Privacy
12 Player doesn't collect anything about you. There are no accounts and no sign-ins, no advertising, no analytics and no tracking. It contains no third-party code, only Apple's own system frameworks. It doesn't ask for your name, location, contacts, camera or microphone, and it sends no notifications.
This policy covers 12 Player on Apple TV, iPhone, iPad, Mac and Apple Vision Pro, and this website. 12 Player is in development and has not been released; this page describes the current build (0.1) and will be updated if that changes. 12 Player is made by Gordon McDowell.
Nothing goes to the internet
12 Player doesn't connect to the internet. It has no servers, no online play and no leaderboards. Everything happens on the device running the game and, if phones join, directly between that device and the phones.
Nothing is saved
12 Player saves nothing on your device: no settings, no scores, no names, no history. Seats, colours and results are forgotten when you close the app.
Phones on your WiFi
So that phones can join as controllers, the device running 12 Player hosts a small web page on your local network while the app is open, and announces it on that network with Bonjour. The QR code in the lobby holds that page's local address and a room key that is made fresh every time the app starts. The key only tells one launch of the game from the next; it is not a password. Anyone on the same network who scans the code, or opens that address, can take a seat.
The page is served from the device running the game, not from the internet, and it loads nothing from anywhere else. While a phone is connected it sends only its controls (where the thumb is on the steering ring, whether GO is held, and counters that keep taps in order), together with the room key, the random identifier described below, and a second random value that is made fresh each time the page loads and is not stored. The game sends back the phone's seat number, its colour, whether it is in the lobby, racing or in its second role, and how full its GO pad should be. No names, contacts, location or anything else about the phone or its owner is asked for or sent. This traffic goes straight between the phone and the device running the game, never through a server, and it is not encrypted.
As with any connection, the game can see each phone's address on the local network. It uses it only to limit how many connections one device may open, and doesn't keep it.
What the phone's browser keeps
The controller page stores one random identifier in the browser tab's session storage, so that reloading the page gives you your seat back. It is not a cookie, it identifies nothing but that tab, and the browser discards it when the tab is closed. The page sets no cookies. It also asks the phone to keep its screen awake while the page is open.
The Local Network permission
Your device may ask whether 12 Player can find and connect to devices on your local network. That permission is what lets phones reach the game through the QR code; it is used for nothing else. If you decline, the game still plays with remotes, controllers, a keyboard and the touch screen, but phones may not be able to join.
Controllers
Siri Remotes, game controllers, keyboards and trackpads are read only as game input: steering and GO.
This website
12player.app is a set of static pages. It sets no cookies, runs no analytics or advertising scripts, has no forms, and loads its fonts and images from its own address. It is hosted on Cloudflare, which, like any web host, processes each request's internet address and browser details in order to deliver the page and protect the site, and keeps request logs.
Questions
Email gord@12player.app. If you email, your address and message are used only to reply.
Last updated October 11, 2026.