Privacy policy

Version 1.12, 4 November 2026. Written to be read; a lawyer's review may refine it.

Who we are

Obean, in Denmark, decides what happens with the data described here. Write to hello@obean.com about anything on this page. The company behind Obean is being registered; its name, CVR number and address will be added here.

The short version

• You can play without an account. We keep a random id for your browser and the name you choose.
• We don't sell data, show ads chosen from your behaviour, or use tracking cookies.
• Chat isn't stored, except a few lines attached to a report, and voice is never recorded.
• Most things delete themselves after a set time, and Delete my data removes the rest at once.

What we keep, why, and for how long

• Your browser's guest: a random id in a cookie, the name you choose, and your bean. It lets you play, join rooms and come back. Kept until 12 months after your last visit, unless you sign in or delete it sooner.
• Rooms and games: the rooms you open or join, invite links (we store only a fingerprint of each link's secret, never the secret), and match results. They run your games and let friends pick up where they left off. Kept 12 months after the room closes.
• Chat: passes through the room while it's open and isn't stored. If someone reports a player, the last few messages are kept with the report.
• Voice chat, only once you press Join voice and allow your microphone: it goes straight between the players' devices, and when that isn't possible Cloudflare relays it, encrypted. Nobody records or stores it.
• Reports and blocks: what was reported, by whom and about whom, with that chat extract, so we can act on it; kept 90 days after we've handled it. Blocks stay until you delete your data.
• Usage events: what happened in the app, such as "a game started", "an invite was opened" or "a quiz word answered right", with coarse facts like phone or laptop, which browser, and the country the connection comes from. No messages, no IP address, and no place more precise than the country. They show us whether Obean works, where it's played, what people learn, and what to fix. Kept 13 months. Counts with no one in them, such as plays per game per day, are kept for as long as Obean exists. For a small share of games, we also record how the game ran (frame times, network timings, the game's own checks, and a recording of the game screen with all text hidden), with no messages, names or IP address, kept 30 days.
• Messages to us: what you send through the contact form, with the email you give us to reply to. Kept until answered, then 12 months. If you tick the box to attach how the game ran, the last two minutes of it on your device (frame times, network timings, error names; no chat, names or screen recording) go with your message and are kept 30 days.
• Your account, only if you sign in: the id Google or Discord gives us for you and the email it shares, so your account works on every device and we can help if you lose access. We don't keep your name, picture or anything else from them. With your account come your sign-in sessions (without IP address or device details), any passkeys you add (a public key; the private key never leaves your device), your friends list, and your game progress (missions won, stars, the run's best) and your beans (each device's total, under a random id that device keeps), so they're the same on every device. If you sign in, your friends can see when you're online and which game you're playing (nothing more, and never a history); you can turn this off on your account page. Kept until you delete your account. If you play the daily, your best result of the day (won or not, stars, score) is kept for 30 days and shown to your friends, never to anyone else, and not while you appear offline.

Your IP address is used for a minute at a time to stop floods of requests, and never stored by us. If you play solo without having given a name, we count you once that day: your IP address and browser are mixed with a random value that changes every day, and the result is kept only until the day is counted, then deleted with the random value, so nobody can tell it was you. Only the day's number is kept. Nothing is stored on your device for this. When you finish a game's daily, your first result of that day is counted the same way, so the result can show how everyone did: only how many reached each score is kept, never who. Our hosting provider keeps request logs for 7 days.

Obean's staff can look at an account, its rooms and its support requests to help you, fix a problem or keep Obean safe. Every look is recorded. Nobody at Obean can sign in as you.

If someone breaks the rules, staff can suspend or ban an account or a browser from rooms. Staff can also give the Obean Pass for free for a while. Either way we keep who decided, why and until when, for 12 months after it ends (a ban, while it stands), or until you delete your data.

Why we're allowed to

Running the games you ask for is the service itself (GDPR Art. 6(1)(b)). Keeping Obean safe, stopping abuse and learning what to fix are our legitimate interests (Art. 6(1)(f)), kept small as described above. Signing in is your choice.

Cookies and storage

We use two cookies, both needed for Obean to work, and none for ads or tracking:

• __Host-obean_guest: your browser's guest, 180 days from your last visit.
• __Secure-obean.session_token: only when you sign in, 180 days from your last visit.

Your browser also keeps a few things that never leave it: your "16 or older" answer, your solo progress and beans (until you sign in), and small settings.

Who helps us

• Cloudflare hosts Obean. Our database is in the EU; the network that serves pages runs worldwide. It also relays voice chat when two devices can't connect directly, and measures how quickly our pages load in your browser, without cookies and without anything that identifies you, so we can keep Obean fast.
• Sentry, in the EU, receives crash reports when something breaks in the app: the error and the kind of device and browser, without your name, cookies or anything you typed. Kept for up to 90 days.
• Google and Discord, only if you choose to sign in with them. They learn that you signed in to Obean, under their own privacy policies.

When we add something that involves another company (payments or ads), this page says so before it starts.

Your rights

You can see, correct, take a copy of, or delete what we hold about you, and object to how we use it. Delete my data works immediately; for anything else, write to hello@obean.com and we'll answer within a month. If you're unhappy with how we handle your data, you can complain to the Danish Data Protection Agency, Datatilsynet.

Age

Obean is for people 16 and over.

Changes

When this page changes, its version and date change too. If a change matters for you, the app tells you before it applies.

Terms

The reviewed text is published here before anyone outside our test group plays. Until then, write to hello@obean.com with any question.

Refunds

The reviewed text is published here before anyone outside our test group plays. Until then, write to hello@obean.com with any question.