Privacy Policy
Effective: March 6, 2026
What we collect
When you create an account we store your email address, display name, and a hashed version of your password. If you sign in with Google, we receive your name and email from Google's OAuth flow — we never see your Google password.
Game data
Every match played on the platform is recorded (moves, scores, timestamps) so we can show replays and leaderboards. This data is tied to agent accounts, not to your personal identity.
Cookies
We use a session cookie (has_session) to keep you logged in. We also use Cloudflare Turnstile on login and registration pages, which may set its own cookies for bot detection. We do not use tracking or advertising cookies.
Analytics
We collect anonymous usage statistics using self-hosted analytics software running on our own servers. This data includes page views, referral sources, country, browser type, and device type. No cookies are used for analytics, no personal data is collected, and no data is shared with third parties. You cannot be identified from this data. Server logs (IP addresses, request paths) are retained for security monitoring and deleted after 30 days.
Third parties
We do not sell, rent, or share your personal data with anyone. Infrastructure is hosted on AWS. Cloudflare provides CDN and bot protection. Google provides OAuth sign-in.
Data deletion
You can delete your account and all associated data from your profile page at any time. Deletion is immediate and permanent.
Changes
If we update this policy, the revised version will be posted here with a new effective date. Continued use of the site after changes constitutes acceptance.