Privacy

Last updated: 2026-11-01

We use Google Analytics to measure page views and usage trends. Analytics cookies distinguish browsers, and Google processes technical information about connections and devices. We do not send game profile names, game account IDs, search or form input, or URL query parameters. Google signals, advertising personalization and user-provided data collection are disabled. Local game progress remains in your browser. No analytics or advertising scripts load on contact, community or career quiz pages.

Community notes

Posts show only the game nickname you chose, the message and its posting time. We keep up to 200 posts for at most seven days. A separate random browser token limits spam; its server-side daily hash expires the next day and is not linked to game accounts or rankings. Do not post personal or contact information. No Google profile data is used for posting.

Player names, streaks, filters, and in-progress quiz state may be stored in this browser.

Appearance points, purchased items and Unlimited quiz/team counts, outcomes and score aggregates are stored on the device. Records are recorded automatically. Nearpin has quiz totals only; all-quiz team accuracy includes previous records. New browsers start Public and can choose Private in their profile. Existing private records remain private unless you choose Make public in the one-time invitation or in your profile. Your visibility choice is kept. When Public is enabled, your game nickname, three appearance IDs and quiz/team aggregates are accessible from Unlimited rankings. You can switch to Private in your profile. This aggregate snapshot contains no raw answers or provider profile data. Public snapshots expire 180 days after their last update. Switching to Private or confirming deletion removes the published snapshot; deletion also clears local quiz/team totals, preserving points and items. Deleting published totals requires a connection and reports a failure if it cannot finish.

Contact messages are used to investigate bugs, improve the game and prevent spam or abusive submissions. An email address is optional; if provided, it is forwarded to the site operator with your message. We do not send individual replies.

Online battles and record transfer

Solo rankings automatically record eligible solo games per browser, using your game-profile name and no provider sign-in. A random game credential is stored only in your browser to keep your records associated with it. Only a random, one-way game identifier, your chosen game name, scores/streaks and limited attempt markers are stored. The public list shows your game name and result, never the identifier. Gameplay actions are replayed to verify a result and are not retained on the server. Daily records expire within 30 days; streak records expire 180 days after participation. Clearing browser storage loses access to that browser’s records. This flow requests no name/email/photo from a provider and no device or advertising identifier. Cloudflare processes necessary connection information; application request logs and traces are disabled.

Web online battles do not use Google or other provider sign-in. A random game credential is stored in this browser; the server stores its one-way identifier, your explicitly chosen game name, ratings, match counts, results and short-lived room/answer histories. No provider name, email, photo, phone, hardware or advertising identifier is requested for this authentication flow. Cloudflare processes necessary connection information. Application request logs and traces are disabled. Provider-era authentication records may remain in Firebase pending separate cleanup; this change does not claim they have already been deleted.

App online battles use a separate random game credential in Keychain/Keystore, with no provider login. Web offers an optional single-use transfer code for multiplayer records only. Issuing a replacement invalidates the previous code; using it moves both leagues’ ratings, match counts and chosen game name, and revokes the old identity. Codes are stored only as a verification digest on the server. Transfer recovery receipts expire after 48 hours. Solo progress/settings are not transferred. Losing both the browser credential and transfer code loses access; there is no email/password recovery. App code entry requires a supported app version.

Your display name and rating are visible to your opponent and may appear on the public leaderboard. Rooms expire 30 minutes after creation or a new match starts; finished rooms and their guess histories are removed after 10 minutes unless another match starts. A ranked result marker used to prevent duplicate rating updates is retained for up to 24 hours. Ratings and match counts remain until you delete the battle account.

Battle records can be deleted from the lobby using the saved game credential, without provider reauthentication. This removes the game profile, ratings and leaderboard entry, preserving solo progress. Short-lived room records expire as above. A minimal identifier and deletion/revocation marker remain to reject old credentials; they are not automatically removed. Expired or missing provider-era game sessions cannot be migrated without a valid saved game session.