privacy

What we keep

Short version: almost nothing, and nothing you did not ask us to keep. Last reviewed 3 October 2026.

Who we are

EGGS DOWN is developed by ArcSystemsTechnology, which operates under ArcGabriel Ltd, a private limited company registered in England and Wales, company number 17389329. ArcGabriel Ltd is the business you deal with when you buy anything here, and is the controller of the data described on the privacy page. Address: Carlile Institute Business Centre, 54 Huddersfield Road, Meltham, Holmfirth HD9 4AE. Email: support@eggsdown.com.

A game in a room

When you join a room you type a name, which the other players in that room see. Your name, your card, the calls and everything that happens in the room live in the server's memory for the life of the room (at most six hours) and are never written to disk, unless you opt in to a crew (below). A seat in a room is a random token in a cookie on your phone that expires with the room.

Counting how the game is used

We record that things happened (a page was opened, a room opened, a number was called, a round ended) with counts and categories, against a code that cannot be turned back into a room. With each visit we also note, coarsely, the country your phone's time zone points to, whether it is a phone, tablet, computer or TV, and its language. To count how many phones visit without a cookie, we work out a code from your connection's address and browser type under a key that is held only in our server's memory and replaced every midnight (UTC); the address itself is never stored, and the code cannot be matched to the same phone the next day. We do not record names, cards or anything you type. We keep these records for 400 days; after a day ends, its totals (counts only, with no code at all) are kept so we can show how the game has grown, for example to future advertising partners. Nothing about you individually is ever shared or sold. Our lawful basis is our legitimate interest in running, improving and funding the game.

Profile photos

In a room hosted with a pass you can add a photo of yourself when you join. Your phone shrinks it to a small square before sending it. It is shown to the people in that room (and on the room's big screen), held in the server's memory while the room is open, and never saved: it goes when you leave, when the host removes it, or when the room closes. Lawful basis: your consent, which you withdraw by leaving or removing the photo.

Host accounts (the passes)

To host with the All-Pass you make an account with a username and a password. We never ask for your email. We keep the username, a salted one-way hash of the password (never the password itself), a one-way hash of your recovery code, when you last signed in, and which version of the host terms you accepted and when. Signing in puts a random identifier in a cookie on your phone for up to 30 days; we store only a one-way hash of it. Lawful basis: our contract with you. You can delete the account at any time from the passes page; that deletes the username, password hash and crews at once.

Things you ask us to remember

• Payments. What you paid for, when, the price, a receipt reference, which account it belongs to and your confirmation that you wanted it straight away. Stripe takes the payment on its own page; we never see your card. We keep payment records for six years because tax law requires it, without your account if you delete it. Lawful basis: our contract with you, and legal obligation.
• Crews (All-Pass). If you tick "remember my results" when joining a crew room, the crew keeps the name you played under and your results (wins, eggs, table rules taken, false calls) for up to three years, visible to anyone with the crew's link. Only then do we put a random identifier in a cookie on your phone (kept up to 400 days), and we store only a one-way scramble of it. Lawful basis: your consent, which you can withdraw at any time by leaving the crew; that deletes your name and every result recorded for you.
• Egg flair you keep. Which flair this phone has found, against the same kind of identifier.

Your rights

You can see, correct or delete what we hold about you. On the passes page, "Delete my account" deletes a host account and its crews, and "Forget this phone" deletes this phone's flair and its place in any crew. For anything else, email us. You can complain to the Information Commissioner's Office at ico.org.uk.

Who else is involved

Railway hosts the game (in the EU). Stripe takes payments. Resend carries email to and from our support address, which we keep for as long as we need to answer you. A nightly copy of our database is encrypted before it leaves our server and kept for 35 days in Cloudflare R2 storage in the EU, so nothing is lost if a server fails. Nobody else receives anything about you, and we do not sell or share data for advertising. The game shows no ads today; if that changes, this page will say so first, and anything that needs your consent will ask for it.

Wherever you are

You can play and buy a pass from anywhere the game is available. Whichever country you are in, your data is held and handled as this page describes, under UK data protection law (and the EU's, as the game is hosted there), and you have the rights above. If the law where you live gives you more, you have that too.

Adults only

EGGS DOWN is for adults, 18 and over, because one of its games involves alcohol. Every player confirms they are 18 or over before joining (and, in a drinking room, old enough to drink where they are), and every host before making an account.