Privacy policy

The room and the match. For as long as a room exists it holds its state: who is at the table, the position, the score. Your nickname and avatar are visible to the other players in that room, which is the point of them.

Chat. A room’s chat can be read only by the people seated in it — anyone else, even holding the link, is refused at the database level. A message is signed with your nickname from the room and is deleted along with the room, on the schedule below. The text of messages is never sent to analytics.

Finished rooms are deleted automatically after a day, an abandoned lobby ten minutes after the last player closed it, and an interrupted match after half an hour in which nobody had it open and nobody moved.

Statistics. If you are signed in, every match you finish is recorded against your profile: which game, whether you won, how long it took, when, and a little about how it went (ships lost, flags named). Your match history, achievements and level on the progress page are built from these. Only you can see them.

Guest accounts. Guest sign-in creates a temporary account with no email and no password. Left unused for 30 days, it is deleted along with its statistics. To keep it, make the guest profile permanent by adding an email or Google in the settings — the statistics and achievements stay with you.

Settings — theme, language, volume, notifications, chat — are kept only in your browser. System notifications about your turn are shown by the browser itself, and only if you allowed them; nothing is sent to our server for them.

If you register we keep your email address, your nickname and your avatar if you uploaded one. The email is used for signing in and password recovery; other players cannot see it — access to that column is closed at the database level. You can change it in the settings; the change is confirmed at both the old and the new address.

We neither store nor see passwords: authentication is handled by Supabase, and the password goes to it directly.

Signing in with Google gives us the name, email address and avatar URL from your Google profile. Nothing else.

We count what people play and what breaks. Nothing is collected until you have pressed "Allow".

Google Analytics does not load in your browser. There is no Google script on these pages and no Google cookie is set. The page sends an event to an address of our own, and we forward it from our server.

Your IP address therefore does not reach Google: what they see is our server’s address, not yours.

What is sent: which game, how many players, how long a match ran, which error occurred, and which page it happened on. The list of permitted fields is fixed in the code and the server discards anything else rather than passing it on. Your identifier, nickname, email and anything from the match itself are not sent.

One thing in particular: a room link is an invitation, and for a private room it is the only thing standing between it and a stranger. Room identifiers are stripped from the address twice — in the browser and again on the server, which does not trust what arrived. The page address Google receives is assembled by our server, not taken from your browser.

To tell one visitor’s events from another’s, a random identifier is created when you consent and kept in your browser. It is derived from nothing, means nothing about you, and goes when you clear the site data. Declining deletes it.

Supabase — the database and authentication; it holds everything listed above.

Vercel — hosting; it serves requests to the site and keeps technical logs.

Google Analytics — only with your consent, and only anonymous events.

Wikipedia and Wikimedia Commons (the Wikimedia Foundation) — only in Wikiler and Timler: your browser loads the articles and photographs from them directly, so Wikimedia sees your IP address and what was loaded, just as when you read Wikipedia. Your identifier, nickname and moves in the game are not sent. How Wikipedia handles that data is in its privacy policy: foundation.wikimedia.org/wiki/Policy:Privacy_policy.

Deezer — only in Songler: your browser loads the 30-second song previews and album covers from it directly, so Deezer sees your IP address and which songs were loaded. Our server asks Deezer for each round’s preview link by the song’s number alone — none of your data goes with it. Your identifier, nickname and answers are not sent. Deezer’s policy: deezer.com/legal/personal-datas.

We do not sell data and do not pass it to advertising networks.

You can delete your account in the settings: Account → Delete account. Your profile, statistics, match history, achievements, uploaded avatars and the rooms you created go with it, at once and for good.

You can decline analytics, on your first visit or later by clearing the site data.

For a copy of your data, or to have it removed by hand, write to us.

The service is not intended for children under 13, and we do not knowingly collect their data.

For anything about your data, write to okhtengroup@gmail.com.