Privacy policy

Version 1.10 · Updated 2026-11-08

SEA Family & Party Games is an app for the race games and party games of Southeast Asia, such as Cờ cá ngựa (Vietnamese Ludo), Ludo, Ular tangga (snakes and ladders) and Ma sói (Werewolf Village), a game of hidden roles for 5 to 16 people in one room, played for points only. There are no bets, no cash prizes, no chips or coins, no purchases and no ads.

What we store: a random device id and the name you type, to seat you at a table and let you rejoin; the moves of online games (in Ma sói, each night's picks, the votes and who left the game), to keep games going if a server restarts; in Ma sói the server deals the roles and sends each phone only its own until the game is over; if you create an account, your username, display name, a salted password hash and your match history (game, time, room code, and the names and results of everyone at the table). Accounts are shared by all our apps (listed at /apps): the same account, friends, ratings and match history work in each of them, and deleting it in any of them deletes it in all of them. If you choose a country, it is stored with your name (and your account) and shown to other players as a flag. Rooms are public by default: anyone can watch the table, with names, flags, the pieces on the board and every roll of the dice. Anyone can also take a free seat in a listed room while it waits for players. A PIN, or ticking Private when creating the room, keeps a room unlisted. Ma sói rooms are never listed: players join with the room code, its QR code, a link or an invite, and a PIN keeps others out. Anyone with the code (and the PIN) can watch a Ma sói table or show it on a TV, with names, flags, who is still in the game and the counted votes, but never a living player's role before the game is over.

What we do not collect: no contacts, precise location, photos, microphone, advertising ids or tracking across other apps. We use no advertising services.

Nearby play: without internet, one phone hosts the game on its Wi-Fi or hotspot and the other phones on the same network join it. Anyone on the same network can see the host's name, the room code, the game and the players' names, and can watch or join a room without a PIN. The names, device ids and moves of that game never reach our servers.

Usage statistics and crash reports: the Android and iOS apps send usage events not linked to your name or account (a game started or finished and whether you won, lost, drew or watched, which game, the number of players and how it was played (online, practice or one phone passed around), the house rules or way to play chosen, where the game was started from (the game list, a suggestion or this week's card), a room created, joined or watched, joining or leaving the ranked queue and how long you waited, a ranked match found, a friend request, invite or join, an invite shared, a moment shared, the score tally, the narrator or the Village vs Wolves tally opened or a result added) and crash reports to Google Firebase (Analytics and Crashlytics), together with an app-instance id, device model, system version, approximate country and device language; Firebase also records app opens, screens viewed and time spent. They contain no names, room codes, account ids, moves, roles, picks or votes. The score tally's player names and results stay on your phone and are never sent. Turn them off in Table settings > Share usage stats & crash reports. Usage events are kept for 2 months and crash reports for 90 days.

Counting returning players: when you are dealt into an online game (not as the TV narrator, not when watching, not in a nearby game, not in a game on one phone, against bots or passed around), our server notes the day (in UTC), which of our apps it was, how you opened it (Android app, iPhone app, website or Telegram, the last only when Telegram confirms it) and the game. It stores this under a code made from your device id, a different code in each of our apps. We cannot work out your device id from the code, and we never look up a device's records except to delete them when you turn the switch off. We keep it apart from your name, account, IP address and room codes. We use it only to count, in totals, how many players come back after a day, a week and a month, how many play each week, and how often. We never show it to other players, never share or sell it, and never use it for ads. Our totals also count how many finished games between accounts had friends at the same table, from the match history and friends lists we already keep. Figures from fewer than 3 devices are never shown, even to us, and the figures shown together are hidden where needed so that a hidden one cannot be worked out from the others; the figures end with the previous day. The records are deleted after 400 days (and from our encrypted backups within 30 days after that). Turn this off in Table settings > Share usage stats & crash reports (this also stops the Firebase statistics above where the app has them); turning it off in an app deletes what we kept for that app on this device (each of our apps has its own switch). Older app versions that do not show the switch are counted (until updated). Because the records are not tied to your account, deleting your account does not remove them; they still expire after 400 days. From this version of the policy, and only in app versions that show this version, the same switch also lets us count, once a day, that you opened the app, or started a game on your device (we note only which game), but only while you are online, in addition to the cases above (this applies despite the exclusions in the first sentence). We note only the app, the platform, the game (none when you only open the app) and the day, under the same kind of code made from your device id, which we cannot turn back into your device. No cards, moves, results or the game itself are sent by this count. Turning the switch off deletes these records too.

Improving bots and replays: when you play an online game to its end (not as the TV narrator, not when watching, not in a nearby game, not in a game on one phone, against bots or passed around), our server keeps a copy of it, made once a day: the dice rolled (in Ma sói, the role dealt to every player), every move, the rules, the result and points, the day (in UTC), the game and which of our apps it was, and how it was opened (Android app, iPhone app, website or Telegram). Instead of your name it stores a code made from your account, or from your device id if you play without one. The code is not your account id or device id, but our server can match it to your account or device (to delete the copies, and later to show you your replays), and the copy holds no names, room codes, account ids, device ids or times of day. We use the copies only to train and test our bots and, later, to let you replay your own games. They stay on our servers: no other player sees them, and we never share or sell them or use them for ads. To make the copy, a game's log can be kept up to two days instead of one. Copies are deleted after 2 years (and from our encrypted backups within 30 days after that). This is on until you turn it off in Table settings > Help improve bots: we then copy none of your games and delete the copies holding your code (your account's and this device's). Older app versions that do not show the switch are included (until updated). Deleting your account deletes the copies made under its code.

Turn notifications: if you allow notifications, the Android and iOS apps register a push token with Google Firebase Cloud Messaging. We store it with a hash of your device id (and your account, if you are logged in), your platform, your app language, which kinds of alerts you turned off, and which app it belongs to and which of our games your version of that app can show (so it only gets alerts that app can open), and use it only to tell you that it is your turn (in Ma sói, that you are asked to act), that a game at your table is starting or that your ranked table is ready while the app is closed or in the background, and about friends (below). The notification (game name, room code, seconds left) goes through Google and, on iPhone, Apple; it never says your Ma sói role. Turn it off in Table settings > Turn alerts, or in your phone's settings; tokens are deleted when you turn alerts off and after 60 days without use. In Telegram, these alerts can come as bot messages instead (see Bot messages below).

Friends: with an account you can add friends by username. Your friends list is stored with your account. Friends see whether you are online and, while you are seated at a table in any of the apps, its game, state and room code (also for rooms with a PIN), and can invite you to their table; an invite lets you join without the PIN. If you allow notifications, friend requests and invites reach your phone the same way as turn alerts (with the sender's display name or username). They can also come as Telegram bot messages (see Bot messages below), so a request or invite you send can carry your display name or username through Telegram to the other player. Remove a friend at any time; deleting your account deletes your friends list.

Online now: while the app is open, other players of the same app can see you in its Online now list with your display name, country flag and whether you are available, in a lobby or playing. The list never shows your table, room code or username. Turn off Show me as online (Friends > Online now) to leave the list; your friends still see you as described above. Anyone in the list can invite you to their table unless you choose Invites from: Friends only or Nobody there. An invite lets you join that table without its PIN, and is never sent as a phone notification or bot message. Players at your table and watching it can see whether you have an account, and with an account they can send you a friend request from there. You can block a player: you no longer see each other in the list, their invites and friend requests do not reach you, and a friendship between you ends. We store a block as pairs: each of your identifiers (your account if you have one, and a hash of your device id) paired with each identifier of the blocked player that we know at that moment (their account and/or a hash of their device id), with the name the player had then. Pairs that include a device id hash are deleted after 90 days, and pairs that include an account when that account is deleted.

Ranked play: in the games that have a ranked queue, you can play ranked with an account. We store a rating per game (with the number of rated games and wins) with your account and use it to match you with players of similar strength. The leaderboard shows the best-rated accounts to everyone, with username, display name, country and rating, and anyone can look up an account's ratings by username. Ranked tables can be watched by anyone, like other public rooms. Deleting your account deletes its ratings.

Stars and level: with an account, finishing an online game can earn Stars (see the terms). We store with your account your Stars balance, your level (from every Star you have ever earned), the looks you got with them and a history of the Stars you earned and spent: which game and table, how many, why (playing, a win, a friend at the table, noted by their account number, or a weekly goal met) and when. For your weekly goals we also store with your account how many of the week's games count toward each goal so far (counts only, kept two weeks). Other players see your level next to your name at the table and in player lists such as Online now, friends and the leaderboard. Deleting your account deletes its Stars, level and history.

Shared moments: when you tap Share link on a big moment (such as a piece sent back to the start, or a long ladder), we store that moment (the pieces on the board before and after the move, the roll, the game and what happened) with the display names and countries of the players at that table, and anyone with the link can see it for 180 days; then it is deleted. A Ma sói moment (such as the last wolf found) holds the game, what happened, the day, and the roles of the players it names, which every player sees once the game is over; Ma sói moments come only from finished games. Your name and country can appear in a moment that another player at your table, or anyone watching it, shares. A shared moment is not linked to any account, device or room code. Share image makes the picture on your phone and sends nothing to us. To have a shared moment removed sooner, contact us with its link.

Telegram: you can also open our apps in Telegram, from our bot. Telegram then gives the app your Telegram user id, name, username, language and, if you have one, a link to your profile photo, signed by Telegram. Only opening an app stores none of this with us: you play as a guest under your Telegram first name (kept on your device, like a name you type) and in your Telegram language until you choose another. If you tap Continue with Telegram, or Link Telegram in Account, we store your Telegram user id with your account, and Telegram then signs you in to that account in all our apps (listed at /apps). A new account made with Continue with Telegram has no password; it gets your Telegram name as its display name, copied once (you can change it), and your Telegram username as its username if that is free, else a random one. We never store your profile photo, Telegram Premium status or phone number, and keep no other copy of your Telegram name or username. If your account has a password, Account > Unlink Telegram (with the password) deletes the stored Telegram user id. Telegram is a third-party service here, under its own terms and privacy policy: it runs the Telegram apps in which our apps open, it delivers our bot's messages, and when you share a room or a moment in Telegram, the message (the game, the room code or the moment's link) is prepared through Telegram for the chat you pick.

Telegram Login outside Telegram: in our Android and iOS apps and on our websites, Continue with Telegram and Link Telegram open Telegram's own login page (oauth.telegram.org) in your browser, a third-party service under Telegram's terms. Once you confirm there, Telegram sends our server your Telegram user id, name, username and a link to your profile photo, signed by Telegram; we never ask it for your phone number. We store only your Telegram user id with your account, as above. Your Telegram name and username stay on our servers for at most 5 minutes, until the app finishes signing you in, and the photo link is not kept at all. Link Telegram asks for your password first and shows which Telegram account it will link before it does. An account made this way has no password: Account > Delete account opens Telegram's login page again to confirm it is yours.

Bot messages: in Telegram, Account > Bot messages when it's your turn lets our bot message you, once you allow it in Telegram. We then store your Telegram user id with your account, your app language, which kinds of alerts you turned off and the app you turned them on in, and the bot messages you only to tell you that it is your turn (in Ma sói, that you are asked to act) or that a game at your table is starting while the app is closed or in the background, that your ranked table is ready, and about friend requests and invites: the game name, the room code, the seconds left (turn alerts), the sender's display name or username (invites and friend requests) and a button that opens the room; a message never says your Ma sói role. Turn them off the same way, or stop or block the bot in Telegram; the stored row is deleted then, when you unlink Telegram, use Log out everywhere or delete your account, and after 60 days without opening, in Telegram, the app you turned them on in. Logging out on one device does not stop them. If you send /start to the bot, it answers with buttons to our apps and a link to this policy; we store nothing from your chat with the bot.

Network data: your IP address is used in memory to limit abuse (too many connections or failed logins). Connections pass through Cloudflare. The app carries its own fonts, and the website loads its fonts and graphics engine from our own site, not from Google.

Retention: online game logs are deleted within a day of the last move. Your account and history stay until you delete them. Login tokens expire after 90 days without use. Records for counting returning players are deleted after 400 days. Copies of online games for improving bots and replays are deleted after 2 years; until the nightly copy is made, a game log can stay up to two days.

Deleting your data: in the app open Account > Delete account. This removes the account, its login tokens and its match history at once. Because one account works in all our apps (listed at /apps), this deletes it in every one of them. Without the app, see the delete-account page. Encrypted backups keep a copy for up to 30 days, then it is overwritten. Other players' match history keeps the display name you had in games against them. Games on one phone (against bots, or passed around) and the narrator's tally never leave your device, and nearby games never reach our servers. An account made with Continue with Telegram has no password: open the app from Telegram and use Account > Delete account; Telegram confirms the account is yours. Deleting it also deletes the stored Telegram user id and bot messages; your Telegram account itself is not affected. Deleting your account does not remove the records for counting returning players (they are not tied to your account); they expire after 400 days, and turning off Table settings > Share usage stats & crash reports in an app removes what we kept for that app on this device, or contact us from the device. Deleting your account also deletes the copies of your games kept for improving bots and replays under your account's code; turning off Table settings > Help improve bots deletes those under this device's code as well.

Age: the app is meant for people aged 13 or older and is not directed at children. It has no chat: players talk in the room, or on a call of their own.

Contact: write to [email protected] or see the support page.

Version history