Privacy Policy

What we collect

We collect the bare minimum needed to run the game:

• An anonymous device cookie (a random ID) so we can track your runs and prevent abuse. No name, no email.
• The questions you submit and whether they were accepted by our referee.
• Standard server logs (IP, user agent, timestamps) retained for up to 30 days for security and rate limiting.
• Aggregate analytics via Vercel Analytics and PostHog (page views, performance). No third-party advertising cookies.

What we don't do

• We don't sell your data.
• We don't serve ads.
• We don't require an account.

Third parties

Your submitted questions are sent to Google's Gemini API for validation. Google processes them according to its own privacy policy. Hosting is on Vercel; data is stored on Supabase (Postgres). No data is shared beyond these processors.

Your rights

You can clear your device cookie at any time from your browser. To request deletion of your submissions, email hello@diogobap.com. EU/UK residents have rights under GDPR; California residents under CCPA. We honor those requests within 30 days.

Children

This site is not directed at children under 13. We don't knowingly collect data from them.

Changes

If we change this policy, we'll update the date above. Material changes get a banner on the homepage.