Privacy policy
Who is responsible
The operator of the Vesthetics brand publishes Sheriff Night and is responsible for the game-related personal information described here. For support, privacy questions or a data request, email support@vesthetics.io. You do not need a Sheriff Night account.
This notice covers Sheriff Night on iPhone, Android and in the browser, including online rooms. It is separate from the Vesthetics fitness app's privacy notice. For help with the game, visit Sheriff Night support.
Playing on one device
Pass-and-play saves stay on your device: player names, settings, chip counts, custom penalty text, cards already seen and game progress. The installed app includes its cards and can play this way without an internet connection. These saves are not uploaded to the room server. Purchases, online rooms, opening websites and support emails have separate network uses, described below.
Device storage also keeps your pass status and reminder preferences. Clearing the app's data or deleting the app removes its local saves; clearing the game site's browser data removes browser saves. Your device's backup service may keep or restore app data according to your own iCloud, Google or other backup settings.
Playing in an online room
When you create or join a room, the service receives your nickname, room code, a room-specific player ID, a private reconnect token and your game commands. It keeps settings, scores, cards, responses, votes, dice, words, timers and the command history needed to restore play and avoid applying a move twice. These data run the room, reconnect players and recover play after a server restart. Online rooms currently use free starter decks; they do not send store receipts or pass status to the room server.
Players in your room see nicknames, scores and the information needed for the game. Votes and confessions stay hidden from other players until the round reveals them. Unrevealed dice go only to the roller; the active Wanted! word only to the actor. The server processes the complete game state, including these hidden values. Connections use HTTPS/WSS encryption in transit, not end-to-end encryption between players.
Anyone with the room code or invitation can join while the room is in its lobby. Share invitations with people you want to play with. You can use a fictional nickname. Players can remember, copy or photograph information shown to them; leaving cannot erase their copies.
Room retention and security
Room state is in memory and private files on an encrypted Fly.io volume in Frankfurt, Germany. A room expires after two hours without a successful player action, or 24 hours from creation, whichever comes first. The server removes expired files while running or when it next starts. When the last player successfully leaves, the live room file is removed. We do not keep a permanent room history.
Encrypted daily backups can retain a copy for one day after that backup is taken. They expire automatically and are used for recovery. A restore checks room expiry before allowing players to rejoin. Leaving or room expiry does not immediately erase an existing backup.
To protect against excessive requests, the application keeps each connection's IPv4 address or IPv6 /64 network prefix in memory for that connection's lifetime. Room-creation attempt counters use the same address or network prefix in a rolling window of about one hour, including when a counted attempt fails to create a room. Expired counter entries are removed periodically during normal service operation. Addresses and network prefixes are not written to room files or application logs. Application logs do not contain nicknames, reconnect tokens, votes, words, dice or request payloads.
Returning to a room or leaving it
Your device saves the room code and private reconnect token so you can return to your seat. It also saves pending commands until the server confirms them or you explicitly leave. Native apps use private app storage; browsers use local storage.
Leaving clears saved recovery information on your device. If the server receives your leave request, it also removes your seat. When you are offline, closing the app, clearing browser data or deleting the app cannot immediately remove server data; room retention limits still apply. Simply closing the app or browser normally keeps your seat available for reconnecting. Never send your private reconnect token to support or another player.
Purchases and subscriptions
Apple or Google processes the weekly Party Pass subscription and the one-time Saloon Pass. We do not receive your payment card or bank details. The app uses store purchase and entitlement information to unlock packs and check renewal, expiry or revocation; it keeps the resulting pass status on your device. Sheriff Night does not upload store receipts to its room server.
The stores make sales reports and order records available to us for accounting, tax, refunds and purchase support. Required records are kept for the applicable legal period. Store accounts, payments and records follow Apple's privacy policy or Google's privacy policy. Clearing app data does not cancel a subscription or delete store records; manage subscriptions in your store account.
Renewal reminders
If you enable reminders and allow notifications, the app schedules local notifications around two days before upcoming Party Pass renewals. Later dates can be estimates; your store account shows the billing schedule. No Sheriff Night server sends these notifications. The app prepares a limited number of upcoming reminders and updates them when it runs; delivery depends on device settings. Turn reminders off in the game or your phone's notification settings.
Sharing, calls and tracking
Sharing an invitation or an end-of-night result opens your device's share sheet. You choose the receiving app and recipients; their handling follows their own policies. Sheriff Night has no room chat or built-in voice or video calls. If you use WhatsApp, Discord, FaceTime or another call service alongside the game, Sheriff Night does not receive its audio or video.
The game contains no advertising, analytics SDKs or crash-reporting SDKs. We do not use room data to track you across apps or websites, build advertising profiles or sell personal information.
If you write to support
If you email support@vesthetics.io, we receive your email address, message and attachments. The app opens your own mail app; it does not send automatically. We use messages to answer you and resolve or understand game problems. Support mail is handled through Zoho Mail in its European data center. We delete resolved correspondence within 90 days, unless a legal requirement means we must keep it longer. Avoid sending passwords, reconnect tokens or unnecessary personal information.
Where the GDPR applies, online game data and purchase-related support are processed to provide the requested service (Article 6(1)(b)); service security and other support rely on our legitimate interests in protecting the game and helping players (Article 6(1)(f)). Required accounting and tax records rely on legal obligations (Article 6(1)(c)).
Hosting and reading this notice
Fly.io hosts the browser game and room service. Vercel hosts the canonical Sheriff Night privacy and support pages on vesthetics.io. These providers process technical request information, including network addresses and operational records, to deliver and secure their services. See Fly.io's privacy statement, Vercel's privacy notice and Zoho's privacy policy.
The standalone Sheriff Night privacy page needs no sign-in, contains no analytics scripts or advertising, and sets no cookies. The game uses device storage for saves and recovery, as described above. Providers' infrastructure records follow their own retention rules; room expiry is not a promise to erase those records. A Frankfurt room server does not mean every provider operation is confined to Germany or the EU. Providers explain their international processing and safeguards in their notices.
Your choices and rights
You can play pass-and-play without creating an online room or contacting support. Use a nickname, leave rooms when you finish, and use device controls to clear local app or browser data. Deleting local data does not erase another player's copy or immediately delete server backups.
For personal information we hold about you, you may request access, correction, erasure, restriction or portability where applicable, and object to processing based on legitimate interests. Email support@vesthetics.io with your request. We may need enough information to verify it without exposing another player's data. We may no longer be able to identify an expired room and cannot retrieve data kept only on your device. Legal retention requirements and other people's rights can limit a request.
You may complain to the supervisory authority where you live or work, or the Czech Office for Personal Data Protection (ÚOOÚ).
Children and changes
Sheriff Night is not directed at children. The After Dark level requires confirmation that everyone playing is at least 18. Online rooms currently use friendly starter content. If you believe a child has provided personal information to us, contact support.
We update this notice when the game's data practices change. The date above identifies this version.