Privacy
Last updated: 9 November 2026
This page explains who runs YearBattle, what information the game stores, how long we keep it and what rights you have. We follow the EU General Data Protection Regulation (GDPR).
Who we are
YearBattle is run from Norway. “We” means YearBattle, the data controller for the information described here. Send privacy questions to privacy@yearbattle.com.
What we store
The game needs no account, email or sign-in. A nickname is enough.
On the game server, for each room: the player names you enter, chosen figures, answers, points, room status, when each player last contacted the room (so someone else can take over as host if the connection drops), optional player reactions, and which questions you have already played (so you get new ones). The list of played questions contains no answers and is not shown in the game.
In your browser: your player session (so you can return to the room), figure, theme, match history, played questions and sound settings. A name you write on a match poster is only used in the browser. The poster is downloaded to your device and never sent to us.
We use no tracking cookies, no analytics and no ads. If you switch language, a cookie (yb_lang) remembers your choice for one year so you land on the right language next time. It contains only the language code.
Who sees what
Anyone with a valid room code for an open room can see the host’s player name, figure and chosen theme. The invitation view closes when the match starts. In free-for-all matches, players see each other’s names, figures and points. Reactions (the move and when it was sent) are shared with the others in the room after the answer is revealed, and do not affect points or answers.
Why we are allowed to process the information
Room data is processed on the basis of legitimate interest (GDPR Art. 6(1)(f)) in running the game you and your friends started. On the same basis, your IP address is used briefly to limit abuse, such as creating rooms in bulk or trying to guess room codes. The IP address is not stored in the game database.
Who we share information with
Cloudflare, Inc. provides hosting, the database and abuse protection as our data processor (GDPR Art. 28). The game database is stored in Cloudflare’s EU region. Our technical error logs at Cloudflare contain no player names or answers and are deleted automatically after at most seven days.
YouTube (Google) only receives information if you choose to load a song. See the section on music below.
We do not sell personal data and do not share it with anyone else.
Transfers outside the EU/EEA
YearBattle runs on Cloudflare’s global network. Requests may pass through servers outside the EU/EEA, but room data is stored in the EU region. Cloudflare is a US company, and transfers are covered by the EU Standard Contractual Clauses.
How long we keep information
A room can be used for four hours. After that, the room and everything in it is deleted automatically, no later than one day after the match started. Information in your browser stays until you clear site data for yearbattle.com.
Music and YouTube
The YouTube player only loads when you choose to load the song. YouTube then gets access to your IP address and technical information from your browser, among other things. The player uses YouTube’s privacy-enhanced embed. Playback, ads and any further processing are controlled by YouTube and Google. YearBattle does not download song recordings or album covers. The optional music for the dance animations also uses a visible YouTube player that you open yourself.
Google Privacy Policy · YouTube Terms of Service
Your rights
You can ask for access to, correction of or deletion of information about you, and you can object to the processing. Email privacy@yearbattle.com. Since the game has no accounts, we need the room code and your player name to find the room. You can remove local information yourself by clearing site data in your browser.
If you believe we process information in breach of the rules, you can complain to the Norwegian Data Protection Authority, Datatilsynet, or to the data protection authority where you live.
Children
The game does not ask for real names or contact details. If you are a parent or guardian and want us to delete a room your child took part in, email privacy@yearbattle.com and we will delete it.
Changes and contact
We update this page when the game changes; the date at the top shows the latest version. Send privacy questions to privacy@yearbattle.com.