Privacy Policy
Last updated 24 October 2026 ·Applies to Muggins for iPhone and Android, and to this website
The short version
- There are no accounts. You don't give us an email address, a phone number or a password. The app makes up a random ID for you when you first open it.
- To play with your crew, we keep what the crew needs to see on our server: your display name, avatar, usual drink, the rounds you've played and the game in progress.
- Practice mode, where you play against the computer, stays on your phone and is never sent to us.
- We don't show ads, and we don't use analytics, tracking or crash-reporting tools. We don't sell your data.
- Leaving a crew deletes your profile from it. When the last person leaves, the whole crew is deleted. You can also email us and we'll delete it for you.
Who we are
Muggins is made by Clora Tech ("we", "us"), the data controller for the information described here. If you have any questions about this policy or your data, email admin@cloratech.com.
What we store on our server
A crew is a group of people sharing a crew code. Everything below belongs to a crew and can be seen by everyone in it. Anyone you give the crew code or an invite link to can join and see it too.
| What | Why |
|---|---|
| Your profile: the display name you type, your avatar emoji and colour, and your usual drink (type, milk, sugar, sweetener) | So your crew can see who's playing and who drinks what |
| Your member ID: a random ID made on your phone, plus a scrambled (hashed) copy of a secret key that only your phone holds | So only your phone can change your profile and play your moves |
| Round history: who played each round, who lost, and when | The scoreboard and stats |
| The game in progress: its players, moves (coin picks, calls, reaction times, scores, which block was pulled), the round name the host gives it, drink orders and the result | So every phone sees the same game |
| Your push token and a random device ID | So we can tell your phone when someone calls a round |
| The crew's code and name | So people can join and find the crew |
"Pass the phone" games and Pass the Bomb are saved to your crew in the same way, so they show up in the scoreboard.
Server logs
Our server runs on Cloudflare. Like any website, it sees the IP address of each request. We use it briefly to limit how many crews one address can create or look up, which stops people guessing crew codes. We don't keep it. Cloudflare keeps short operational logs of requests and errors (the address called, the time, the result, and IDs such as the member, device and crew involved) for up to 7 days. These logs never include your name, your drink or round names.
What stays on your phone
- Your profile, your member ID, the crew you're in, recent round names and whether you have Crew Pass.
- Your secret key, kept in the iPhone Keychain or Android's encrypted storage. It isn't backed up or copied to other devices.
- Practice mode games against the computer. These are never sent to us or logged anywhere.
- The Monday morning scoreboard reminder, which your phone schedules itself.
Services we use
We use a few services, each for one job. None of them is used for advertising or tracking.
| Service | What it does | What it receives |
|---|---|---|
| Cloudflare | Hosts our server and stores the crew data above | Everything in "What we store on our server" |
| Apple Push Notification service (iPhone), Firebase Cloud Messaging by Google (Android) | Delivers the round-call notification | Your push token, plus the host's name, the round name and the crew code shown in the notification |
| RevenueCat | Manages the Crew Pass purchase and restores it when you reinstall or change phones | Your random member ID and your purchase history from the store. It doesn't receive your name or drink |
| Apple App Store, Google Play | Take payment for Crew Pass | Your payment details go to Apple or Google under their own privacy policies. We never see them |
Some of these providers process data outside the UK, including in the United States. Where they do, they rely on safeguards approved under UK data protection law, such as the UK International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework.
How long we keep it
- A game that's in progress is deleted 10 minutes after its last move if nobody finishes it. A finished game is kept until the crew's next game replaces it.
- Round history is kept for as long as the crew exists, so the scoreboard keeps working. Anyone in the crew can undo the latest round.
- Your profile and push token are kept until you leave the crew or someone removes you. Push tokens are also deleted when Apple or Google tells us a token is no longer valid, for example after you delete the app.
- The whole crew is deleted when its last member leaves.
- Server logs are deleted automatically after up to 7 days.
After you leave, rounds you played stay in the crew's history under your random member ID only. Your name, avatar and drink go with your profile.
Your choices and rights
- Leave the crew from the You tab. This deletes your profile and push token from that crew straight away.
- Turn off notifications at any time in your phone's settings.
- Delete the app to remove everything stored on your phone.
- Ask us at admin@cloratech.com for a copy of your data, or to delete your data or a whole crew. Tell us the crew code and the display name you used, as we have no other way to identify you.
Under UK data protection law, you have the right to access, correct, delete or move your data, and to object to or limit how we use it. We rely on two legal bases. Providing the game you asked for is the first. For the short server logs, we rely on our legitimate interest in keeping the service secure and working. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Children
Muggins is made for groups of friends and colleagues deciding whose turn it is to do something — the tea round, the pub round, the washing up. It isn't directed at children under 13, and we don't knowingly collect data from them. If you think a child has joined a crew, email us and we'll remove them.
This website
This website doesn't use cookies, analytics or tracking. It loads fonts from Google Fonts, which sees your IP address when your browser fetches them. The App Store and Google Play badges link to Apple's and Google's sites, which have their own privacy policies.
Invite links
When someone shares a crew invite from the app, the link is a page on this website (cloratech.com/muggins/join/) that carries the crew code. Opening it either hands the code straight to Muggins on your phone or shows it to you with links to the stores. Like any web page request, our web host records the address requested, including the crew code, and your IP address in its standard access logs, which are kept for a short time for security. Nothing about you is stored by the page itself, and the code is only useful to someone who also has the app.
Changes
If we change how Muggins handles your data, we'll update this page and the date at the top. If a change is significant, we'll also mention it in the app.