your game, your data.

privacy notice · updated 3 november 2026. lukochuri is operated by taseen tanvir. questions or deletion requests: hey@tanvir.io.

guest sessions

we use a signed, essential browser cookie refreshed for 30 days on each return visit to identify your guest session. your nickname, preferences, room memberships and browser verification metadata are kept to operate the game until you delete your guest account. your browser also remembers your nickname, current room and read announcements. clearing cookies loses access to that guest; whatsapp verification does not provide cross-device account recovery.

location during play

when you enable gps, your precise location, accuracy and timestamp are sent to the game server in the lobby, head start and hunt. the server decides which positions or clues each participant may see under the game rules. this includes teammates, abilities, mission/field penalties and dated last-known clues. ending the round or leaving clears your live position from the room. disconnected idle lobby fixes are cleared after 30 minutes. browser gps may pause when the page is hidden or the phone locks.

optional traccar client tracking uses a private, revocable device identifier and the same game rules. pairing expires after four hours or when the round ends. configure and stop the native tracker on your phone as needed.

friends in the same lobby can see each other’s recent locations before the game starts. opponent positions are hidden from head start onward according to the game rules. a new play area is centered on the host’s first accurate location. its center is shared with room members and stays fixed unless the host changes it.

optional history and replays

statistics and precise route recording are off by default. if enabled, the game retains up to ten recent rounds per room for up to seven days, with at most 1,000 route points per participant in a round. only participants of the completed round can access its replay; only consented routes are included. turning route recording off erases your earlier routes across your rooms. cleanup depends on service availability. necessary live game state is separate from optional recording.

whatsapp code verification

browser verification is required to enter games. you send a prepared code through whatsapp. the signed meta webhook must contain that code before the originating game session is marked verified. this does not establish phone-number ownership or identify a person. sender phone numbers and profile details are not saved in our verification database. pending codes expire after five minutes; verification-service records expire within 24 hours after success and are removed by hourly cleanup. the game remembers verified status for that browser session, with its metadata retained as part of your guest account until removal or account deletion. removing verification also requests deletion of the associated verification-service records. see the verification service notice.

providers and your device

cloudflare hosts the game, account state and verification database and processes network information to deliver and protect requests. meta/whatsapp delivers verification messages. openfreemap provides map tiles using openstreetmap data and receives tile requests that can reveal the area viewed and network information. their privacy policies apply to their processing; data may be processed internationally.

qr camera frames and uploaded qr images stay on your device. camera permission is requested only when scanning. sound, vibration and browser notifications are optional. the offline cache stores the static app shell and assets, not api responses or private location/replay data. we add no advertising or analytics tracking.

export and deletion

open preferences & history to download your own data, erase replay routes, withdraw optional recording or delete your guest account. exports omit other players’ routes. account deletion removes memberships and your routes, de-identifies saved participant entries, and retains a minimal revocation marker so an old copied cookie cannot restore the account. it does not delete whatsapp chat history or provider operational records. see deletion instructions.

your nickname, chosen avatar and saved game presets are part of your guest profile. presets do not store the field center. you can remove a single saved round from preferences & history; this erases your own route and statistics for that round while other participants keep their own data.