Privacy policy

Short version: you can play without giving us anything. If you create an account, we keep your email, your username and your games. Sponsors give us the minimum we need to show their logo, take their payment and send them their results.

If you play

• Accounts are optional. Without one, we don't ask for any personal information.
• Your current game, your display preferences and the games you finish (the last 30, for 30 days) are stored in your browser (local storage), not on our servers. If you create an account or sign in, those games are added to it.
• We count how many games are started, to report impressions to sponsors. This count isn't linked to you.
• We use privacy-friendly, cookieless analytics (Umami, OpenPanel) to measure visits and how the game is used (games started and finished, bids). They don't track you across sites.
• When a sponsor didn't upload a logo, your browser loads their site icon from Google's favicon service (google.com), which receives your IP address like any image request.

If you create an account

• Private: your email address and your password (stored hashed by Supabase, we never see it). Your email is only used to confirm your account, reset your password, and tell you when you win a sponsor prize. No marketing emails.
• Google or X: if you sign in with one of them, it sends us your email address, your name and your profile picture. Supabase keeps them with your account. We only use the email, as above, and your X username as your first username. Your name and picture are never shown.
• Public: your username, the link you add to it (optional), level, XP, number of games, best score and the prizes you won this season, shown on the leaderboard.
• Prizes: when you reach a prize's XP threshold, we record it and show you the redemption details. The sponsor only sees how many players won, never your email.
• Your games: each game you finish while signed in, or finished in the same browser before, with its score, highest tile, moves, time and XP. The moves are kept so a score can be verified. Only you can see this history.
• Analytics: while you're signed in, OpenPanel links your visits to your account id, username and level, never to your email.
• Cookies: signing in sets session cookies that keep you signed in. They're strictly necessary and aren't used for anything else.
• You can delete your account at any time from your profile. Your profile, your XP and your game history are deleted immediately.

If you bid

We collect:

• Public: your company name, website and logo, shown in the game and on the archive page, along with the amount you paid and how long you held the tile.
• Private: your email address, used only to send your confirmation, an invitation to offer a prize to players, your results when you're outbid or at the monthly reset, and refund notices. No marketing emails.
• Prizes: if you offer one, its title and description are public once we approve it; the code, link or instructions are only shown to winners.
• Payment: handled entirely by Stripe. We receive the payment status and amount, never your card number.

Who processes the data

• Supabase hosts the database, player accounts (sign-in) and uploaded logos.
• Stripe processes payments and sends receipts.
• Sequenzy sends our emails, including account confirmation and password reset.
• Google and X sign you in, only if you choose to continue with them.

How long we keep it

Player accounts are kept until you delete them. Bid records are kept for accounting and for the public archive. You can ask us at any time to delete your email address, or to anonymise a past bid in the archive.

Your rights

You can access, correct or delete your data, or object to its use, by writing to [email protected]. If you're in the EU, you can also contact your data protection authority.