Privacy Policy

What we collect

• Your secret phrase — we never store the phrase itself, only a one-way bcrypt hash of it and a separate keyed lookup value used to find your account at login.
• Display name and, optionally, an email address — the email is never used for login and is only stored if you choose to add one in your profile.
• An avatar image URL — either one you picked from our built-in gallery or a link you pasted yourself. If you paste your own link, that image is hosted by whatever third party you linked to, not by us.
• Gameplay data — your daily scores, tries used, win/loss results, and streak history.
• Referral relationships — which player referred you, if any, and how many people you've referred.

What we don't do

We don't use third-party analytics or advertising trackers, we don't sell your data, and we don't require a real name, phone number, or payment information to play.

Cookies

We use a small number of cookies: a signed session cookie to keep you logged in, and short-lived cookies that carry a referral code or a friend-challenge context when you follow a shared link. None of these are used for advertising.

Where data is stored

Gameplay data is stored in a MongoDB Atlas database. Avatar images from our built-in gallery are served through DiceBear, a third-party avatar-generation service.

Your choices

You can update your display name, email, and avatar at any time from your profile. To request that your account and its data be deleted, contact us at the address below — we don't currently have a self-service delete button, so this is handled manually.

Contact

Privacy questions or deletion requests: hello@findthegreencard.example