Privacy policy

Last updated: 1 October 2026

Name That Tone is operated by Scott Digital. This policy explains how information is used when you play at namethattone.app or use its question editor. For privacy questions or requests, contact Scott Goodacre using the contact details on scottdigital.co.

Information collected when you play

You can play without providing your name, email address or creating an account. For each submitted answer, we store the question identifier, the brand selected, whether the answer was correct, a randomly generated round identifier and the submission date and time. The round identifier groups answers within a round; it is not your name or a verified identity. These records are not linked to an email address or player profile.

We use these records to calculate answer percentages, understand question difficulty and improve the game. Public feedback shows aggregated percentages and response counts, not individual round records. Percentages refer to previous answer attempts, rather than a count of unique people: someone playing again can contribute another answer.

Session cookie

The game and editor use a first-party session cookie, normally named PHPSESSID. It contains a random session identifier that lets the server maintain your round, recognise answers already submitted and protect editor sessions and forms. The cookie is necessary for these requested functions. It normally lasts for the browser session, although some browsers restore session cookies when reopening. You can delete or block it in your browser settings, but gameplay and editor sign-in may then stop working.

The application does not use advertising cookies. Fathom Analytics measures visits without setting analytics cookies or using local storage to identify visitors. The necessary game session cookie is separate from Fathom.

Display preference

The site starts in light mode. If you change the display mode, we save your light or dark preference in this browser’s local storage under ntt-theme. It is not sent to our server or used to track you. It remains until you change it or clear the site’s browser data. Blocking local storage does not prevent you from changing the mode for the current page.

Fathom Analytics

We use Fathom Analytics to understand visits, popular pages, referral sources, approximate location and device or browser categories. It loads a script from cdn.usefathom.com and sends pageview requests containing the site identifier, hostname, page path, referrer and relevant campaign parameters. Requests also carry IP address and browser user-agent information. It does not receive your selected brands, score, editor password or game round identifier from our application.

Fathom processes request information, including IP address and browser user-agent, to create site-specific visitor signatures using a salt that changes daily. This processing is not the same as collecting no personal data. Our dashboard provides aggregate statistics rather than named visitor profiles. We enable Fathom's option to honour browsers' Do Not Track setting.

Analytics helps us understand and improve the website; where personal data is processed, we rely on legitimate interests. Fathom's regional processing, international transfers and retention arrangements are described in its data journey and privacy policy. Aggregate reports are retained in our Fathom account until removed or the site's analytics data is deleted.

Editor security and hosting logs

The editor stores its password as a one-way hash. Failed sign-in attempts are recorded with a hashed IP address and timestamp to limit repeated attempts. A hashed IP address is security-related personal information; hashing does not guarantee anonymity.

Our hosting provider, Krystal, may process IP addresses, requested URLs, browser information and timestamps in access, error or security logs to deliver and protect the website. The application does not store raw IP addresses in its answer table.

Why we use information

Where information is personal data, we rely on legitimate interests to operate the requested game, maintain reliable response statistics, prevent misuse and secure the editor. We keep collection limited and do not use game answers for advertising or decisions about employment, education or eligibility. The game score is for entertainment, not a formal assessment.

Storage and sharing

Questions and responses are stored in the site's database on Krystal hosting. Hosting and backup providers may process information on our behalf to run, secure and restore the service. GitHub is used to store application code and run deployments; the deployment workflow does not upload the live answer database or configuration file to GitHub. We do not sell game response records.

Links to Scott Digital, original social posts or other websites take you to services with their own privacy policies. The Scott Digital footer logo is served by this website, so displaying it does not require a request to another site.

How long information is kept

Answer records are retained while the associated question remains in the question bank, including archived versions, to preserve its response history. They are removed when that question's response history is permanently removed. They are not automatically deleted when you finish a round. Failed editor sign-in records are retained until administrative housekeeping removes them. Server session data expires or is removed according to the hosting session settings. Hosting logs and backups follow the hosting provider's retention arrangements and may persist after data is removed from the live database.

Your rights

Where we hold personal data about you, UK data protection law may give you rights to access it, correct it, request deletion, restrict its use or object to processing based on legitimate interests. Which rights apply depends on the information and circumstances. Contact us through Scott Digital to make a request. Because gameplay does not collect your identity, we may be unable to identify a particular answer record from your name alone; we will explain what is possible without asking you to provide unnecessary identifying information.

You can also raise a concern with the Information Commissioner's Office, the UK data protection regulator.

Changes to this policy

We will update this page when the site's data practices change. The date above shows when this policy was last revised.