Data used
When you sign in with Google or an email link, Supabase Auth processes your account identifier, email, confirmation details and basic information provided by the identity provider, such as your name and image when available. We do not receive your Google password or request access to Gmail, contacts or files.
Online games process your answers and store game state, scores, mode, timings and date. Publishing links a result to your account and chosen nickname. Hosting and authentication providers may also process IP addresses, browser information and technical logs to operate and protect the service.
Purposes and legal grounds
We use data to authenticate your account, send the sign-in link you request, run games, publish results at your request and allow nickname changes. These activities are necessary to provide the service you request.
We also use technical information to prevent abuse, diagnose faults and protect leaderboard integrity based on legitimate interests, while respecting your rights. We may process data to meet legal obligations where necessary.
Public information
The leaderboard may display your nickname, score, mode, time and game date. Your email and authentication tokens are not displayed on the leaderboard. Choose a nickname you want to make public.
Sharing prepares a message and a link to the game. You choose whether to send them and to whom; the application does not access your contacts to send the message.
Cookies and browser storage
Functional cookies maintain your sign-in session and recover the last game prepared for publication. The pending-game cookie lasts up to one hour. Authentication cookies are protected against access by application JavaScript.
Your browser also stores language and nickname preferences, the current result and the game access capability. In local mode it stores the leaderboard on this device. You can clear browser data, but this may end sessions and prevent recovery of games. The current version does not include advertising or audience analytics tools.
Providers and transfers
Supabase provides authentication and the database; Google is involved when you choose Google sign-in. Hosting processes requests needed to operate the website. These providers may process data in other countries under their infrastructure arrangements and policies.
We share data needed for these purposes and, when required, to comply with law or protect rights. Use of these providers’ services is also subject to their privacy policies.
Retention and security
We keep account data and published results as needed for the service, until an applicable deletion request or as required by law. Online game access expires after one hour; removing expired state from the database depends on the cleanup routine, and expiration does not remove an already published score.
We use access controls and server validation. No system is completely immune to incidents. Provider logs and backups may have their own retention periods; data may be retained where there is a legal obligation or another applicable justification.
Your rights
Under applicable law, including Brazil’s LGPD where applicable, you may request confirmation of processing, access, correction, sharing information, objection and deletion. Some requests may require identity verification and may be subject to legally permitted retention.
To request deletion of your account and associated results, use the application contact channel, when listed below. Include your account email and request; never send a password, token or sign-in link. Signing out or clearing browser data does not delete your account or server results.
Updates
This policy may be updated to reflect changes to the application and its practices. The date on this page identifies the current version. Material changes will be communicated through the means available within the service.
Provider policies
Contact
Application operator: Mayron Reis