Privacy

Last updated: September 27, 2026

This notice explains how TripFish, LLC handles information when you visit or play Hey Mayor! at heymayor.app, use the iPhone app or contact us, and how to turn off analytics or request deletion.

Who we are

Hey Mayor! is operated by TripFish, LLC, a Delaware limited liability company, 205 S 1st St, Brooklyn, NY 11211, USA. Contact: hello@heymayor.app. TripFish, LLC is the controller of the personal information described here.

What we collect

• Game and page events. When analytics is enabled, we send the pages you open, the buttons and links you tap on our pages (including their labels and destinations), sections you view, how far you scroll, games started, moves and board states, scores, time played, settings, discovered rules, and the optional feedback ratings and note you type on the results card. Events use a randomly assigned browser ID that links visits and game activity. Please don’t put personal details in feedback.
• Technical data. Requests to load the site and its resources send your IP address and browser details to the providers below. Analytics also receives the page address (which can include query parameters), referring page, browser, device type and screen size. PostHog may derive an approximate location, such as country or city, from your IP address.
• Optional email sign-up (website only). If you submit the notification form on the website’s home page or results card, your email address and opt-in status are stored on a PostHog person profile linked to the same browser ID. The address is not included in the game events, but the profile can connect it to past and future activity using that ID. Signing up is optional and does not create an account.
• Messages to us. If you email us, we receive your address, message, attachments and any name or other information you include. This includes support, privacy and arbitration opt-out requests.

The site and app do not request access to your contacts or your device’s precise location. PostHog session recording and click autocapture are turned off; the explicit event tracking described above still runs when analytics is enabled. A random ID is not a guarantee of anonymity, especially if you submit an email address or identifying feedback.

Why we use it

• To learn whether the games are fun and clear: how far players get, how long they play and whether they come back.
• To understand problems and compare game variations using analytics and feature flags.
• To use an optional sign-up address for the single mobile-availability notification requested through the form. Signing up does not guarantee a release or a release date.
• To respond to messages, handle privacy requests and disputes, protect the Service and comply with legal obligations.

Who receives it

We use these service providers to run Hey Mayor!:

• PostHog (analytics, US cloud) receives the events, browser or app-scoped ID, page data and IP address when analytics is enabled, and your email address if you submit the website’s sign-up form.
• Railway (hosting) serves the website’s pages and may process request logs, including IP addresses, requested URLs and browser details.
• Google Fonts and jsDelivr deliver the fonts and the graphics library the browser games use. Like any service your browser downloads files from, they receive your IP address and browser details. The app bundles these resources locally; opening a website from the app makes the usual website requests.
• Email providers process messages you send to our contact addresses and our replies.

We may also share personal information with a law enforcement body, regulator, court or other party where we believe disclosure is required by law; with an actual or potential buyer of the business and its advisers in connection with a sale or transfer; and with anyone else with your consent.

Sales of personal information

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Cookies and local storage

When enabled, PostHog uses first-party cookies and browser storage to recognize returning browsers and maintain analytics sessions. If your browser’s time zone is in the European Union, the European Economic Area, Switzerland or the United Kingdom, the website runs PostHog without cookies or browser storage, so each visit counts as a new anonymous visitor. The games use local storage for settings, best scores, onboarding and discovered rules. A local flag remembers that you submitted the email form; it does not store the address.

The site and games also keep the most recent 50 event reports in local storage, including submitted feedback notes. This local log continues even with analytics off. When analytics is enabled, the same reports are also sent to PostHog. Session storage remembers the analytics setting for the tab, game-session counters and selected test variations.

Turning it off

Analytics starts automatically on this site unless disabled as described below. These controls stop future PostHog collection after the page loads with analytics disabled; they do not undo earlier collection.

• When your browser exposes Do Not Track as enabled or Global Privacy Control as true, the site does not start PostHog and the email sign-up offers are hidden. If you change a browser signal, reload each already-open page for it to take effect.
• Turn off analytics in this tab. The link reloads this page with ?analytics=0. You can add that parameter to any site page before opening it; use &analytics=0 if the address already has a question mark, or replace an existing analytics value with 0.
• The choice is remembered in session storage for this tab on the same site address. Other tabs, browsers, devices or site addresses need their own setting. If session storage is blocked, keep analytics=0 in each page address you open; following a link without it may turn analytics back on. An explicit analytics=1 overrides the saved tab choice, but not Do Not Track or Global Privacy Control.
• Disabling analytics does not stop requests to the host, font or code providers, delete existing cookies or stored data, or stop the local event log. Feedback submitted with analytics off stays in that local log and is not sent to us.
• To withdraw the email notification request, email privacy@heymayor.app from the address you submitted. Turning off analytics does not withdraw an earlier email sign-up.

Use your browser’s site-data controls to delete this site’s cookies and local storage, including its browser ID, settings, scores, feedback log and sign-up flag. Clear session storage to reset tab settings; closing a tab normally ends its session, but restoring tabs may restore saved state. Clearing site data does not delete information already sent to PostHog or to us, and it can reset your analytics-off setting. Save your play ID, if shown below, before clearing data if you need it for a request.

iPhone app

The app sends game activity, optional feedback ratings and notes, technical data and a random app-scoped ID to PostHog when analytics is enabled. PostHog may derive approximate location (country or city) from your IP address. The app does not request your name. We do not collect email addresses in the app through a sign-up form or create PostHog person profiles there. Please do not put identifying details in feedback; if you email us separately, we receive the message information described above.

Analytics is on by default. Turn it off in Settings > Anonymous usage in the pause menu. Your choice is saved on this device across launches when storage is available; if storage fails, the choice still applies to the current launch. Turning it off stops future analytics capture and feature-flag refreshes, but does not delete information already sent. The website’s tab setting does not change the app setting, and the app setting does not turn off analytics on websites opened from the app. Session recording, click autocapture and automatic crash reporting through PostHog are off. Explicit game and button events still run when analytics is enabled.

The app stores its random analytics ID in local storage. Settings, the analytics choice, best scores, onboarding progress, discovered rules and the recent event log are also stored on this device. The app backs these values and its analytics identity with native Preferences so they can survive webview storage eviction. There are no accounts or cloud saves provided by us, and we do not guarantee that an unfinished board can be resumed. Clearing browser data outside the app does not clear this native storage. Removing app data can lose local scores and settings and reset the analytics choice; it does not delete information already sent to us or PostHog. Device backups and restoration may retain or restore local data according to your device settings.

As on the website, the local log keeps the most recent 50 event reports, including submitted feedback notes, even with analytics off. Local storage and native Preferences are not a server-side deletion mechanism. A website play ID may differ from the app’s ID; if you cannot supply an app ID for a privacy request, contact us without turning analytics back on. We may be unable to locate particular events without enough information to match them.

If you choose to share content through the system share sheet, iOS passes that content to the app or recipient you select. Their handling of it is governed by their own policies. The native sharing capability does not require access to your contacts. Links to our legal and support pages open the website in a system browser, where the website’s privacy controls apply.

How long we keep it

Retention depends on the information, its use for the purposes above, provider settings, and any need to meet legal obligations or resolve disputes. The site and app do not set a fixed automatic deletion deadline for information sent to providers. You can request deletion or withdraw an email sign-up using the contacts below. Local settings and scores remain until cleared or removed from browser or app storage; the local event log replaces older entries as new reports are added.

Your rights and deleting your data

Depending on where you live, you may have the right to access, correct or delete your personal information, receive a copy, object to or restrict processing, withdraw consent, or appeal a decision about a request. Withdrawing consent does not affect processing already lawfully carried out. The Global Privacy Control signal disables PostHog as described above. We will not discriminate against you for exercising applicable privacy rights.

To exercise these rights, email privacy@heymayor.app. Include the address you signed up with or, if available, your play ID and enough information to describe the request. We may need to verify that the information relates to you. Requests are handled within the time required by applicable law, subject to its exceptions; some records may need to be retained for legal obligations or disputes.

The play ID appears below only when analytics is enabled and PostHog loads successfully. If it is absent, you can still email us; you do not need to turn analytics back on. With no account, email address or saved ID to match, we may be unable to locate particular events. Clearing browser data first can remove the ID needed to find earlier activity.

Your play ID in this browser:

If you are in the EU or UK

Where EU or UK data protection law applies, consent is the basis for the optional email notification. Our interests in operating, protecting and improving the Service and responding to messages may provide a basis for processing where permitted by law; legal obligations may also require processing. These bases do not override any separate requirement for consent to cookies or similar storage. The analytics controls above are opt-out controls, not a prior-consent prompt.

Our PostHog project uses the US cloud, so analytics data is sent to the United States. Other providers may process information in countries outside your home country, where privacy protections may differ. Contact privacy@heymayor.app about processing or transfers. You may complain to your local data protection authority.

Children

The Service is intended for people aged 13 or older, or any higher minimum age required where they live. Children under 13 must not use it or submit information. If you believe we have received a child’s personal information, including a browser ID, feedback or email address, contact privacy@heymayor.app so we can investigate and address deletion as required by law.

Security

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please do not send passwords, payment information or sensitive personal information in feedback or support messages.

Changes to this notice

We may update this notice as the Service, the law or our providers change and update the date above. Any additional notice or consent required by applicable law still applies.

How to contact us

For privacy questions, rights requests or email opt-outs, write to privacy@heymayor.app.