Privacy Policy

Last updated: February 2025

1. Information We Collect

When you create an account, we collect:

  • Email address
  • Username
  • Password (stored as a bcrypt hash — we never store your plain-text password)

When you use our platform, we automatically collect:

  • Game scores and session data
  • Achievement progress
  • IP address and browser user agent (for session security)

2. How We Use Your Information

We use the information we collect to:

  • Provide and maintain the gaming platform
  • Display leaderboards and player profiles
  • Track achievements and game progress
  • Send account-related emails (verification, password reset)
  • Protect against fraud and abuse

3. Analytics

We use Google Analytics (GA4) to understand how visitors use our site. Google Analytics collects information such as how often you visit, what pages you view, and what other sites you used prior to coming to our site. We use this information to improve the platform. Google Analytics does not collect your name or email address.

4. Cookies

We use the following cookies:

  • Refresh token cookie — an HTTP-only, secure cookie used to maintain your login session. This cookie is essential for the platform to function.
  • Google Analytics cookies — used to distinguish users and throttle request rates.

5. Data Storage and Security

Your data is stored in a PostgreSQL database. Passwords are hashed with bcrypt. Session tokens are hashed with SHA-256. We use HTTPS for all data transmission and HTTP-only cookies for session management.

6. Public Information

Your username, avatar, game scores, achievements, and profile stats are publicly visible on leaderboards and your player profile page. Your email address is never shown publicly.

7. Third-Party Services

We may use the following third-party services:

  • Google Analytics — for site usage analytics
  • Google OAuth — if you choose to sign in with Google
  • Discord OAuth — if you choose to sign in with Discord

8. Your Rights

You can:

  • Update your username and avatar from your profile settings
  • Change your password at any time
  • View and revoke active sessions
  • Request deletion of your account by contacting us

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the “Last updated” date.

10. Contact

If you have any questions about this privacy policy, please reach out via the contact information on our About page.