1. Who We Are
WhoLikedThat? ("we", "us", or "our") is a free social party game that lets friends guess who liked each TikTok video. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our website and application at wholikedthat.com (the "Service").
By using WhoLikedThat?, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use our Service.
2. Information We Collect
Account Information
When you register for WhoLikedThat?, we collect your chosen username, email address, and a hashed (encrypted) password. We also store your selected profile avatar image, which may be one of our preset robot avatars or an image you upload yourself. This information is necessary to create and maintain your account.
TikTok Video Data
WhoLikedThat? stores references to your TikTok liked videos — specifically, TikTok video IDs and basic metadata (such as author username and video description) that are publicly visible. We do not download, store, or host actual TikTok video files. Videos are displayed in-game using TikTok's standard public embed functionality.
You import your video data voluntarily through one of two methods: our Chrome browser extension, or by uploading a TikTok data export ZIP file that you have downloaded directly from TikTok. At no point do we access your TikTok account credentials.
Gameplay Data
We collect data related to your in-game activity, including scores earned per round, game rooms you have participated in, voting history within games, and room settings you have configured. This data is used to display scoreboards, track progress, and enable multiplayer functionality.
Technical and Usage Data
When you use the Service, we may automatically collect certain technical information, such as your browser type, operating system, device type, and IP address. This information is used for security purposes, to diagnose technical issues, and to understand aggregate usage patterns. We do not use this information to identify you personally.
Referral Data
If you participate in our referral programme — either by sharing referral codes or by signing up with someone else's code — we record the referral relationship between accounts. This is used solely to award ad-free status to eligible users. No personal information beyond your account ID is shared with the referring user.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To provide and operate the Service — creating and authenticating your account, enabling multiplayer game sessions, and displaying your TikTok video collection during gameplay.
- To improve the Service — understanding how players use different features helps us prioritise improvements and fix bugs.
- To communicate with you — if you contact us by email, we will use your email address to respond to your query.
- To enforce our Terms of Service — investigating and addressing any misuse of the platform.
- To display advertising — we serve ads through Google AdSense to support the free operation of the Service (see Section 6 below).
4. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:
- With service providers: We use Google Firebase to store account data and enable real-time multiplayer functionality. Firebase processes data on our behalf and is bound by appropriate data protection agreements.
- With other players in-game: Your username and chosen avatar are visible to other players in game rooms you join. Your TikTok video collection is used as the game content pool — other players see individual videos played during a round but do not have access to browse your full collection.
- For legal compliance: We may disclose information if required to do so by law or in response to a valid legal request from a government authority.
- In connection with advertising: Google AdSense may collect data as described in Section 6.
5. Data Retention
We retain your account data for as long as your account remains active. If you request deletion of your account (see Section 9), we will delete or anonymise your personal information within 30 days, except where we are required to retain it for legal purposes.
Gameplay data (scores, room history) may be retained in aggregate, anonymised form for analytical purposes even after account deletion.
6. Advertising (Google AdSense)
WhoLikedThat? uses Google AdSense, an advertising service provided by Google LLC, to display advertisements within the Service. Google AdSense may use cookies and web beacons to collect information about your visits to this and other websites in order to show you relevant advertisements.
Google's use of advertising cookies enables it and its partners to serve ads based on your visits to our site and/or other sites on the internet. You may opt out of personalised advertising by visiting adssettings.google.com or by visiting www.aboutads.info/choices.
Users who have earned ad-free status (through the referral programme) will not be served advertisements through our Service. Google's own Privacy Policy is available at policies.google.com/privacy.
7. Cookies
We use cookies and similar tracking technologies to maintain your login session, remember your preferences (such as your selected theme and winner sound), and to enable advertising (via Google AdSense). Most web browsers accept cookies by default; you can configure your browser to refuse cookies, but this may affect certain features of the Service (such as staying logged in).
Types of cookies we use:
- Session cookies: Used to keep you logged in during your session. These expire when you close your browser.
- Preference cookies: Used to remember your chosen theme, sound settings, and other personalisation options. These persist across sessions.
- Advertising cookies: Set by Google AdSense to serve relevant advertisements.
- Analytics cookies: Used in aggregate to understand how the Service is being used.
8. Third-Party Services
The Service integrates with several third-party platforms:
- Google Firebase: Used for user authentication, database storage, and real-time multiplayer functionality. Firebase is subject to Google's Privacy Policy.
- TikTok Embed: Videos are displayed using TikTok's public embed feature. TikTok may set its own cookies when embedding content. WhoLikedThat? is not affiliated with TikTok or ByteDance Ltd.
- Google AdSense: Advertising network described in Section 6.
- DiceBear: Used to generate default robot-style profile avatars. No personal information is sent to DiceBear.
9. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information:
- Access: You may request a copy of the personal data we hold about you.
- Correction: You can update your username and profile avatar directly within the game settings at any time.
- Deletion: You may request deletion of your account and all associated personal data by emailing wholikedthat@gmail.com with the subject line "Account Deletion Request". We will process your request within 30 days.
- Opt-out of advertising: See Section 6 for instructions on opting out of personalised advertising.
10. Data Security
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Your account data is stored securely using Google Firebase, which operates on enterprise-grade cloud infrastructure with industry-standard security controls.
Passwords are never stored in plain text — they are managed through Firebase Authentication, which handles password hashing and secure storage. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
11. Children's Privacy
WhoLikedThat? is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information promptly. If you believe that a child under 13 has registered for an account, please contact us at wholikedthat@gmail.com.
12. International Data Transfers
WhoLikedThat? is operated from Australia. If you are accessing the Service from outside Australia, please be aware that your information may be transferred to, stored, and processed in Australia or in other countries where our service providers (such as Google Firebase) operate their data centres. By using our Service, you consent to such transfers.
13. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time. We will notify users of significant changes by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: wholikedthat@gmail.com
- Response time: We aim to respond within 2–3 business days.