1. Who we are
JoTo Games (“we”, “us”) is a game studio in Rotterdam, registered in the Netherlands with the Chamber of Commerce (KvK) under number 73863157. We make JoTo Play: party games on joto.games, where a TV or a laptop is the shared screen and phones are the controllers, and games you play on your own.
We decide what happens to the personal data on this page, so under the GDPR (in Dutch, the AVG) we are its controller. This page covers joto.games, every game on it and the optional accounts at account.joto.games. The accounts have their own, more detailed notice: what an account keeps.
2. The short version
- You can play every public game without an account and without telling us who you are.
- joto.games shows no ads, has no trackers and sets no cookies (one exception, for early access with an account, is under Accounts below). We do not sell personal data and we do not build a profile of you.
- A party room keeps the name you type only while the room is open.
- To see how the games are played, our server keeps a record of what happens in rooms and on our pages. It holds counts, times and which game, never a name. After 13 months only totals per day are left.
- Pages and games load their fonts from joto.games, not from a font service.
- Accounts are optional and for people aged 16 or over.
- Write to info@joto.games for a copy of your data, to correct it or to have it deleted.
3. This website
What your browser keeps
Our pages keep a few small notes in your browser’s own storage (localStorage and sessionStorage), so the games work the way you left them. They stay on your device. What a room needs to know, your phone sends while you play (see section 4).
- Your seat in a room: the room code, a key for your seat and the name you typed, so a reload puts you back in your seat. It stops working after 3 hours on a phone and 6 hours on a TV.
- Your drawn avatar and its mood, and whether the sound is on.
- Which games you played and when, so the front page can show your recent games and the TV can say what is new since you last played.
- Notes a game keeps for itself: whether vibration is on, which questions or drawing prompts this TV has already shown, a drawing you have not sent yet, how you hold your phone in Overlook, and the progress and settings of games you play on your own.
- If you signed in: a note that you did, so our pages know to ask account.joto.games for your pass. On a phone: when you last closed the “add to home screen” offer.
- In sessionStorage, which your browser empties when you close the tab: a guard against a page reloading in a loop, a check that the page is still working, and which view of a page you picked.
These are needed for what you ask the site to do, so they need no consent (Dutch Telecommunications Act, article 11.7a). You can clear them at any time in your browser’s settings for joto.games.
Fonts
The site’s pages and every game on its shelves load their fonts from joto.games itself. No font service learns that you visited.
Email and feedback
If you email info@joto.games, we use what you send only to answer you and to carry on the conversation it starts. We keep it no longer than that needs, and we do not add you to a mailing list.
The Feedback link on our pages, and Send feedback on a phone in a room, send us your note, a picture of the game if one is on the screen, the page and the version of the site, and which browser and screen size you used. It reaches our own inbox. We keep it until we have dealt with it, and what it tells us may be copied into our own task list. Please leave personal details out of a note.
Basis for both: our legitimate interest in answering you and fixing the games (GDPR article 6(1)(f)).
Our server, and who else handles data
joto.games and account.joto.games run on a server we rent from TransIP, a Dutch hosting company. The server keeps no log of visits. Like every website it sees your IP address when you connect; it uses it only in memory, to stop one address from opening too many rooms or connections, and does not write it down.
Every night the server makes an encrypted backup of what it keeps (the record of play and the accounts). Only we hold the key. Backups are kept for 14 days on the server and on our own computer.
Besides us, only these handle personal data, each for one job: TransIP (the server and our mailbox), Microsoft (the encrypted backups), Google and Discord (when you sign in with them), and Google (when you cast, below). We share it with nobody else.
Casting to a TV
Only when casting is switched on for the site, the Party page in Chrome loads Google’s Cast software from www.gstatic.com, so it can offer you a Cast button. Google then sees your IP address, and if you cast, Google’s own terms cover the link between your browser and your Chromecast. Without casting, no page loads it.
Basis: our legitimate interest in letting you put a room on your TV (article 6(1)(f)).
4. Browser games on joto.games
Party rooms
While a room is open, the server holds in its memory the room code, a key for each seat, the name and avatar each player chose, and the state of the game. Everyone in the room sees the names, avatars, drawings and answers on the TV and on the phones; the host can remove a player. When the room closes, all of it is gone. Names are never written to disk.
A game keeps what you make only where it says so on the screen. Today that is Overlook: a finished painting is kept without any name (at most 60) and may be shown in its gallery.
Basis: running the game you asked to play (article 6(1)(b)).
The record of play
So we can see how many rooms ran, which games are played and where they break, the server writes a line when something happens in a room or on our pages: a room opened, a game started or ended, a player joined or dropped, a page opened or a button pressed. A line holds the time, the room code, the game, counts (players, bots, rounds), the seat’s number, the version of the site, where the visit came from (a tag in a link or an ad, or the name of the site that linked to us), a random number for that room or page visit, and fixed words for what happened.
It never holds a name, anything a person typed, an IP address or a device identifier, and we do not use it to find out who you are.
We keep these lines in full for 13 months. After that the server turns them into totals per day (how many times each thing happened, per day and game, with no room code, random number or seat) and deletes the lines themselves. A line can live on in a backup for up to 14 days longer (section 3).
Basis: our legitimate interest in understanding and improving the games (article 6(1)(f)).
Recorded playtests
Sometimes we ask people to test a game while it is recorded. That happens only through a link we hand out ourselves, and only after you say yes on the page, every time it loads. Saying no still lets you play.
- What it records: the game’s screen and what happens in the game, for up to 30 minutes. On a link that says so, also the game’s sound.
- On a separate room-mic page, also only after your yes, a phone or laptop on the table records the room, voices included. A recording never uses a camera.
- Recordings stay on our server, only we watch them, and they are deleted after 30 days.
- During a test the person running it may hold a button to speak a short note. It is turned into text on our own computer, and the sound is deleted straight away.
Basis: your consent (article 6(1)(a)). Withdraw it at any time with the red REC button, or by writing to us, and we delete the recording.
Accounts (optional)
You never need an account to play a public game. An account at account.joto.games lets us give you early access to games that are not public yet.
- What it keeps: your email address; the name we pick for you, or one you choose; your friend code; how you sign in (Google’s or Discord’s ID for your account, or an emailed code); when each sign-in started and was last used, and which browser it was (not your IP address); and which unreleased games we let you play. Your date of birth is used only to check your age and is never stored.
- Cookies: account.joto.games uses cookies only to sign you in and keep you signed in. When you open a game you have early access to, joto.games sets one that holds its pass for about an hour.
- While you are signed in, a room can know your account’s ID for your seat until the room closes. Other players never see your email.
- How long: until you delete the account. A sign-in lasts at most 30 days. Encrypted backups that still hold a deleted account are gone within 14 days.
- How to delete: press Delete account on your account page, or email info@joto.games from the address you signed in with and we delete it within 30 days.
- Google or Discord know that you signed in to JoTo, because you sign in through them.
Basis: our agreement with you to provide the account (article 6(1)(b)), and our legitimate interest in keeping accounts safe and only for people old enough (article 6(1)(f)). Every detail is in the accounts notice.
Age
JoTo Play is for everyone, and playing without an account stores no personal data beyond the room. Accounts are for people aged 16 or over. The sign-up does not make an account for anyone younger, so a younger player keeps playing as a guest. If you think a child under 16 has an account, write to us and we delete it.
5. Mobile games
JoTo has no mobile games in an app store at the moment. If we publish one, its store page and this page will say what it collects before it comes out.
6. Your rights
Under the GDPR you may ask us to:
- give you a copy of the personal data we hold about you (access);
- correct what is wrong (rectification);
- delete it (erasure);
- stop using it, or use it for less (objection and restriction);
- give it to you in a form you can take elsewhere (portability).
Where we rely on your consent, you can withdraw it at any time; that does not undo what happened before. Email info@joto.games. We answer within 30 days. Most of what the site keeps is tied to no name or account; if we cannot tell which data is yours, we tell you so.
If you think we handle your data wrongly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
7. Contact
JoTo Games · Registered in the Netherlands · KvK (Chamber of Commerce) 73863157 · info@joto.games
When what the site does changes, this page changes with it and the date at the top moves. The rules for using the site are in the terms of use.