Draft for Michael to review. This page is not legal advice.

Privacy

This draft describes what the server stores so it can run the game. It is not a finished privacy policy.

Without an account

The server sets an HttpOnly device cookie so today's submission stays on this browser. The cookie is a random id, not your name. Submissions store the layout, the time, and a coarse network block used to limit how many counted plays come from one network.

With an account

Sign-in asks for an email and sends a one-time link. The link's secret is stored only as a hash and expires after 15 minutes. A session cookie then points at a row on the server. Signing in attaches this device's existing puzzles to that email so they are not counted twice in your own stats.

The email is sent through Postmark when that mailer is configured. Postmark receives the address and the message.

Club

Checkout and the subscription portal run on Stripe. Raretile stores the Stripe customer id, subscription id, price id, and whether Club is active. Card numbers stay at Stripe. A signed webhook is the only thing that turns Club on or off.

What we don't do

There is no password. The game does not sell personal information. There is no advertising yet. If ads are added later, Club is marked ad-free.