Privacy

In short

Whoseween is run by its owner, one person in Canada. Write to hello@whoseween.com about anything here.

• You can vote, guess and browse with no account.
• An account is your email and a code we send to it. There are no passwords.
• We do not sell your details, and there are no advertising trackers.

What we keep

• Your account: your email, your first and last name, that you are 13 or over, and under 18 if you are, your entries and your passes.
• Your entry: the photo, its name and its place. Also a small blurred copy of the photo, which a board shows to visitors with no pass.
• When you upload: the connection it came from, for safety, for 90 days.
• When you vote, guess or visit: an anonymous ID, a scrambled form of your connection and your rough place. For a guess, also what you typed.
• For a pass: what Stripe tells us. Which pass, the amount, the country and the email you gave. Never the card.
• Messages and reports you send us, and a record of the emails we sent you.

What we never keep

• Your date of birth. We ask it when you upload, read it once, and keep only that you are 13 or over, and under 18 if you are.
• Face data. There are no ID checks and no face recognition.
• Your precise location. Where you are comes from your internet connection: the country, and roughly the city.
• Card details. Stripe holds those.

Your photo is public

• Once it is live, anyone who visits can see it: on the boards, in the games, on its own page, on share cards and in the Hall of Fame, until you remove it.
• Before it is stored it is resized and its hidden data (location, camera) is removed. Nothing else is changed.
• Your first and last name is shown on your costume’s page only. If you are under 18, only your first name is. A house’s page shows no person’s name.
• A photo of a house is public. Check that it shows no house number, street sign or licence plate.

Cookies

No advertising cookies. Three that the site needs:

• ww_v: an anonymous ID for the games. It is how you are never shown your own entry or the same pair twice.
• The sign-in cookies, whose names begin sb-: they keep you signed in.
• ww_u13: a mark that the date-of-birth question was answered as under 13.

Your browser also keeps your choice of cursor and of sound, and the pumpkins you carve. Those stay on your device.

Who helps run the site

• Supabase, in Canada: the database and the photos.
• Vercel: hosting.
• Anthropic: the AI that checks photos and reads close guesses. It sees the photo and your answers about it. For a guess it sees the words of the guess, and nothing about who typed it.
• Resend: email.
• Cloudflare: the check that you are a person, and mail sent to hello@whoseween.com, which arrives in a Gmail inbox.
• Upstash: the limits on how often something can be done.
• Stripe: payments. It takes the payment for a pass, on its own checkout page. It sees what you type there: your email, your card, and the name and the country or postal code that go with the card. It tells us that you paid, how much, in which currency and from which country. It holds the card details.

Email

We send the sign-in code, news of your upload, and “Your pass is ready”.

Four more are optional: a rank update, “The final is tonight”, the results, and “The ball reopens”. Each is sent only after you say yes, and each has a link that stops it with one tap.

Children

Whoseween is for people 13 and over. A child under 13 cannot have an account.

How long, and deleting

• Photos and accounts are kept until you remove them. “Remove my costume” and “Delete my account” are buttons on your account page.
• Connection data is deleted 90 days after an upload, and 90 days after the final for votes and guesses.
• A refused photo is deleted at once.
• One exception: a photo that may be illegal, or that reports have hidden, is kept locked away, with the record of where it came from, until a person has looked.
• After an account is deleted two small records stay, and neither can be read back into a person: a scrambled form of a banned email, and Stripe’s number for a checkout.
• If you are in someone else’s photo, use the report button on its page or write to hello@whoseween.com. A request to remove an intimate image is acted on at once.

Credits

Place names from GeoNames (geonames.org), CC BY 4.0.