Privacy

nom.quest and the Peekasso app · last updated 7 September 2026

Short version: you can play everything here without telling us anything. Nothing is sold, nothing is shared with advertisers, and there are no third-party trackers or ad SDKs on the site or in the app. What we do store is listed below, item by item, with how to get rid of it.

Playing without an account

Every game on nom.quest works signed out, and so does all of Peekasso — drawing, playing with friends in a room, sharing a drawing, guessing somebody else's. An account is optional and buys exactly one thing: your character and the galleries you follow survive a new phone or a cleared browser.

When you are signed out, your progress lives in your own browser or phone (in localStorage and, in the app, in its own storage) and never leaves the device except where this page says otherwise.

What we store, and why

1. An account, if you make one

We also keep a random session token per signed-in device, so you stay signed in, and the sign-in links themselves until they are used or expire. If you buy anything, we keep a Stripe customer reference and the date your access runs to; card details are handled by Stripe and never reach us.

2. Your synced progress, if you are signed in

3. A drawing you choose to share

Tapping share in Peekasso uploads the drawing itself — as a compact list of strokes and the word it was drawn for — plus, if you typed one, a display name, and your character so it can stand next to the picture. It gets a short link. Two things follow from that:

• Whoever holds the link can look. There is no listing page and no search: a drawing is reachable only by its link. That is what makes it shareable, and it also means a link you send is a link that person can forward.
• It expires by itself after 90 days. Nothing has to be cleaned up, by you or by us.

If you tick also show it to strangers, the link is additionally listed on the Gallery's strangers shelf, where people who were not sent it can guess it. That box is off unless you tick it, every time.

4. Guesses, hearts and reports

When somebody guesses a shared drawing we store the guess, the display name they typed if any, and whether it was right — that is what lets the artist see "Mia got it". Hearts and reports are recorded against a random id we generate for the device, so that one device cannot heart or report the same thing twice. That id is not an account, is not linked to one, and is never sent between devices.

5. A visit counter

The site counts page views, game starts, game finishes and shares, so we know which games people actually play. Each row holds a random first-party id, a session id, the game, the outcome, a number (seconds, moves), and the host of the page you came from. It does not store your IP address, your user agent, or anything else about your device, and it cannot be joined to an account or to any other site.

What we never do

• No advertising, no ad networks, no ad identifiers, and no data sold or shared for advertising.
• No third-party analytics, no Facebook or Google SDKs, no cross-site tracking. The Peekasso app links Apple's own frameworks and nothing else.
• No cookies except one: the session cookie that keeps you signed in on the web. There is no tracking cookie to consent to, which is why this site has never shown you a banner.

The app on your phone

• The microphone is used only while you hold the guess button, and only to turn what is shouted into text so the game can tell whether somebody said the right word. The matching happens on the phone. No audio is recorded, kept, or sent anywhere.
• Your session is stored in the iOS Keychain, on that device only.
• Your drawings stay on the phone unless you share one. Deleting the app deletes them, so keep anything you care about.

Who else touches it

Who	What for
Cloudflare	Hosts the site, the database and the drawings. Like any host, it processes the requests your browser makes, which includes your IP address, in order to serve them.
Resend	Sends the sign-in email, and only that.
Stripe	Takes payment, if you ever make one. They handle the card; we never see it.
Apple	Distributes the app. Anything Apple tells us about a download is aggregate — we do not learn who you are from the App Store.

What you can do about all of it

• Close your account — in the app, in Settings under Account, or on the website. It deletes the account, its sessions, its sign-in links, the synced blob and any of your drawings on the strangers shelf, immediately and with no waiting period. Drawings you have already shared keep working for whoever holds the link until they expire, because a link you gave somebody is theirs to look at.
• Sign out — leaves the account alone and forgets the session on that device.
• Hide or report any drawing by a stranger, on the card. Hiding is immediate and per-device; reporting takes it off the shelf for everybody once enough people agree.
• Wait. A shared drawing expires on its own after 90 days.
• Ask us. Email hello@nom.quest for a copy of what is stored against your address, or to have it deleted, and we will do it by hand if the buttons above do not cover your case.

Children

The games are meant to be family-friendly and there is nothing here aimed at collecting information from children. An account needs an email address, and a child should ask a parent before making one. Anything shared with the strangers shelf can be seen by people you do not know, which is worth knowing before you tick the box; every stranger's drawing can be hidden and reported, and hello@nom.quest reaches a person.

Changes

If this changes, the date at the top changes with it. The history of this page is in the same place as the code that it describes, so what changed and when is a matter of record rather than of trust.

Contact

hello@nom.quest — reports, deletion requests, questions, or a drawing that should not be on the shelf.

← nom.quest