What we collect
- The beta application: your email address, the language of the page you used, the platforms you tick and any note you write; when you agreed to this policy and which version it was; and a scrambled form (a keyed hash) of your internet address, used only to limit abuse. We do not keep the address itself. We also keep a hash of your confirmation link, never the link.
- A game account, if you are approved and sign up: your email address and a password (stored hashed by our sign-in provider; we never see it), your username and an optional display name and status message, whether you are online and when you were last seen, your friends, your ratings and the matches you play with their replays, an optional avatar, and any feedback you send from the game (your message, the replay it was sent from, and optionally a screenshot).
- The website itself sets no cookies and has no analytics. Your browser does fetch the Rubik typeface from Google Fonts, which tells Google your internet address and browser. The browser version of the game is hosted on Google Firebase Hosting.
Why we collect it
To run the waiting list and invite you; to let you play (account, matches, ratings, friends); to fix bugs from the feedback you send; and to stop abuse of the form. The application rests on your consent. The game account is needed to provide the game.
Who else handles it
Some of these providers are outside the EU/EEA. They process the data for us under their own terms. We do not sell it and do not use it for advertising.
- Supabase: our database, sign-in and file storage.
- Resend: sends our emails (the confirmation link and, later, your invitation).
- Google: the Rubik typeface, and Firebase Hosting for the browser game.
How long we keep it
- An application whose address you never confirmed: 7 days, then it is deleted.
- An application we decline: 90 days, then it is deleted.
- The scrambled form of your internet address: 30 days, then it is cleared.
- An application that is waiting or accepted: for as long as the beta runs, or until you ask us to delete it.
- A game account and its data: until you ask us to delete it.
- Feedback you send from the game: 90 days, then it is deleted, screenshot included.
Your choices
You can withdraw your consent at any time, and ask for a copy of your data, a correction, or its deletion. Write to the address below and we will do it. You can also complain to your local data-protection authority.
Changes
If this page changes in a way that matters, we will update the date above. The version you agreed to is recorded with your application.
Contact
For anything about your data, write to info@epochs.space.