Terms of service

WhoGame is a guessing game for a party. You create an event, and either your guests submit photos and facts about themselves or you prepare the game about them yourself. Everyone then answers quiz questions about the other guests — as rounds on a screen during the party, or at each guest's own pace during a window you set.

The service is provided as it is, and we do what is reasonable to keep it available and working. We cannot promise it will never be down.

You log in with a link sent to your email address, so there is no password to lose. Keep access to that mailbox: anyone who can read it can reach your events.

You can invite up to three co-hosts per event. A co-host can run the game and moderate submissions but cannot change retention, billing or delete the event. You remain responsible for what they do with your event.

You decide who is invited, what appears on the screen and how long the data is kept. Everything a guest submits passes through your moderation queue before it can be shown.

You are responsible for having the right to run the game with the people you invite, and for telling them what is happening with their photos — the consent text we show them is written to do exactly that, but the event is yours.

For the personal data your guests submit, you are the data controller and we are the processor. These terms are our data-processing agreement with you.

We process that data only on your documented instructions, which in practice means: to run your event, and to carry out the deletions you configure or request. Our staff are bound to confidentiality. We keep the security measures described on the privacy page — EU hosting, a private photo bucket, signed links with a short life, and row-level access rules in the database.

We use the sub-processors listed on the privacy page. If we add one, we will say so on that page before it starts processing anything, and you may object.

We will help you answer a guest's request about their own data, and we will tell you without undue delay if we ever become aware of a breach involving your event.

When the retention window ends, when you press delete, or when you delete the event, we delete the personal data rather than keeping a copy.

Do not upload anything you do not have the right to upload, and do not use the service to harass, humiliate or expose anyone. A guessing game about people only stays fun if everyone in it agreed to be in it.

Do not try to reach another host's event, work around the access rules, or use the service to send anything unlawful.

If an event is used for any of that, we may suspend it. Where we can, we will tell you why first.

When the service is paid, you pay once per event, before the event goes live. Prices are shown including VAT, and Stripe handles the payment and the receipt. Refunds are covered by our refund policy.

We build this to work on a wedding night, when there is no second chance and the venue's Wi-Fi is doing its best. Even so, things can fail.

We are liable for what the law does not allow us to exclude. Beyond that, our liability to you is limited to what you paid us for the event in question. We are not liable for a party that did not go as planned.

Nothing here limits your rights as a consumer under Danish law.

You can delete your event, and its data, at any time from its settings page. We can end this agreement if these terms are broken.

If we stop offering the service, we will give you reasonable notice and a way to get your event's content out before it goes.

If we change these terms in a way that matters, we will say so on this page and date the change. An event already paid for runs under the terms that were in force when you bought it.

Danish law applies, and the Danish courts have jurisdiction, without taking away any protection you have as a consumer where you live.