Privacy Policy

1. What We Collect

When you sign in via Google or Discord, we store:

• Display name — from your OAuth provider (you can change it at any time from your profile Settings)
• Nickname — a public handle you choose on first login, used for your public profile URL and leaderboard entries
• Email address — used only for account identification and admin login checks. It is never displayed on leaderboards, public profiles, or the profile header
• Profile picture — from your provider (you can override it)
• Game scores & play history — to power leaderboards and achievements

We do not collect passwords (OAuth only), payment information, or precise location data.

1a. Email Privacy

Your email address is a private field. It is visible only to you, inside your profile Settings, and is used internally to identify your account across sign-ins. It is never shown on the public profile page, on leaderboards, in search results, or to other users.

2. Cookies & Sessions

We use the following categories of cookies:

• Essential cookies — session cookie (keeps you logged in) and OAuth state cookies (temporary, used during login)
• Advertising cookies — if you accept all cookies, Google AdSense may set cookies to show personalized ads. You can opt out at any time via the cookie banner or your browser settings

Essential cookies are always active. Advertising cookies are only set if you explicitly consent by clicking “Accept All” in the cookie banner.

3. Advertising

We use Google AdSense to display ads. When you consent to advertising cookies, Google may use cookies to serve ads based on your browsing history. Google's use of advertising cookies is governed by Google's Privacy Policy.

You can opt out of personalized advertising at Google Ads Settings or by choosing “Essential Only” in our cookie banner.

4. How We Use Your Data

• Display your name and avatar on leaderboards and public profiles
• Track game scores for rankings and achievements
• Show online player counts (anonymous, session-based)
• Process feedback you submit via the contact form

5. Data Sharing

We do not sell, rent, or share your personal data with third parties. Your data stays on our servers.

6. Data Storage & Security

Your data is stored in a PostgreSQL database on our European VPS. Sessions are managed via Redis with encrypted cookies. All traffic is served over HTTPS.

7. Your Rights (GDPR)

You have the right to:

• Access — see what data we store about you (visible on your profile page)
• Rectification — update your display name, nickname, and avatar at any time from your profile Settings
• Erasure — delete your account yourself from Profile → Settings → Danger Zone. Deletion is immediate; see section 8 for what happens
• Portability — request a machine-readable export of your data via the contact form

For any question that cannot be handled from your profile directly, contact us via the contact form.

8. Account Deletion & Retention

We retain your data as long as your account is active. You can delete your account yourself at any time from Profile → Settings → Danger Zone → Delete My Account. You will be asked to type your nickname to confirm.

When you delete your account:

• Removed immediately: your display name, email, avatar, XP, unlocked titles, daily challenge progress, streaks, and XP history
• Kept (anonymized): your past game scores, play counts, and leaderboard history. These are re-attributed to a placeholder Deleted User so rankings and statistics remain consistent for other players

Account deletion is permanent and cannot be undone. Signing in again with the same Google or Discord account creates a brand-new, empty profile.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via a notice on the site. Continued use after changes constitutes acceptance.