Privacy

You need an account to make a card. You never need one to play somebody else's. No advertising, no analytics SDK, no tracking. Here is everything we hold and why.

What the app collects

An account, if you make a card

Creating or generating a card requires signing in with Apple or Google. We receive a stable identifier from them and, if you allow it, an email address. We never receive your password. If you use Sign in with Apple and choose to hide your address, we get the relay address and never see the real one — that works fine and we would rather you did.

We store the identifier, the email address if we were given one, and nothing else from your account. No name, no photo, no contacts, no friends list, no access to anything else in your Apple or Google account.

Playing someone else's game needs no account at all. Open a shared link, type a name, play. That path is anonymous and we intend to keep it that way.

An anonymous device identifier

The first time the app runs it creates a random identifier and a token. We store the identifier and a hash of the token — never the token itself, so a copy of our database is not a list of working credentials. This row holds no email address and no password. It exists so activity can be attributed to a device rather than to an IP address a whole school shares, and it is what lets you play without an account.

The topics you type

When you ask for a card, the text you typed is sent to Anthropic, which generates the squares. This is the one place your input leaves our servers, and we are stating it plainly because it is the thing you would most want to know. Anthropic processes it to produce the card and does not use it to train models. We keep the resulting squares in a shared cache so the same topic does not have to be generated twice — that cache is keyed on the topic, not on you.

A display name, if you join a game

Whatever you type when you join someone's game, so other players can see who got a line. Type anything you like — it is not checked against anything and does not have to be your name. It is deleted twelve hours after the game was created, along with everything you marked.

A push token, if you allow notifications

Used only to tell you that someone in your game got a bingo. One token per install, replaced rather than accumulated. Turn notifications off in iOS Settings and it stops being used.

What this website collects

The pages you are reading set no cookies and load nothing from anyone else — no fonts, scripts, pixels or embeds from a third-party server. Our web server keeps standard request logs.

Two things are collected only if you do them:

To stop one person exhausting a shared daily limit, we count requests against a hash of your IP address. The address itself is not stored.

How long we keep it

What we never do

No advertising identifiers. No analytics or attribution SDK. No selling or sharing of data. No location, contacts, photos or microphone. No tracking you across other apps or websites.

Children

Bingo Factory is not directed at children under 13 and we do not knowingly collect anything from them. It has no wagering, no currency, no prizes and no chance — it is a checklist of things to spot.

Your rights

You can delete your account from inside the app, which erases the identifier, the email address if we hold one, and every game you created. It takes effect immediately and needs no email exchange with us.

If you only ever played somebody else's games, there is no account to delete — removing the app erases everything tied to your device.

For anything else — a copy of what we hold, or deletion of an email address or a pasted link — write to us and we will do it. See support.

Changes

If we start collecting something new, this page changes before the feature ships. Last updated February 2026.