Privacy policy
Last updated: October 14, 2026
Alibi Hour is made by The Open Apps, Inc., a Delaware corporation ("we", "us"). This policy covers the Alibi Hour plugin in ChatGPT and the website alibihour.ambientapp.ai, including the party pages guests open on their phones. It explains what we collect, why, who receives it, how long we keep it and how it is deleted.
The short version
- You don't create an account. We know a ChatGPT user only by a scrambled form of the anonymous ID ChatGPT sends.
- We keep your questions, accusations, streak and share links so the daily case, your record and the daily percentile work.
- Party guests don't type a name: they pick a suspect's sheet or join as a detective. Parties are deleted 24 hours after the last activity, or at once when the host ends them.
- ChatGPT never receives a statement you didn't ask for, or the culprit, while a case is open.
- We don't show ads, sell data, send marketing email, or use analytics or advertising cookies.
What we collect
| What | Where it comes from | Why we need it |
|---|---|---|
| A scrambled (hashed) form of the anonymous user ID that ChatGPT sends | ChatGPT | To keep your daily case, record and parties apart from everyone else's. We never receive your name, email address or chat history |
| Which questions you asked in each case (a suspect and a time), your accusation, the result and the time you finished | You, through ChatGPT or the card in ChatGPT | To run the case, show your answers, keep your streak and stats, and work out how your result compares with the day's other players |
| Share links you create | You | To show your result to people you send the link to |
| Parties you host: the case, which suspect sheets are taken, how many detectives joined, each phone's vote, and a random key for each phone | You and your guests' phones | To run the party: give each phone its own private sheet, count votes and show the reveal. The phone keeps its key in its own storage; we keep only a scrambled (hashed) copy |
| Technical logs: the time, the page or tool used, response codes, errors, the approximate country, the language and app type ChatGPT reports, and scrambled forms of the user, conversation and workspace IDs ChatGPT sends | Your browser or ChatGPT | To keep the service running and secure and to find problems. Logs never contain statements, which suspect you asked about or accused, suspect names, party codes, phone keys or IP addresses; for a question or an accusation they record only the case number, the question count and whether the accusation was right |
| Support messages: your email address and message | You | To answer you |
We use your IP address only for a moment, to limit how many requests one device can make. It is scrambled with a key that changes whenever our server restarts, kept in memory for one minute and never written down.
We don't collect names, email addresses (except when you write to support), contacts, photos, precise location or ChatGPT conversations. Party guests ask their questions out loud in the room; those conversations never reach us.
About ChatGPT. You play Alibi Hour inside ChatGPT, where OpenAI handles the conversation under OpenAI's privacy policy.
How we use it
- To run the daily case and parties: answer questions, check accusations, keep streaks and stats, count votes and show results.
- To show how a result compares with everyone who played the same case that day. Other players see only counts and percentages, never who you are or what you asked.
- To keep the service secure and working, and to answer support requests.
We don't use any of it for advertising, profiling or training AI models.
Who receives it
| Recipient | What they receive | Why |
|---|---|---|
| OpenAI | The case file, the statements you ask for, your accusation and result, your stats, party codes and links, which sheets are taken and how many have voted, and after the reveal the result | So ChatGPT can run the game with you |
| People you share a link with | Your result for one case: the title, how many questions you used, whether you solved it, and par. The culprit only after that case has closed | You chose to share it |
| The guests in your party | The case file, which sheets are taken, the vote count, the result after the reveal; each phone sees only its own sheet | It is their game |
| Hetzner Online GmbH | Our servers and database | Hosting |
We may disclose information when the law requires it, or to protect people from harm.
How long we keep it
| Data | How long |
|---|---|
| Your questions, accusations, results and share links | 400 days, then deleted automatically |
| Parties: the case, seats, phone keys (hashed) and votes | 24 hours after the last activity in the party, or until the host ends it, whichever comes first |
| A phone's party key in its own local storage | Until the phone's browser data is cleared, or the guest taps Leave the party |
| Technical logs | 30 days |
| Support emails | 12 months |
Deleting sooner. Say "Delete my Alibi Hour data" in ChatGPT: your questions, accusations, streak, share links and parties are deleted at once, and your share links stop working. A host can say "end the party" at any time. Anyone can ask us to delete their data at support@theopenapps.com.
Children
Alibi Hour is for ages 13 and up. It is not directed at children under 13, and every case is written to suit teens: nothing violent happens. If you think a child under 13 has given us personal data, email support@theopenapps.com and we will delete it.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your data, or to object to how we use it. Email support@theopenapps.com and we will answer within 30 days. You can also complain to your local data protection authority.
Cookies and storage in your browser
Alibi Hour sets no cookies. The party page keeps your phone's key and your notebook in your browser's local storage, on your device only, so a reload doesn't lose your sheet.
Security
Connections are encrypted (HTTPS). Each phone's party key is a long random code, and we store only its scrambled form. The card in ChatGPT uses a key that opens only its own party and expires after 24 hours.
Where data is processed
We are based in the United States. Our servers are run by Hetzner Online GmbH. OpenAI may process data in the United States and other countries, under its own privacy and security commitments. Cloudflare, Inc. runs DNS for our domain name; our traffic does not pass through Cloudflare.
Changes to this policy
When we change this policy we update the date at the top. If a change affects how we use data we already hold, we will say so on this page before it takes effect.
Contact
The Open Apps, Inc. · by email only: support@theopenapps.com