Privacy Policy

Game data. When you start a round, our server generates your hidden credit limit and stores it in an encrypted, httpOnly cookie in your browser. This cookie contains only the game value, the game mode, and a timestamp — no personal information — and it expires after two hours or when you check out, whichever comes first. Your carts, scores, and results are not saved after the round ends and are never linked to your identity.

Contact form. If you use our contact page, we collect whatever you choose to give us: optionally your first name, last name, and email address, plus your message. Providing a name or email is entirely voluntary; the form works without them. This information is used only to read and, where you provided an email, respond to your message.

Analytics. We use PostHog, a third-party analytics service, to understand how the Site is used (for example, which pages are visited and which buttons are clicked). PostHog may collect your device and browser type, operating system, approximate location derived from your IP address, pages viewed, interactions with the Site, and identifiers stored in cookies or local storage. We use this in aggregate to improve the game; we do not use it to identify you personally.

Server logs. Like nearly all websites, our hosting provider automatically records basic technical information when you visit, such as your IP address, browser type, and the pages requested. These logs are used for security, debugging, and keeping the Site running.

We use the information described above to operate the game (including keeping the hidden limit hidden until checkout), respond to messages you send us, understand and improve how the Site is used, and protect the Site against abuse, spam, and technical problems. We do not use your information for advertising, we do not build marketing profiles, and we do not send marketing emails.

The Site uses one strictly necessary cookie ("limit_token"): the encrypted game token described above. The game cannot function without it, and it holds no personal data.

PostHog sets analytics cookies and local storage entries to distinguish visits and measure usage. You can block or delete cookies through your browser settings; the game will still work, though we may lose the ability to measure usage.

We do not sell personal information or share it for targeted advertising, so opt-out preference signals such as Global Privacy Control do not change how the Site processes your data — there is no sale or ad-sharing to opt out of.

We do not sell, rent, or trade your personal information. We share it only with the service providers that make the Site run: our hosting provider (which serves the Site and processes server logs), PostHog (analytics), and our email delivery provider (which transmits contact-form messages to us). These providers process data on our behalf under their own contractual and legal obligations. We may also disclose information if required by law, to enforce our Terms of Service, or to protect the rights, safety, or property of the Site or others. If the Site is ever transferred as part of a sale or reorganization, information may transfer with it, subject to this policy.

The game cookie expires within two hours or is deleted at checkout. Contact-form messages are kept in our email inbox for as long as needed to handle them, after which we may delete them. Analytics data is retained according to PostHog's settings and then deleted or aggregated. Server logs are retained by our hosting provider for a limited period for security and operations.

Depending on where you live, you may have legal rights over your personal information, including the rights to:

• know what personal information we hold about you and access a copy of it;
• correct inaccurate personal information;
• delete your personal information;
• receive your information in a portable format;
• opt out of the sale of personal information, sharing for targeted advertising, or certain profiling (we do none of these); and
• not be discriminated against for exercising these rights.

If you are in the European Economic Area or the United Kingdom, we process your information on the legal bases of performance of our service to you (running the game), our legitimate interests (improving and securing the Site), and your consent where required. You also have the right to object to or restrict processing and to lodge a complaint with your local data protection authority.

To exercise any right, contact us via the contact page . We will verify requests using the information you provide and respond within the time required by applicable law. If we deny a request, you may appeal by replying to our decision, and we will review it.

In practice, note that we hold very little: unless you wrote to us through the contact form, we likely have no information that identifies you at all.

The Site is operated from the United States, and information is processed on servers located in the United States. If you visit from outside the US, you understand that your information will be transferred to and processed in the US, where privacy laws may differ from those in your country.

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has submitted personal information to us (for example, through the contact form), please contact us and we will delete it promptly.

We use reasonable technical measures to protect information, including encrypting the game token with industry-standard encryption, serving the Site over HTTPS, and limiting the data we collect in the first place. No website can guarantee perfect security, but our best protection is that we collect almost nothing.

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Material changes will be highlighted on the Site. Your continued use of the Site after changes take effect means you accept the updated policy.

Questions about this policy or your information? Reach us through the contact page .