Privacy Policy
Last updated October 7, 2026
The short version:
- You Got Bars runs in your browser. Your videos and your scores are saved on your device. We don't upload videos to Dumblit unless you tap Submit to the leaderboard.
- To play you make an account. We keep your email, a scrambled (hashed) password, your Instagram handle, your birth year and your plan on our servers (section 6). If you buy Pro, Stripe handles the payment and we never see your full card number.
- If you submit a run, we upload the video with your handle, beat and score and show it publicly in the Game's gallery and leaderboard, where anyone can watch and vote on it. Submitting is for players 18 and older.
- We see your run only if you post it and tag us, and it goes to the app you pick when you share.
- Two things do leave your device:
- If you turn on the auto judge, your browser's speech service (Google in Chrome, Apple in Safari), or Apple's speech recognition in the Dumblit app, hears your mic to score your words.
- If you use crew words and one of them isn't in our list, the word is sent to a rhyme dictionary (Datamuse).
- We don't sell your information, and we don't run ads or trackers in the Game.
This policy explains how Dumblit, Inc. ("Dumblit", "we") handles information in the You Got Bars game at dumblit.com/games/yougotbars and any app version of it (the "Game").
1. What stays on your device
The Game saves the following in your browser's local storage on your device:
- your settings
- the Instagram handle(s) you enter
- your crew word list
- scores, ratings and recent runs
- which rhyme words you've already been dealt, so they don't repeat
- that you passed the age check and agreed to our Terms, with the date
- your sign-in code and a copy of your plan, so the Game knows you're logged in (section 6)
Recordings are made on your device and kept in memory until you save, share or submit them. None of this is sent to Dumblit unless you submit a run (section 5). Your account details are kept on our servers (section 6). The Game also saves a random device code, used to count one vote per device (section 5), and which runs you voted for. You can erase it at any time:
- Rankings → Reset clears scores and runs.
- Clearing this site's data in your browser settings erases everything.
2. Camera and microphone
With recording on, the Game uses your camera and microphone to make your video. Your browser (or your phone, in the Dumblit app) asks your permission first. The video is built on your device. With recording off, the camera isn't used. The microphone is still used if the auto judge is on (see below).
3. Third parties that receive data
- Speech recognition (auto judge). If "Auto judge" is on, the Game uses your browser's built-in speech recognition. To do that, your browser may send your microphone audio to its maker's servers: Google for Chrome, Apple for Safari. In the Dumblit app it's Apple's speech recognition, which may run on your device or on Apple's servers. They process it under their own privacy policies. Dumblit never receives that audio or the transcript. Turn "Auto judge" off to avoid this. You can rate yourself instead.
- Datamuse (crew words). If you add a crew word the Game doesn't know, it asks the Datamuse rhyme service (api.datamuse.com) for rhymes. Only that word is sent, along with your IP address, as with any web request.
- Google Fonts. The Game loads its fonts from Google Fonts, which receives your IP address and browser details.
- Stripe (Pro payments). If you go Pro, you pay on Stripe's secure checkout page. Stripe receives your card details, email, billing country and postal code, and handles them under the Stripe Privacy Policy. Stripe tells us only your plan's status, renewal date and a customer reference, never your full card number. Stripe also sends your receipts.
- Email. Password-reset emails are sent through our email provider (Twilio SendGrid or Microsoft Azure Communication Services), which receives your email address and the message.
- Hosting. dumblit.com is hosted on Microsoft Azure. Like any website, the server sees standard request information (IP address, browser type, the pages and files requested) in its logs.
- Apps you share to. When you tap Share or Post to Instagram, your device hands the video to the app you choose. From then on that app's terms and privacy policy apply.
4. If you post and tag us
If you post a run on Instagram and tag or Collab with @yougotbarsofficial or @dumblitstudios, we can see your public handle and post. If we feature you, we may message you on Instagram. We use that information to credit you, feature you and run the promotion, as described in the Official Feature Rules. We may also use your public post, including your handle, voice and likeness, in Dumblit's marketing and advertising, including paid ads. See section 4 of the Terms of Use. That isn't a "sale" of your information. It's the license you give us when you post. We keep records of feature permissions for as long as the repost is up, plus a reasonable time after. We keep signed releases for as long as we use the recording.
5. If you submit a run to the gallery
Submitting is optional and only for players who are 18 or older. When you tap Submit, the Game uploads to Dumblit:
- the video of your run
- the Instagram handle on it
- the beat, bars, word level and score, and when you submitted it
Your run then appears publicly in the gallery and leaderboard at dumblit.com/games/yougotbars/gallery, with your handle. Anyone can watch it, share its link and vote on it. Dumblit can repost it and use it in marketing and advertising under section 4 of the Terms of Use, and can hide or remove any run at any time.
To keep voting fair and stop abuse, we store a scrambled (hashed) form of your device code and IP address with each submission, vote and report. We can't turn those back into the original code or address, and we use them only to limit votes to one per device per run and to rate-limit abuse.
Players you block in the gallery are remembered on your device only. Blocking also sends Dumblit an anonymous report on the run you blocked from, like the Report button does.
Submitted runs are stored on Microsoft Azure in the United States. We keep a run until you ask us to remove it or we remove it. To take a run down, email studios@dumblitinc.com from the Instagram account on the run, or with a link to it, and we'll remove it from the gallery. Copies other people already shared may stay where they shared them.
6. Your account and the Pro plan
When you make an account, we store on Microsoft Azure in the United States:
- your email address, used to log you in, reset your password and send notices about your account or plan
- your password, only in scrambled (hashed) form. Nobody at Dumblit can read it
- your Instagram handle and your birth year, used to confirm you're 13 or older and whether you're under 18
- which version of the Terms you agreed to, and when you signed up
- your plan: Free or Pro, its status and renewal date, and Stripe's customer and subscription references
- which gallery runs you submitted, to count the Free plan's weekly submission
- sign-in sessions, stored as hashes, which expire after 60 days or when you log out
We use this only to run your account and plan, keep the Game fair, and stop abuse. We don't use it for advertising and we don't email you marketing. We keep it while you have an account. When you delete your account on the account page, we delete your account record, sign-ins and reset links right away and cancel any Pro plan. Runs you submitted stay in the gallery under your handle until you ask us to take them down (section 5). Stripe and Dumblit keep payment records for as long as tax and accounting laws require.
7. Children
The Game is not for children under 13. We ask for a birth year before you make an account. Under 13, you can't make an account, and we don't store the birth year. If you believe a child under 13 has sent us information, email studios@dumblitinc.com and we'll delete it. Players aged 13 to 17 need a parent's or guardian's permission to play and to post. Submitting runs to the gallery is for players 18 and older only.
8. We don't sell or share your information
Dumblit does not sell your personal information. It does not "share" it for cross-context behavioral advertising, as those terms are defined in California law. The Game has no ads, analytics or tracking pixels. Voting uses only the random device code described in section 5. Sharing your payment details with Stripe so it can charge you for Pro is not a sale.
9. Your rights
Depending on where you live, you may have the right to:
- know what personal information we hold about you
- have it deleted or corrected
- not be discriminated against for using these rights
Most Game data is only on your device, and you control it. You can see your account details on the account page and delete your account there. For anything else we hold, such as submitted runs, feature permissions or messages, email studios@dumblitinc.com. We'll respond within 45 days.
10. Security
The Game is served over HTTPS. Passwords and sign-in codes are stored only as hashes, and card payments happen on Stripe. Data saved on your device is only as secure as your device, so use a screen lock and a password you don't use anywhere else.
11. Changes
If we change this policy, we'll update the date above. If the change is material, the Game will ask you to agree again.
12. Contact
Dumblit, Inc. · studios@dumblitinc.com
