Privacy Policy
This explains what Strait collects, why, and what we do (and don't do) with your camera, microphone, and account data.
1. The short version
- We never see or store your video or audio. It streams directly between your device and the other player's (peer-to-peer). Our servers only carry it when a direct connection isn't possible, and even then it stays end-to-end encrypted in transit — the relay can't decrypt or view it.
- Facial expression detection runs entirely on your device. The "did they laugh" judgment is computed locally in your browser and never uploaded anywhere.
- We store the account info you'd expect for any game: email, display name, avatar, XP, match stats, and cosmetics.
2. What we collect
| Data | Source | Why |
|---|---|---|
| Email address | You, via Clerk (our sign-in provider) | Account sign-in, account recovery |
| Display name, chosen avatar | You | Shown to other players in matches and on the leaderboard |
| XP, rank, win/loss record, streaks, equipped cosmetics | Generated by gameplay | Progression, leaderboards |
| Match results (who played, who won) | Generated by gameplay | Settling XP fairly between players |
| IP address, connection metadata | Automatic, via our network/TURN provider | Connecting your video call, abuse prevention |
We do not collect or store: your camera/microphone content, the facial expression data used to judge a round, or payment information (Strait does not currently process payments).
3. Camera and microphone
Strait asks for camera and microphone access so the game — and the other player — can see and hear you during a match. This connects using WebRTC, a peer-to-peer standard: your video and audio travel directly to the other player's device, not through our servers, except when a direct connection isn't possible (e.g. restrictive networks), in which case a relay server (provided by our TURN vendor, Metered.ca) forwards the already-encrypted stream without being able to decrypt or view it. Nothing from your camera or microphone is recorded or stored by us at any point.
4. On-device detection
To judge whether you've cracked a smile, Strait runs a facial-landmark model directly in your browser (via MediaPipe). This analysis — and any "biometric-adjacent" data it produces — never leaves your device and is never sent to our servers or any third party.
5. Who we share data with
- Clerk — handles sign-in and authentication. See Clerk's privacy policy.
- Cloudflare — hosts our servers, database, and network. See Cloudflare's privacy policy.
- Metered.ca — provides TURN relay servers for video calls that can't connect directly. They see connection metadata (IP addresses, connection timing) needed to route the call, not decrypted video/audio content. See Metered's privacy policy.
We do not sell your data to anyone.
6. Cookies and local storage
We use cookies/local storage for signed-in sessions (via Clerk) and to remember local preferences like your last-used name and avatar. We don't use third-party advertising or tracking cookies.
7. Data retention and deletion
We keep account data for as long as your account exists. To delete your account and associated data, email flagstickcollective@gmail.com — we'll process deletion requests within 30 days. Guest play (no account) isn't stored beyond the session.
8. Children's privacy
Strait is not directed at children under 16. If you believe a child has created an account or shared data with us, contact us at flagstickcollective@gmail.com and we'll remove it.
9. Changes to this policy
If we make material changes, we'll update the date at the top of this page.
10. Contact
Questions or requests about your data: flagstickcollective@gmail.com