Privacy

The short version: we collect the least we can, we sell nothing, and there are no advertising trackers anywhere on this site.

Draft. This page describes what the software actually does today, written plainly. It has not been reviewed by a lawyer, and it should be before launch.

What we collect

Username: A nickname you choose. Other players see it on leaderboards.
Email address: Only to sign you in. Recovering an account by email is not built yet, so a forgotten password cannot be reset.
Password: Stored only as an argon2id hash. We cannot read it, and neither could anyone who stole the database.
Your match record: Wins, losses, rounds and best streak. This is the whole point of having an account.
City and school: Optional, and only if you choose to join a school leaderboard.
A visit count: One number, for the whole site. A cookie remembers that your browser has already been counted, so you are not counted twice. Nothing is recorded about who you are, where you came from or when — there is no visits list to look at, only a total.

You can play the entire single-player game without an account. In that case nothing leaves your device at all, because your record is stored in your own browser.

What we never collect

Your age or date of birth
Your real name
Your phone number
Your address or precise location
Your contacts
Anything you do on other apps or sites

No ads, no tracking, no chat

There is no advertising SDK, no behavioural profiling, and no third-party analytics that follows you around the web. There is also no chat and no direct messaging, deliberately. In a game built around schools, unmoderated contact between strangers is the real risk, and the simplest way to remove a risk is not to build it.

What other players can see

Your username, your record, and, if you join one, your school and city. Nothing else. Another player cannot message you and cannot find out where you are beyond the city you picked.

Cookies

One cookie, set only after you sign in, holding a random session identifier and nothing else. It is marked HttpOnly and Secure, so no script can read it. There are no advertising or analytics cookies, so there is no consent banner to dismiss.

Deleting your account

Ask, and it is removed along with your record and your credentials. Deletion is not yet self-service inside the app. That is on the build list, and this page will be updated when it ships rather than promising it in advance.