Privacy Policy

Information We Collect

• Account details (email, provider IDs): stored when you sign up or sign in with OAuth providers like Discord, Google, Facebook, GitHub, Apple or Steam.
• Service activity needed to run the app, such as logins, sessions, game activity, and account-related events.
• Content you choose to share, such as your display name, avatar, chat messages, and leaderboard entries. This content is visible to other players.
• Reports you send about a problem, from the report form or the game: what you write, the page or item it is about, any screenshot you add, your browser and screen size, and an email address if you give one. Screenshots are seen only by the site's admins. A report is deleted 180 days after it is closed, and with your account.
• Network information such as IP address, processed transiently for security, rate limiting, abuse prevention, and approximate country-level request statistics. If an IP address is banned for abuse, it is stored until the ban is lifted or expires.

How We Use Your Information

• To authenticate and identify you when you log in.
• To provide, operate and maintain our services.
• To communicate with you about changes, updates, support, and security.
• To protect the service from spam, abuse, automated attacks, and excessive traffic.

Cookies and Local Storage

We use cookies and local storage for core app features and payments, such as sessions, remember-me login, CSRF protection, theme preference, banner dismissal, game authentication tokens, and the last page you visited in the tab (so the report form can fill it in). We do not use analytics cookies, advertising cookies, or third-party tracking cookies.

Third-Party Services

We use third-party services that collect or process personal data on our behalf. Depending on which features are turned on, these include:

• OAuth sign-in providers, when you sign in with one.
• Stripe, which processes payments made on the website.
• Platform stores (Apple, Google, Steam), when you make a purchase in an app.
• A human-verification service (Cloudflare Turnstile) on the sign-up and email sign-in forms, which receives your IP address and browser details.
• An email delivery provider, which receives your email address to send sign-in links, confirmations and account messages.
• Push notification services (Apple Push Notification service, Firebase Cloud Messaging), which receive your device's push token when you allow notifications.
• Error monitoring, to diagnose crashes.

Please review those providers' privacy policies for details.

Data Retention & Security

We keep personal data as long as necessary for service operation and to comply with legal obligations. We use reasonable safeguards to protect your data.

Your Rights

You may request access, correction, or deletion of your personal data by contacting us through the app or support channels.

Contact

If you have any questions about this Privacy Policy, please contact us via the project's contact channels.