Room to explore. Respect for privacy.

Casual play

You can play Casual games without an account. Game state is encrypted and held in your browser session. Your sound, motion, and detail preferences stay in local storage on your device. We don’t add advertising or analytics trackers.

Accounts and public information

When you create an account, Supabase stores your email, authentication credentials, and session information. Passwords are managed by Supabase Auth. Your username, chosen flag, explorer avatar, level, achievements, and verified records may be public. Your email is not shown on public profiles.

Game verification and moderation

Marathon runs store timestamps, game configuration, answer events, and verification signals. Reports and moderator actions are recorded so we can investigate abuse and explain moderation decisions. Access to private game data is restricted to authorized server operations and administrators.

Service providers

A deployed instance uses Supabase for authentication and database storage and Vercel for application hosting. Their infrastructure may process connection and security logs under the operator’s chosen settings. Google receives authentication information only when you choose Google sign-in.

Control and deletion

You can change your public profile and device preferences at any time. Sign out to end your browser session. Account deletion by the operator removes your associated profile, runs, and reports through database cascades; moderator audit entries retain an action record with the deleted administrator’s identity removed.

Operator notice

This project is ready for an operator-specific privacy policy. Before opening public registration, the operator must publish a contact address, identify the data controller, choose and disclose retention periods, and describe the process for access, export, or deletion requests. This page does not invent those details.