Privacy Policy

What we collect

• Nickname & score: when you post to the leaderboard, the nickname you pick and your score are saved to our database and shown publicly on the leaderboard. Don’t use a real name if you’d rather stay anonymous.
• Multiplayer presence: while you’re in a room, your nickname and guesses are shared live with the other players in that room via Supabase Realtime. Nothing about the room is stored after everyone leaves.
• Profile view counts: player profile pages show how many people have viewed them. To count each visitor once a day we store a one-way scrambled fingerprint of your IP address and browser, never the address itself, and we delete it after about six weeks. It isn’t used for anything else and can’t be turned back into an IP.
• Analytics: with your consent, Google Analytics measures page visits and broad engagement using cookies.
• Advertising: with your consent, Google AdSense serves ads, which may be personalised and may use cookies as described below.

Accounts

Accounts are optional. Every game mode works without one. If you do sign up (via an email magic link or Google):

• Email address: stored with our authentication provider, Supabase, and used solely to sign you in. We never display it publicly, never sell it, and don’t send marketing email. Signing in with Google shares only your email address with us, as shown on Google’s consent screen.
• Public profile: your chosen username, game scores, streaks, achievements and equipped flair appear on the leaderboards, just as scores have always been public under nicknames.
• Deletion: you can delete your account at any time from the account page. This frees your username, removes your email address from our systems, and unlinks your scores. The scores themselves stay on the boards under the pseudonymous nickname, exactly like anonymous play.

Cookies & consent

A cookie is a small file a site stores in your browser. We use two kinds:

• Essential: a small amount of local storage remembers your theme (light/dark), sound preference, and your cookie choice. These are required for the site to work and are always on.
• Analytics & advertising: Google Analytics and Google AdSense set cookies (for example _ga and Google’s advertising/DoubleClick cookies) to measure usage and to serve and personalise ads. These are off by default and load only after you accept.

In regions where consent is required (including the EEA, UK and Switzerland), Google’s consent message asks you to accept or reject non-essential cookies before any analytics or advertising cookies are set, and you can change or withdraw your choice at any time through that message. Wherever you are, you can also control ad personalisation using the links in the next section.

Advertising & personalised ads

Ads are provided by Google AdSense. Where you have consented, Google and its partners (as third-party vendors) may use cookies (including the DoubleClick cookie) to serve ads based on your prior visits to this and other websites. You have control over this regardless of the consent banner:

• Manage personalised ads from Google at adssettings.google.com.
• Opt out of personalised advertising from participating vendors at aboutads.info/choices (US) or youronlinechoices.eu (EU).
• Read how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites.

Data processors

• Supabase: database (leaderboard entries), account sign-in (email addresses) and realtime multiplayer.
• Google Analytics: usage analytics.
• Google AdSense: advertising.

How long we keep data

Leaderboard entries (nickname and score) are kept until you ask us to remove them or until we retire an old board. Multiplayer room data is transient and is not stored once a room ends. Analytics data is retained according to Google’s standard retention settings, and advertising cookies expire on the schedule set by Google. Your cookie choice is stored in your browser until you clear it or change it.

Your rights (GDPR/UK GDPR)

Under the GDPR and similar laws you can ask for access to, correction of, or deletion of your data, and you can withdraw consent for cookies at any time (as easily as you gave it) through Google’s consent message. Because we store so little, deletion is simple: delete your account from the account page, or email us with the nickname and the approximate date you posted and we’ll remove the entries.

US state privacy (California and others)

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information is collected and to opt out of its “sale” or “sharing.” We do not sell personal information for money. Serving personalised ads may count as “sharing” under these laws; you can opt out by rejecting non-essential cookies when prompted, and by using the Google and industry opt-outs listed above.

The Color Memory app (iPhone, iPad and Android)

This section covers the Color Memory app. The app has no accounts and no sign-in, shows no ads, contains no analytics or tracking tools, and has no in-app purchases. It doesn’t ask for your email, name or location, and doesn’t read any identifier from your device. The only information that leaves your phone is what’s needed to put your scores on the leaderboards and to play in multiplayer rooms.

Buying the app: the App Store or Google Play handles the purchase under its own privacy policy. We never see your payment details or your Apple or Google account, only anonymous sales totals.

When you post a score, it goes to the same public leaderboards as the website, with:

• Your nickname: the name you pick in Settings (or a random one the app makes up), shown publicly next to your scores.
• The game: the colors you were shown and picked, your timings in timed games, and your score.
• Your country: a two-letter code for the leaderboard flag, from our hosting provider’s view of your network region when available, otherwise from your phone’s region setting. We don’t store your IP address with your scores.
• Fair-play signals: a few numbers about how the game was played, checked when the score arrives and discarded, unless the play looks automated, in which case they’re kept with that score for review.

Daily streaks are tracked by nickname, as for anonymous players on the website. If you play offline, scores wait on your phone and post when you’re back online; any that can’t be posted within three days are dropped.

Multiplayer rooms: your nickname, guesses, emoji reactions and (in Hide & Seek) your painted character are shared live with the other players in the room, who may be on the website, via Supabase Realtime, and aren’t stored. The app has no text chat.

On your phone only: your nickname, settings, unposted scores, saved leaderboards and the optional daily reminder (a notification your phone schedules; nothing is sent to us). The only permission the app asks for is notifications, and only if you turn the reminder on.

Service provider: leaderboards and rooms run on Supabase, which handles your IP address when your phone connects and keeps it in its logs to run and secure the service. We don’t use it to locate or profile you, and we don’t sell or share app data.

Your choices: change your nickname in Settings at any time. Because there are no accounts we can only find scores by nickname, so to have scores removed, or to make a GDPR request, email us with the nickname and roughly when you played. The app is listed for ages 13 and up; if a child under 13 has posted scores, email us the nickname and we’ll remove them.

Contact

Questions about privacy? Email info@colormemorygame.com.