Privacy Policy

Last updated 11 October 2026

Playing alone needs no account, and nothing about it leaves your phone.

Online play uses a small account: a key made on your phone and the name you choose. No e-mail, no phone number, no password.

The server keeps your name, your online nights, your friends, what the monster has learned of how you play, the fair-play checks and, if you buy points, your purchases; if you allow notifications, also where to send them. The full list is below. No ads, no tracking, and nothing is sold.

Purchases go through the App Store or Google Play. We never see your card or payment details.

Your microphone is never recorded. Your voice goes only to friends in your group, only while you hold TALK. On phones that cannot understand your whispers themselves, an AI on our server reads their words as text, only if you allow it, and keeps nothing.

Your camera is used only if you ask for clips with your face, and those clips stay on your phone.

Notifications come only if you allow them, never at night, and you can turn them off at any time.

Who we are

Peekadoor is made by Eren Yamic, an independent developer in Vancouver, Canada ("we", "us"). For questions about this policy or your data, write to hello@erenyamic.com.

Playing alone

Playing alone or with the friends the phone plays needs no account and no internet connection. Your progress, costumes and settings are saved on your phone and are not sent to us. Buying points uses the small online account described below (it is made for you if you have none).

Playing online: what the server keeps

The first time you play online, your phone makes a key in its secure hardware (the Secure Enclave on iPhone, the Keystore on Android). The private half never leaves your phone; the server keeps the public half to recognise your phone. Peekadoor's server, which runs on Cloudflare, keeps:

Your account: a random account ID, the public key, whether your phone is an iPhone or an Android phone, the name you chose with its four-digit number (such as Mia #4821), and when the account was made and last used.
Your online nights: for each night, when it was, which night of the game, whether you played one of the friends or him, how it ended, keys found, friends freed, locks opened, friends caught, the time, your points, and which other players were in it. Also your totals and your fastest escape.
This week's points: the points from nights that your phone's account and the host phone's account agree on, for the weekly board.
Friends: the players you asked to be friends, the players who asked you, your friends, and calls into a friend's group (its six-digit code, for ten minutes).
Safety: the reports you make (which player, why, and which night) and the players you block.
Moving to a new phone: a one-time eight-digit code, kept only in scrambled (hashed) form, valid for ten minutes.
What he has learned of you: counts of how you play, so that the monster knows you a little better every night: where you tend to hide, the room you search first, where you run when he loses you, whether you come back for friends on his posts, and the doors you hold against him. Each night's counts are also added, without your account or anything that points to you, to totals shared by all players.
Fair play: to keep the weekly board fair, whether Apple (App Attest) or Google (Play Integrity) confirmed that the game is the real, unmodified app on a real phone (asked once for each account; nobody is turned away by the answer) and the key Apple's check made for it; whether your phone found its own saved game edited outside the game; and whether the account is kept off the weekly board for play no one could do (more nights in a day or more points in one night than a night allows, or reports of cheating from several players who were in a night with you). A player kept off the board can still play everything and still sees their own place.

Buying points

Peekadoor is free to play. You can buy packs of points from the App Store or Google Play and spend them on costumes, doors, tattoos and characters; they change only how things look. Apple or Google take the payment: we never see your card, your bank details or your store account. So that bought points are safe on any phone you play on, the server keeps, with your online account:

Your points: how many bought points you have left, and how many you have bought in all.
Each purchase: the store (Apple or Google), its transaction or order number, the pack, the points, when it was, whether it was a real or a test purchase, and whether it was refunded.
What your bought points paid for: each costume, door, tattoo design or character, and when.

When you buy a pack, your phone sends the store's proof of the purchase (Apple's signed transaction, or Google's purchase token) to the server, which checks it with Apple or Google before it adds the points. So that the store can tell the server whose purchase it was, the game gives the store a random code made from your account; the code says nothing about you. If Apple or Google refunds a purchase, they tell the server, and the points are taken back. Points you earn by playing stay on your phone.

What other players see

Your name and its number, and your character in a night.
After a night, the other players who were in it see your name in their records. From there they can report you, block you, or ask you to be friends.
The weekly board shows the names and points of the week's top players, and each player their own place.
Your friends see whether you are in the game's online screens right now.

What we never collect

E-mail addresses, phone numbers, passwords, real names, contacts, photos, precise location, payment details, advertising identifiers, or recordings of your voice or your face. There are no ads and no tracking in Peekadoor, and we do not sell or share your data. When you open the game from a notification, the server notes it, to count how many were opened.

Your connection

When your phone talks to the server, Cloudflare sees its IP address. We use it only in the moment: to slow down anyone creating accounts in bulk, and to find players near you from the rough region Cloudflare works out from it. We do not store IP addresses or locations.

In a night online, the phones connect to each other with WebRTC, which is encrypted. With players you don't know, the connection goes through Cloudflare's relay, so neither of you sees the other's IP address; the relay only passes on encrypted data it cannot read. With friends in your group, phones can connect directly, which, as in any direct call, lets them see each other's IP address.

Your microphone and voice

Voice chat works only between friends in a group, only while you hold TALK, and only reaches friends near you in the house. It goes from phone to phone, encrypted, and is never recorded or kept, neither on your phone nor on the server.
In the night, the microphone also lets him hear you, and lets the others understand what you whisper to them. Your words are turned into text on your phone; the recording never leaves it.
Understanding what you whisper: on iPhones with Apple Intelligence, Apple's model on your phone reads your words, and nothing leaves it. On other phones, and only if you allow it (the game asks the first time it would be needed, and you can change your answer in Settings → Account), the text of what you whispered, never the recording, is sent to Peekadoor's server, where an AI model run by Cloudflare (Workers AI) reads it to understand the order or the question. Neither we nor the model keep it. Short orders like "Leo, hide" are understood on your phone either way.
His plans: during a night, the monster can ask an AI model what to do next. It is told only the game's situation (the time, the rooms players were last seen in, the habits above, with no names), never your name or anything you said. On iPhones with Apple Intelligence that is Apple's model on your phone; on other phones with an online account, the AI model on our server, which keeps nothing.
You can turn the microphone features off in the game's Settings.

Notifications

After your first night, the game asks whether it may tell you when something happens: when the Seven Nights open, new houses and events, offers in the shop, and when the day's house is waiting. Nothing is sent unless you say yes, and then your phone asks you too. Notifications never come at night (between 10 pm and 9 am in your own time), and you can turn them off at any time in Settings → Account or in your phone's settings.

Reminders the game sets itself (a night of the Seven Nights opening, the day's house, the Night Pass's last days) are scheduled on your phone and need nothing from the server.
News we send: if you allow notifications on an iPhone, the server keeps, with your online account, the address Apple gives your phone for notifications (a push token), the game's language and your phone's time zone (as an offset from UTC), so that each message reaches you in your language and at a decent hour. If you open the game from one of them, the server notes that you did, to count how many were opened. Apple's Push Notification service delivers them.

Clips

If you allow it, your phone keeps the last seconds of a night so that you can share them. They stay on your phone and leave it only if you share them yourself.

If you choose clips with your face in Settings, the front camera films your reaction during the night and adds it to the clip. That stays on your phone like the rest of the clip, and the camera is used for nothing else.

AirPods

With AirPods that follow head movement, you can turn your head to look along the hall while you peek. The movement is read on your phone, used in the moment, and never stored or sent.

Game Center

If you are signed in to Game Center on your iPhone, the day's house sends your escape time and your streak to Apple's Game Center leaderboards, where other players see them with your Game Center name. Game Center is Apple's service, under Apple's privacy policy; these scores don't go to Peekadoor's server.

Who handles the data

Cloudflare runs Peekadoor's server, database and relay for us, and the AI models on the server (Workers AI), under its data processing terms, and may process data outside your country. Apple and Google distribute the game and take the payment for purchases, under their own privacy policies; Apple runs Game Center and delivers notifications to iPhones; and Apple's App Attest and Google's Play Integrity check, once for each account, that the game on your phone is genuine. Nobody else receives your data, unless the law requires it.

How long we keep it

Your account and everything above, for as long as the account exists.
An account that nobody has used for 12 months is deleted automatically, with everything about it, unless points were bought with it: then it is kept, so that what you bought is still there when you come back.
Weekly points are cleared after 8 weeks.
Calls into a group and codes for moving to a new phone expire after ten minutes and are cleared every day.
Reports are kept for up to 12 months, then deleted.
Your phone's notification address, until you turn notifications off, delete your account, or have not opened the game for 6 months. Which notifications were opened, for 12 months.
When an account is deleted, the nights it was in stay in the other players' records, without its name or anything that points to it.

Deleting your account

In the game: Settings → Account → Delete my account. Everything the server keeps about you is deleted at once, and your phone forgets its key. That includes your bought points and what they paid for: they cannot be brought back afterwards. Refunds are up to Apple or Google, under their rules. If you no longer have the game, see Delete your Peekadoor account.

Your rights

Wherever you live, you can ask for a copy of what the server keeps about your account, ask us to correct it (you can change your name yourself in the game), or ask us to delete it. Write to hello@erenyamic.com with your player name and its number. You can also complain to the privacy authority where you live; in Canada, that is the Office of the Privacy Commissioner of Canada.

Children

Peekadoor is a horror game and is not directed at children under 13. We don't knowingly collect personal information from children under 13, and an online account holds no contact details. If you believe a child under 13 has an online account, write to us and we will delete it.

Changes

If this policy changes, we will update this page and the date at the top.