Last updated: May 2, 2026
1. What We Collect
When you sign in via Google, Discord, or GitHub, we receive and store:
- Your display name and profile picture URL from the OAuth provider
- An opaque account identifier (we do not store your email address in our database)
When you play, we store:
- Game session data (attempts, duration, mode, completion status)
- Leaderboard entries (display name, score, time)
- Endless mode streak statistics
For security, abuse prevention, debugging, and operations, server logs may include:
- IP address, approximate geolocation from network headers, user agent, referrer, and requested page
- Gameplay actions such as starting a run, submitting a guess, skipping, expiring a run, or sending feedback
If you link a League of Legends account, we additionally store:
- Your Riot ID (game name and tagline) and region
- An opaque player identifier (PUUID) used to verify account ownership
2. Guest Players
Endless mode can be played without signing in. Guest sessions use a cookie-based token that expires after 30 days. Inactive guest profiles and their game data are automatically deleted after 30 days. Server logs may still contain request metadata such as IP address and approximate location for security and operational purposes.
3. Cookies
We use the following cookies:
- Session cookie — maintains your login state (NextAuth)
- Guest token cookie — identifies guest Endless sessions
We do not use advertising or third-party tracking cookies.
4. Analytics
We use Umami, a privacy-friendly analytics tool. It does not use cookies or track you across websites. Request metadata, such as IP address and browser language, may be processed to produce aggregated usage and approximate geography reports, but analytics data is not used for advertising.
Separately, our hosting and application logs may record request metadata and gameplay events to help detect abuse, troubleshoot errors, and understand site reliability. These logs are not used for advertising.
5. How We Use Your Data
- Display your name on leaderboards
- Track your game statistics and streaks
- Prevent duplicate daily challenge completions
- Detect abuse, investigate errors, and operate the service reliably
We do not sell, share, or transfer your data to third parties.
6. Data Retention
- Inactive guest profiles: deleted after 30 days of inactivity
- Completed game runs: deleted after 30 days
- Leaderboard entries and user profiles: retained while your account exists
- Linked League account data: retained until you unlink or delete your account
7. Your Rights
You may request deletion of your account and all associated data by emailing [email protected]. Upon deletion, all your game history, leaderboard entries, linked accounts, and profile data will be permanently removed.
8. Changes
We may update this policy from time to time. Changes will be posted on this page with an updated date.