Privacy for Are You Sure?

This page explains which data the game Are You Sure? processes. For this website, see the BYTJ Studios privacy policy.

Last updated: 3 October 2026

1. Who is responsible?

Taha Ibrahim Al-Jaber, BYTJ Studios, Waldemarstraße 97a, 10997 Berlin, Germany, kontakt@bytj-studios.com.

2. What stays on your computer

The Steam version is played online only (section 3); there is no practice mode alone against bots.

Your settings (e.g. language, keys, name for online rounds, volume per player) are stored only on your computer.

3. Online rounds (room code)

For online rounds we use services from Unity Technologies (Unity Gaming Services) as a processor:

Sign-in (Authentication): The first time you play online, you get a random, anonymous player ID. We do not ask for your name, e-mail or password.
Rooms and connection (Lobby/Multiplayer, Relay): So your computer can find the others, data runs through Unity’s servers. This technically requires your IP address, the anonymous player ID and the room data: room code, number of players and the name you enter yourself (if you enter none, the Steam version uses your Steam display name). For a room shown in the list, the game first measures which Unity server answers fastest, and the list shows only that server’s continent (e.g. “Europe”). No location lookup from your IP address, nothing about you.
What is shared in the room: chat messages, clues, votes (only shown as a count), emotes and your chosen name go to the others in the room. We do not store chat messages on our own servers.

Legal basis: Art. 6(1)(b) GDPR (you want to play online).

Unity processes the data on our behalf under its data processing addendum: unity.com/legal/unity-data-processing-addendum-dpa. Unity is based in the USA; data may be transferred to the USA.

4. Your Steam ID in the room (Steam version only)

When you play the Steam version online, the game sends your Steam ID (the fixed number of your Steam account) to the other players in your room. It is part of the room’s player list.

Why: so each player can remember how loud they want to hear you, or whether they muted you, even if you change your name. Each player stores this setting only on their own computer (together with your Steam ID).
We do not store Steam IDs on our own servers. They travel over Unity’s connection (section 3).
Without Steam no Steam ID is sent; the volume is then remembered by name.
Add as Steam friend: In the “Players” window another player can use this Steam ID to send you a friend request through the Steam overlay. Whether you accept is up to you in Steam.
Blocking: If you block someone, the game stores their Steam ID or anonymous player ID only on your computer. Their voice and chat are then off for you. Nobody else learns about it.
The host only accepts valid Steam IDs (17 digits) and discards anything else.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest: other players should be able to turn you down or mute you permanently).

5. “Open rooms” list

If you create a room and choose “in the list”, it is visible to all players of the same game version in the “Open rooms” list. Visible are: room name (a random number such as “Fire 2317”, not a name you type), the room’s language(s), number of players and free seats, game mode, whether scares are on, and whether a round is running. The list runs through Unity (Lobby/Sessions, section 3). If you choose “code only”, the room does not appear in the list. The list also shows the room’s chosen mood and, for “Quick join”, member check values: one-way values (hash) of Steam ID or player ID mixed with a random value of the room. No Steam ID can be recovered from them; your computer only compares them with your own block list so you do not end up with people you blocked. Legal basis: Art. 6(1)(b) GDPR.

6. Voice chat (optional, off by default)

Only if you switch on voice chat in the options do we use Vivox (Unity) as a processor.

Your voice is sent live to the others in the room and is not stored.
According to Unity, Vivox stores for up to 30 days: a truncated IP address, a user ID and a device ID (docs.unity.com/en-us/vivox-core/privacy-overview, retrieved 24.09.2026).
Legal basis: your consent by switching it on (Art. 6(1)(a) GDPR). You can withdraw it at any time by switching voice chat off.

7. Reporting players and reporting bugs

At the moment the game does not send any reports to us. If you report a player (in the “Player voices” window) or a bug (F8 key), the game stores the report only on your computer, in the game’s data folder (AppData\LocalLow\BYTJ\Are You Sure\Rueckmeldung). You can delete this folder at any time.

Contents of a report: a report number, game, version, language, type of report and the time (UTC). From you: no name, no e-mail, no Steam ID.
Reporting a player: in addition the room number, the seat number of the reported person and one of four fixed reasons (insults or harassment, disrupts on purpose, inappropriate language, something else). In the Steam version the Steam ID of the reported person is added, so that we can block someone who repeatedly disrupts others from all rooms (section 10). No free text, no name.
Reporting a bug: in addition your short text. Only if you tick it, the game’s log (your Windows user name is removed first) and system information are added (operating system, processor, memory, graphics card and graphics memory, screen resolution, graphics level). Nothing is ticked by default.
Before any version of the game sends reports to us, we will update this section. The game never sends stored reports later without your consent.

8. Steam

If you buy and launch the game through Steam, Valve’s privacy policy also applies (store.steampowered.com/privacy_agreement). We have no influence on it. The Steam version uses Steam for achievements, the “now playing …” status (your status such as “in the lobby” is visible to your Steam friends), the Steam overlay and the Workshop (section 9). Inviting and joining friends: while you are online in a room with a free seat, its room code is part of your Steam status. This lets your Steam friends join your room through an invite or “Join game” in their friends list.

9. Steam Workshop (word packs, Steam version only)

Subscribing: you subscribe to and download word packs through Steam (Valve). The game reads subscribed packs from your computer.
Uploading: if you upload your own pack, this happens through Steam, which asks you to accept the Workshop agreement. The pack’s content (title, description, words, clues, preview image) is public, together with your Steam display name as its creator. You can delete your pack through Steam.
Reporting packs: the “Report” button hides the pack for you, remembers this on your computer and opens the pack’s Workshop page on Steam, where you can report it.
Packs by other players are off by default until you allow them in the options.
Legal basis: Art. 6(1)(b) GDPR; Valve’s privacy policy applies to Steam.

10. Block from all rooms (Steam version only)

If someone repeatedly disrupts others, we can block them from all rooms.

The list: At startup the game downloads a block list from our site (bytj-studios.com/are-you-sure/sperrliste-spieler.json). This technically sends your IP address to our web space at Strato; the request contains no player ID. Strato keeps technical access logs; how long and to what extent is set out in Strato’s privacy policy (https://www.strato.de/datenschutz/). Without a connection, the last downloaded list applies.
What the list contains: no Steam IDs, only check values that the game derives from the Steam ID with a one-way method. No reason, no date. With a lot of computing effort, someone could find out whether a particular Steam ID is blocked.
When joining: The host checks your Steam ID against the list. If you are blocked, the connection is closed. The others in the room are not told why.
Storage: We keep blocked Steam IDs only internally (in our protected list, not public), for as long as the block applies. We lift a block on request when it is no longer needed. Write to us at kontakt@bytj-studios.com.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest: protecting other players).

11. Technical diagnostics from Unity

The Unity engine sends no diagnostic data: “Engine Diagnostics” has been switched off in the project since 3 Oct 2026. Analytics, crash reporting and ads are off as well.

12. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). You can also complain to a data protection supervisory authority.

Write to us at kontakt@bytj-studios.com.
Because we only know an anonymous ID, please tell us the name you used online and roughly when you played. We forward deletion requests to Unity.
For a player report or bug report, please give us the report number.