other services listed above can handle data in other countries too.
How will you know this page changed?
When this page changes, the date at the top changes with it. That date never moves unless the text did.
How do you reach us?
For privacy and legal requests, email aoneahsan@gmail.com. For everything else, write to us from the Help page.