Updated October 28, 2026
Twenty is a multiplayer game operated by NemoPlays. Contact support@nemoplays.com with privacy questions or requests.
Guest play uses a player name, an identifier and a session cookie to recognize you and keep your games working. We store room membership, submitted words, questions, guesses, answers, game results and scores. Other people in your room can see shared gameplay. Keep private information out of names and game messages.
If you save a profile, we store your email address and the sign-in identity supplied by the method you choose. Apple or Google handles its own authentication; we do not receive your Apple or Google password. We use email delivery services to send requested sign-in links.
You can add a profile photo to your saved account. The app crops and resizes the image on your device before uploading a JPEG copy. We store it with your player profile and show it to accepted friends and people who share a room with you. We do not upload your photo library. You can replace or remove your photo in You. Deleting your account removes the stored photo; encrypted backups may retain older copies until their retention period ends.
Adding friends is optional and is available to guest players and saved profiles. Adding someone from a shared room creates the friendship immediately; adding a friend code sends a request that needs approval. We store friend codes, requests, connections, recent online status, game invitations and spectator access. Guest connections stay with your guest player on this browser or device. Saving that player retains them; signing into an existing profile carries guest connections and blocks to that profile. Friends can see your name and online status and watch your games. Anyone with a room invitation link can also watch without joining, a room password or host approval. Spectating shows public clues and results without revealing an unrevealed secret or giving the viewer a player slot, a turn or points. Joining as a player still follows room passwords, approval and player limits. We do not upload your contacts or show your email address to friends. You can decline or cancel code requests, remove friends, and block or unblock players. Blocks prevent spectator access as well as new contact. Deleting your account also removes its friend connections, invitations, blocks, presence, spectator access and pending join requests.
If you enable turn alerts on iPhone, we store an installation identifier, Apple push token, your player identifier and links to rooms you have joined. Apple Push Notification service delivers reminders only when you need to act. Lock-screen messages do not include secret words, questions or guesses. We keep a delivery record to prevent repeated alerts and limit their frequency. Undelivered alerts expire within five minutes or when the turn deadline is reached, whichever comes first. Turn alerts off in My profile or manage permission in iPhone Settings. Signing out removes the registrations tied to that session. Deleting your player also removes its device registrations and delivery records. Turn alerts are for gameplay, not advertising.
Rankings are off by default. If you choose to appear in rankings, your player name, score and rank can be shown to other players in worldwide and friend rankings. You can turn this off in Friends & Rankings. Rankings use recorded game scores, not your email address. You can download your social account data from the same section.
Apple or Google processes purchases in its store. Stripe processes web checkout when available. RevenueCat helps verify store subscription status and provides subscription analytics so we can understand purchases and renewals. These services may receive your internal player identifier and purchase information. We do not store your full payment card details.
Our hosting and delivery providers process the information needed to operate the service. This includes Render for the game service and Spacemail for sign-in email delivery. Requests contain network information such as an IP address, which is also used for security and rate limits. Your device stores necessary session information, your appearance preference and local mini-game progress.
Twenty does not include advertising trackers or sell personal information. Information is used to run the game, save progress, verify access, prevent misuse and respond to support requests.
On the website, we count anonymous Pro plan views, plan choices, checkout attempts and returns so we can improve the purchase flow. A random identifier in tab session storage connects these steps. Stripe confirms successful paid checkouts. We also collect technical error categories and limited code file locations to find crashes. These reports exclude game content, names, emails, full page URLs and advertising identifiers, and are stored by Twenty for up to 30 days. We do not send this reporting data to an advertising or analytics vendor.
For small marketing campaigns, an allowlisted campaign label in tab session storage can be associated with your internal player identifier for up to 30 days. We use it to count game participation, completed rounds and paid access, including participation in rooms created by referred players. Reports are aggregate and do not expose names, email addresses or game content. Clearing tab storage removes the browser label; contact support to request removal of a stored association.
You can play as a guest without creating a saved profile. Saved accounts can be deleted from My profile, under Account settings. This removes the saved sign-in identity, name and score and ends account sessions. Shared room history can remain labeled “Deleted player.” Purchase records may be retained to prevent purchase reuse and meet applicable obligations. Deleting an account does not cancel an Apple, Google or Stripe subscription; cancel it through the billing provider.
For access, correction or deletion requests that you cannot complete in the app, email support. We may need to verify that a request belongs to the player concerned. We retain information needed to provide the service, handle security or billing issues and satisfy applicable obligations, and remove it when it is no longer needed.
We will update this page when our practices change. The date above identifies this version.