1. Introduction
IntroGuesser ("we", "our", or "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use our Service. We comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
2. Data We Collect
We collect the following categories of data:
- Account data: When you sign in via OIDC (e.g., Google, GitHub), we receive your user ID, display name, email (if provided by the identity provider), and profile picture URL.
- Game data: Scores, game history, achievements, and statistics linked to your account.
- Technical data: IP address, browser type, device information, and log data for operation and security.
- User-generated content: Display names, chat messages in lobbies, and similar content you create.
Anonymous users can play without an account; we may store minimal session data for gameplay.
3. How We Use Your Data
We use your data to:
- Provide, operate, and improve the Service
- Authenticate you and manage your account
- Display leaderboards, profiles, and achievements
- Enable multiplayer features (e.g., lobbies, chat)
- Detect and prevent abuse, fraud, and security issues
- Comply with legal obligations
4. Third-Party Services
We use the following third parties:
- Identity providers: OIDC providers (e.g., ModLabs Auth, Google, GitHub) for sign-in. Their privacy policies apply to data they collect.
- Hosting: Cloudflare (frontend and API). Data may be processed in various regions.
- Backend infrastructure: Our backend and database host game data and user accounts.
We do not sell your personal data. We do not use third-party advertising or analytics that track you across other sites.
5. Cookies
We use essential cookies for authentication and session management. These are necessary for the Service to function and do not require consent. We do not use non-essential tracking cookies. If we introduce analytics or optional cookies in the future, we will update this policy and obtain consent where required.
6. Data Retention
We retain account and game data for as long as your account exists. If you request account deletion, we will delete or anonymize your personal data within a reasonable timeframe, except where we must retain it for legal compliance.
7. Your Rights
Depending on your location, you may have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data
- Portability: Receive your data in a structured format
- Object: Object to processing in certain circumstances
- Restrict: Restrict processing in certain circumstances
- Withdraw consent: Where processing is based on consent
To exercise these rights, contact us via the Imprint page. EU users may also lodge a complaint with their local data protection authority.
8. International Transfers
Your data may be processed in countries outside your residence, including the European Economic Area. We ensure appropriate safeguards (e.g., standard contractual clauses) where required by law.
9. Security
We implement technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.
10. Children
The Service is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete it.
11. Changes
We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Material changes may be communicated via the Service or email.
12. Contact
For privacy-related questions or requests, please contact us via the Imprint page.