7PM

Privacy Policy

Last updated October 25, 2026. This Privacy Policy applies to 7PM (7pm.com), our website and mobile apps for live game shows, quizzes, reruns and chat. 7PM is provided by Flying Pigs LTD. This policy explains how we handle personal information, including information received through Sign in with Google. You can read this policy and request help without signing in.

Google sign-in: information we access

When you choose Sign in with Google, Google provides basic identity information through our authentication provider, Supabase: your Google account identifier, email address and whether it is verified, name and profile photo or its URL when available. We also receive authentication tokens needed to establish your 7PM session. We request basic sign-in permissions, not access to your Gmail messages, Google Drive files, Calendar or Contacts. We never receive your Google password. If you use Sign in with Apple in a supported app, we receive the account identifier and the name and email Apple makes available, which may include a private relay email address.

How we use Google account information

We use your provider identifier and email to create and recognize your 7PM account, validate sign-in and help resolve account or support requests. Your name and photo can initialize the profile displayed beside your chat messages and game results; you can change your display name and avatar in your profile. Account information connects your participation, scores and preferences to the same account across sessions. We do not sell Google account information or use it for targeted advertising. Signing in does not grant us access to other Google services.

Other information you provide

We collect profile edits and uploaded avatars; chat messages; quiz answers, price guesses, votes, reactions and scores; notification preferences; and reports or blocks used to moderate the community. Contact and deletion-request forms collect the name, reply email and message you submit. We use these records to run games and chat, calculate results, save preferences, respond to you and prevent abuse. Please do not send passwords or sign-in codes through chat or support forms.

Show streaks and optional purchases

We save each show's qualifying participation day and streak against your 7PM account so it works across the website and apps. Eligible mobile reminders use that progress and your enabled push registration. If you choose a paid streak restoration in a supported app, Apple or Google handles payment. We receive store transaction information and verify it with that store before restoring the selected streak. We do not receive your payment-card details. Purchase references prevent duplicate use and recover interrupted delivery. Account deletion removes streak progress and disconnects purchase records from your 7PM account; a hashed transaction reference may remain to prevent reuse.

What other viewers can see

Your display name, avatar or profile photo, public chat messages and displayed game results can be visible to other viewers, including in reruns and leaderboards. Uploaded profile images are served through public image URLs. Your account email, Google account identifier and sign-in tokens are not included in your public profile. Information you choose to post in public chat can be read or copied by others, so avoid sharing sensitive information there.

Technical data, cookies and local storage

Our hosting and security services process connection information such as IP address, browser or device details, requested URLs, request times and error or security events to deliver and protect the service. Where optional server analytics is enabled, we use the country and state already supplied by our hosting service only to apply regional measurement settings. We do not forward that location or your IP address from our first-party statistics service or make a separate location lookup. The separate browser connection to Google Analytics is described below. Browser or app storage keeps the sign-in session, installation identifier and preferences needed for account, game and notification features. Cloudflare may use security cookies and browser checks to distinguish legitimate traffic from abuse. Clearing local storage can sign you out or reset choices, but does not itself delete your server-side account.

Service statistics

Updated 7PM apps and the website use our own limited usage statistics to improve registration, onboarding and games. Separately, the public website and blog use Google Analytics as described below; the mobile apps do not include that Google Analytics tag. We do not use advertising identifiers, advertising audiences or cross-service tracking. Where permitted, we measure foreground opens, registration-screen views, registration-button taps, verified registrations, notification permission, game starts and distinct answered questions. We do not include answer values, chat text, names, email addresses or precise location in these statistics. Full measurement is enabled in all supported countries and territories. A random app/browser identifier rotates each calendar month. We temporarily link registered activity to your 7PM account to calculate activation and returning-player totals. These inputs are personal information, even though our reports show totals rather than individual profiles. Temporary daily measurement records expire within 45 days; saved internal period reports last up to 13 months. We keep a secret-derived network key for abuse prevention for no more than a day and do not store your IP address in the statistics tables. Before the global full-measurement rollout, some countries used limited session or daily-summary modes. Historical records from those modes keep their original safeguards: no stored account linkage; session records and daily-summary identifiers deleted after aggregation within 48 hours; internal intermediate counts expire within 45 days; protected reports last up to 13 months; groups and complementary groups below 20 are suppressed and counts rounded to tens. Older device date flags expire when next used and stopping clears them. Missing historical activity is not backfilled. Unknown or invalid locations remain unmeasured. The same registration disclosure links to this privacy information in every country, without a separate banner or acceptance button. The existing separate statistics from necessary service records are unaffected. Privacy signals and your stop choice override these permissions. These describe our collection settings and your choices. New measurement is not sent to Mixpanel. Previously collected Mixpanel records remain subject to our existing 90-day deletion cycle and stop/deletion requests; provider erasure may take up to 30 days and is retried until acknowledged.

Google Analytics on the website and blog

We use Google Analytics 4 to count website and blog visits and understand which posts people read. The Google tag sends the public page URL and title and basic browser, device and session information to Google. We remove URL query strings and fragments and do not send referrers, account identifiers, names, email addresses, chat messages or game answers. Google receives connection information, including your IP address, when your browser contacts its servers; this is separate from our first-party statistics. Analytics cookies distinguish browsers and sessions for up to 60 days without extending their expiry on repeat visits. Event and user data retention in our property is set to two months. Google signals, advertising personalization and advertising storage are disabled. The tag is not included in the native apps and does not run on admin or sign-in routes. Your browser's Global Privacy Control or Do Not Track signal and the stop control below prevent the Google tag from loading. Signed-in account objections are checked before collection. Stopping removes these analytics cookies and blocks future collection on this browser; it does not automatically erase earlier records already held by Google. Contact Us for access or deletion requests. Google may process measurement outside your country under its applicable data-processing terms. You can learn more at https://policies.google.com/technologies/partner-sites.

Internal aggregate statistics

We also prepare restricted internal weekly statistics from account, profile and accepted participation records already needed to provide 7PM. These reports can cover all locations without creating new tracking events. They contain rounded totals, without account identifiers, answers, messages, location or device details. Groups with fewer than 20 distinct accounts are suppressed, larger counts are rounded down to tens, and reports use fixed completed weeks with a one-week delay. Returning-participant counts are also suppressed when either returning or nonreturning groups are too small. Each weekly snapshot is frozen to prevent comparing changes for a single person and retained for up to 13 weeks. We exclude accounts that have stopped optional analytics before a snapshot is calculated. Previously released coarse totals cannot be traced back to remove an individual contribution. These statistics are not sent to Mixpanel or advertising services and are not public reports. Necessary service records keep their existing retention and deletion rules.

Regional basis and international processing

Our purpose is statistical evaluation and improvement of 7PM, with no advertising targeting or decisions about individual users. We use limited first-party information for service improvement and provide a free right to stop, without affecting registration or playing. The two-line disclosure is not a request for consent, and we do not infer consent from inactivity or acceptance of terms. Cloudflare and Supabase process these data under our instructions using our existing hosting and database arrangements; processing can occur outside your country under provider contractual safeguards, including applicable transfer clauses. We remain responsible for those providers. Aggregation itself is processing of personal information. You can request access, correction, deletion or object through Contact Us and stop optional statistics through the controls described above.

Your privacy rights

You can object to optional analytics at any time using the stop control below or Contact Us, without losing access to games. We retain your stop preference to honor it, and an opaque blocked-instance key for up to 45 days so delayed requests cannot recreate deleted statistics. You can also request access, correction or deletion, and restriction of processing where applicable. We verify ownership before disclosing account information. You may complain to the privacy regulator in your jurisdiction, including the Office of the Australian Information Commissioner or the New Zealand Privacy Commissioner. Contact Us reaches the team responsible for privacy requests. You may withdraw any previously given analytics permission using the same stop control. No separate analytics acceptance is required to play.

Notifications and support

If you enable push notifications, we store the device or browser subscription identifier and notification preference needed to deliver reminders. Apple or Google push services, or your browser's push provider, process delivery information for this purpose. You can disable notifications in your device or browser settings. We also save your email-notification preference. When you contact us or submit a deletion request, your form details are delivered to the 7PM support inbox through Resend so the team can respond and verify the request.

Where information is stored and who processes it

Supabase provides authentication and database storage for account, profile and participation records. Cloudflare hosts the website and application services and handles content delivery, media storage, security and real-time chat. Cloudflare and Supabase also process our first-party statistics. Google processes public website and blog measurement through Google Analytics, as described above; Mixpanel retains only previously collected analytics subject to the deletion cycle described above. Resend processes support-form email delivery, and notification providers deliver enabled push messages. These services receive information needed for their respective functions. Your browser or app also stores session and preference information locally. Providers may process information in countries other than your own. We do not sell personal information, and we disclose account information outside these service functions only when needed to comply with law, respond to a valid legal request or protect users and the service.

How we protect information

We use HTTPS to encrypt information in transit between your device and our services. Sign-in is validated through our authentication provider, and server-side authorization checks restrict account actions and private records. Service credentials remain on the server rather than in public website files. Access to support messages and operational data is restricted to the people and service providers who need it to operate or support 7PM. Public profile images and content you deliberately share are not private records. No online service can guarantee absolute security.

Retention and account deletion

We retain account and associated activity records while needed to provide your account and service features, and retain support or security information for the purposes described in this policy. You can request deletion through the Delete Account link below without signing in or installing an app, or use the account-deletion option in a supported mobile app. The web request is sent to our team for ownership verification; submitting the form does not immediately delete the account. As explained on the request page, we process verified requests within 30 days of receiving them. Account deletion covers your 7PM identity and profile, associated chat messages, participation and scores, sign-in sessions and notification registrations. Aggregated statistics that cannot identify you may remain. Deleting 7PM does not delete your Google or Apple account.

Managing Google access and other privacy requests

You can remove 7PM's connection in your Google Account's third-party connections settings. Removing that connection prevents future use of the grant, but is separate from requesting deletion of information already held by 7PM. Use Delete Account to request deletion, or Contact Us to request access to or correction of your information or ask a privacy question. We may ask you to verify account ownership before acting. Use the Optional analytics choice controls on this page to stop statistics for this browser and, when signed in, your account. Updated apps provide a stop choice in the app profile. On the revised registration screen, the sentence “We use limited usage statistics to improve 7PM.” opens this privacy information. The controls on this web page apply to this browser and its signed-in account; to stop collection on an app installation, use the app profile control. You may also use Contact Us to request this choice or deletion of analytics. You can also update your display name and avatar in your 7PM profile, sign out and turn off notifications.

Policy updates and contact

We update this page when our data practices change and show the revised date above. If a change materially affects how we use Google account information, we will provide an appropriate notice before applying the new use and obtain consent where required. For questions about this policy or your data, contact the 7PM team using the Contact Us link below.