YOUR DATA.
YOUR CALL.
The public leaderboard shows your chosen nickname, server-measured time, and rank. Your email, verification links, IP address, and security signals are never published.
What we keep
An essential anonymous player cookie links your rounds. We store server-issued game state, selections, timing, and privacy-protected network and browser identifiers to validate play and detect abuse. Contact information is encrypted. Marketing consent is optional and recorded separately from promotion entry.
Detailed game and security logs are normally removed after 30 days; public scores after 90 days. Pending reviews retain the necessary game evidence. Unverified contacts expire after 7 days. Verified contacts without engagement, prize records, and review decisions are removed after one year. Verification links expire after 24 hours; data-management links after one hour. Backups may retain deleted data until their configured backup expiry.
Friend challenges
Creating or opening a challenge links anonymous browser identities to an invitation. We record its source round, any parent invitation, and whether an invited browser opens, starts, or completes a round. Public links show only the card count and shared round result, never your email or browser identifier. These personal challenges do not affect prize eligibility. Links and invitation records expire after 90 days and are removed with associated account deletion. Downloaded images or previews cached by a messaging service may remain outside our control.
Product measurement
We measure page views, time on page, scroll depth, which home-page sections are reached, button clicks, signup-form starts, checkout clicks and sharing-panel opens using the same privacy-protected network and browser identifiers described above, and an existing anonymous player cookie when present. No analytics cookie or browser storage is used. We store only allow-listed page categories and labels, referring host names, a device class (phone, tablet or desktop), a two-letter country code, and the three campaign tags (utm_source, utm_medium, utm_campaign) when a link carries them. Every other query parameter, raw addresses and user agents are never stored. These records expire after 90 days. Private account and admin pages are excluded.
Marketing email
We send game news and offers only to addresses that were verified and opted in, and every message has a one-click unsubscribe link. Links back to this site carry a campaign tag so we can count visits per email. We record whether each message was sent, delivered or bounced and, where our email provider reports it, opened or clicked. Those per-message records are removed after one year, or detached from your address as soon as you delete your data. If you unsubscribe, or an address hard-bounces or reports spam, we keep only a keyed hash of the address so we never email it again; a new verified opt-in lifts an unsubscribe.
Your controls
Request a private link to unsubscribe or delete your contact and associated game data. Deleting also removes public scores and pending claims. Anonymous decision records may remain until their retention period ends. If a prize was fulfilled, a minimal hash of the verified email and promotion identifier remains until one year after that promotion ends to enforce the one-prize rule. It contains no email address, game history, or shipping details. If email registration is not enabled, this form cannot send a link.
Service providers
Hosting uses Vercel and storage uses Supabase. When enabled, Cloudflare Turnstile verifies challenges and Resend delivers requested verification emails and, for opted-in contacts, marketing emails. Never include contact details in a public nickname or an administrator’s review notes.