Privacy Policy

What we collect

We collect standard web analytics data — pages viewed, referrer, approximate location from IP, device and browser type — through Google Analytics 4 and Cloudflare Web Analytics.

Accounts

Signing in is optional. Without an account, your Respect points and map progress live only in your own browser (localStorage) and never reach our servers. If you choose to sign in with Google, authentication is handled by Supabase, our database provider, and we store: the account identifier and email address Google shares with us, your display name and avatar URL, and your game progress — Respect points, the events that earned them, your Vice Crew badge number if you received one, and your map progress (explored tiles, card fragments, fog of war). A nick is generated from your first name when you sign up; you can change it on the Respect board. Only the nick, your Respect score and Vice Crew badge are shown publicly on the leaderboard; your real name, email and avatar are not. We never see your Google password and cannot post or read anything on your behalf. Signing out keeps the site fully usable in guest mode. To delete your account and all progress, email us — see "Your rights" below.

Cookies

Analytics cookies are set only if you press "Accept" in the consent banner. Decline it, or simply ignore it, and Google Analytics stays in consent-denied mode: it reports the visit without cookies and without any identifier tied to you. Cloudflare Web Analytics uses no cookies at all. You can change your mind by clearing this site's data in your browser — the banner will ask again.

Once we work with advertising partners, they may set their own cookies to serve and measure ads; that will be announced here before it happens, and in the EEA it will run through a certified consent platform. You can opt out of personalized advertising through your browser settings or via aboutads.info.

Your rights

You can request a copy of any data we hold about you, or ask us to delete it, at any time by emailing [email protected]. We respond to every request within 30 days.

If you are in the European Economic Area or the UK (GDPR), you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. If you are a California resident (CCPA/CPRA), you have the right to know what personal information we collect, to request its deletion, and to opt out of its sale. We do not sell personal information.

Third-party services

We use Google Analytics 4 and Cloudflare Web Analytics for traffic measurement, Cloudflare for hosting and email routing, and YouTube (via youtube-nocookie.com) for embedded videos — YouTube receives a request only after you click play on one. Each processes data under its own privacy policy. We do not sell visitor data to third parties.

Changes to this policy

If this policy changes, we'll update this page and the date below. Material changes are announced in our Discord.

Last updated: August 21, 2026