Privacy Policy

01What we collect

When you create an account, we store:

• Email address — identifies your account and is used for sign-in and invite links.
• Username — shown publicly on the scoreboard and team pages.
• Password — stored only as a salted hash, never in readable form.
• Optional profile details you choose to add: country, affiliation, website, biography, avatar.

While you play, we also record:

• Flag submissions, including incorrect attempts and the network address they came from — to enforce attempt limits and detect abuse.
• Solves, points and timestamps — required to rank the scoreboard.
• Team membership and hints you unlock.

02If you sign in with Google

Choosing “Continue with Google” shares only your email address and basic profile (name and picture) with us. We never receive your Google password, and we request no access to Gmail, Drive, Contacts, or any other Google service.

03What is public

Your username, avatar, country, affiliation, team, score and solve times appear on the public scoreboard. Your email address is never shown to other players.

04Who processes your data

• Supabase — database, authentication and server functions.
• Vercel — website hosting and delivery.
• Cloudflare — bot protection (Turnstile) on the sign-in form.
• Google Fonts — typefaces; your browser fetches them directly from Google.

These providers process data on our behalf so the platform can run. We do not sell your data and we do not share it with advertisers.

05Cookies and storage

We use only what is required to keep you signed in — a session token stored by your browser — plus a few local preferences (interface sound, a pending team invite). There are no advertising or cross-site tracking cookies.

06How long we keep it

Account and competition data is retained while your account exists, so scoreboards and results stay accurate. Delete your account and we remove your personal data; anonymised competition statistics may remain.

07Your rights

You may request a copy of your data, correction of anything inaccurate, or deletion of your account. Contact us and we will action it.

08Contact

Questions about this policy or your data: [email protected]