Policy
Privacy Policy
Last updated: May 2026
The short version
- ✓ We collect your email address only if you choose to sign in (entirely optional). It is used for authentication and optional Daily reminder emails.
- ✓ We use Fathom Analytics and PostHog for privacy-respecting page-view, game-flow event, and client error counts. Analytics does not use tracking cookies or store analytics IP addresses.
- ✓ We do not sell your data, run ads, or share anything with third parties for marketing.
- ✓ You can delete your account anytime from Account controls.
What we collect
Anonymous game data (always, for all players)
Each player is assigned a random anonymous ID stored in your browser's local storage. This ID is used to track your game stats (wins, losses, rating, daily challenge results) without requiring any account. No name, email, or device info is stored alongside it.
Email address (only if you sign in)
Signing in is entirely optional. If you choose to sign in, we store your email address in Supabase (our database provider). Your email is used solely to:
- Send you a one-click magic link to authenticate (no password ever stored)
- Protect Ranked matchmaking, ratings, and leaderboard entries
- Send Daily reminder emails only if you subscribe
Reminder emails include an unsubscribe link backed by a random token stored only as a hash. We never send marketing emails, newsletters, or promotional content. Your email is never sold or shared.
Analytics and client errors
We use Fathom Analytics, a privacy-first service that collects anonymous page views and event counts. Fathom does not use cookies and does not track individuals.
We also use PostHog for custom product events and client-side error tracking. We send route-level page paths, selected game-flow events, sanitized URL/referrer values, account ID if you sign in, and client error metadata. We do not send your email address to analytics. Analytics is not used for ads and is not shared with third parties for marketing.
What we don't collect
- Passwords (we use magic links only)
- Precise location data
- Stored analytics IP addresses
- Persistent device fingerprints
- Tracking cookies
- Session replays or heatmaps
Data storage
Game records, account data, Daily reminder subscriptions, and reminder send records are
stored in Supabase. This browser's anonymous player ID, game/auth state, and local preferences are stored in localStorage.
No tracking cookies are placed.
Your rights & deletion
You can delete your account from Account controls. This also clears local game data from the current device.
- If you are signed in: deleting your account permanently removes your email address, Daily reminder subscription, reminder send records, profile, ratings, match history, Daily results, and account-owned event rows. Multiplayer game rows involving your signed-in player IDs are removed; opponents' match history is kept with your player ID scrubbed.
- If you are not signed in: the delete action clears local device data only. Anonymous Daily Challenge and online game records may remain on the server under this browser's anonymous player ID. They are not linked to an email address.
Contact
Questions about privacy: use the feedback form.