Privacy

PlayBotto is run from the United Kingdom by Bob Sheth. For anything on this page, including a data request, write to bob@moveforward.com. We are the data controller for the information described below.

If you create an account: your email address, your name if you give one, and a profile picture if your sign-in provider supplies one.

When you play: which games you played, at which level, the moves in each game and the result. If you rate a game we store the rating, the reasons you picked and any comment you wrote.

If you play without an account: a random identifier your browser generates and stores locally, so we can tell that one free game per game has been used. It is not linked to you, it contains nothing about you, and clearing your browser storage removes it.

We do not ask for your date of birth, your address, or payment details, and there is no way to send a message to other players — there are none.

• Clerk — sign-in and account security. They hold your email and password credentials; we never see a password.
• Convex — the database that holds your games and results.
• Cloudflare — hosting, the content network that serves the site, and basic traffic analytics.
• OpenRouter — routes each of Botto's turns to the AI model that plays it. It receives the state of the game being played; it does not receive your name or email.
• Google AdSense — advertising, once ads are enabled. See below.

The site is free and is paid for by advertising. Ads are served by Google AdSense on the catalogue and game pages, and between games — never on the screen you are playing on.

If you are in the UK or the EEA you will be asked, before any personalised advertising, whether you consent to it. That prompt is Google's own certified consent tool, and your choice is recorded by it. The site works exactly the same if you refuse — you will see non-personalised ads instead, and every game remains available.

Google may set cookies or similar identifiers to measure ads and limit how often you see the same one. You can review and change your choice at any time through the prompt, and Google's own controls are at myadcenter.google.com.

Apart from advertising, we set no tracking cookies. Sign-in uses a cookie because it has to — that is what keeps you signed in.

Your results are kept while your account exists — that is what your account page shows you.

The move-by-move log of a finished game is deleted after 90 days. Records of how many games you played on a given day are deleted after 90 days. A guest's free-play record is deleted after 90 days.

We keep a short internal record of what Botto was shown and what it replied on each turn, so we can investigate a game that played badly. It is deleted after 7 days, or after 90 days if you rated that game down and told us why. It is never shown to players.

You can delete your account yourself, at any time, from your account page. It removes your sign-in and everything we hold about your play. It cannot be undone and we do not keep a copy.

If you would rather we did it, write to bob@moveforward.com from the address on the account.

Under UK GDPR you can ask us for a copy of your data, ask us to correct it, ask us to delete it, object to how we use it, or ask us to restrict it. Write to bob@moveforward.com and we will reply within one month.

Our lawful basis is performing the contract you enter when you create an account (running the games and keeping your results), our legitimate interest in keeping the service working and free from abuse, and your consent for personalised advertising.

If you think we have handled your data badly you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first.

PlayBotto is for adults and is not directed at children. We do not knowingly collect information from anyone under 13. If you believe a child has created an account, write to bob@moveforward.com and we will remove it.

If this policy changes we will update the date at the top. If a change materially affects you, we will say so on the site.