Your photos stay private.

Photo Impostor is in beta. Your selected name, avatar, friends and game results are stored to run the game. A guest account is created on your device.

Photos

Before each game you approve a small batch of photos; only those are uploaded, and only for that game. The server removes location metadata and stores photos privately in Cloudflare R2. Players in your room can see photos during the game; the impostor cannot see the secret photo until the game ends. People who see a photo can still take a screenshot.

Hints

The selected photo is sent at reduced resolution to OpenAI to generate a short, broad hint for the impostor. We request no API response storage. OpenAI may retain API data under its abuse-monitoring policies.

Storage and deletion

Game photos become inaccessible after 24 hours and are deleted automatically. They are removed sooner when a room closes or starts a new game. Profiles and results remain until you delete your account in Settings. Deleting your account removes your stored photos, profile, friends and results. Account data is processed by Supabase; the game server runs on Railway.

Guest accounts

Keep the app installed to retain your guest profile. Cross-device account recovery is not available yet.

Updated September 2026.

Privacy · Photo Impostor