Privacy notice

What we collect, and why

• Sign-in details: your email address and an identifier from our sign-in provider, so you can sign in and so we know your email is verified.
• Profile: your username, chosen avatar and privacy settings, which other players see.
• Age confirmation: that you confirmed you are 18 or older, and when. We don't ask for your date of birth.
• Agreements: which version of these notices you accepted, and when.
• Game data: games played and won, XP, coins, gems and every change to them, friends, blocks, reports and in-app notifications.
• Technical data: your IP address, used briefly to limit abuse (rate limits and a bot check at sign-up), and a session cookie that keeps you signed in. We don't use advertising or tracking cookies.

Who processes it for us

• Cloudflare hosts the site, the game and its database, and runs the Turnstile bot check.
• Google Firebase handles sign-in (Google accounts and email/password, including verification and password-reset emails).

We don't sell your data.

How long we keep it

• While your account exists.
• When you delete your account, it's removed after a 14-day grace period: your email, sign-in identity, friends, blocks, notifications and balances are erased and your username is replaced. Game results and currency history stay under an anonymous name, so other players' records remain correct. Moderation reports also stay under the anonymous name so past decisions can be reviewed, but anything you wrote in reports you filed is erased.

Your choices and rights

• Change your avatar, username and who can see you online in Settings.
• Your profile isn't shown to search engines unless you turn that on.
• Sign out of every device from Settings.
• Delete your account from Settings.
• You can ask for a copy of your data or for corrections. Contact details for these requests will be published here before launch.