Privacy Policy

Last updated: 24 May 2026

The Game (the “Game”) is a private, invite-only browser game operated personally by Eyal Shaham (the “Operator”, “we”, “us”). This policy explains what personal data we collect when you use the Game, why we collect it, who we share it with, and the choices you have.

The Game is offered to a small, hand-curated list of invited players. We try to collect as little personal data as possible.

1. Who is responsible for your data

The data controller is Eyal Shaham, operating the Game as an individual. For any privacy question or request, contact us at eyal.shaham@keemail.me.

2. What we collect

Account / sign-in data. When you sign in with Google, we receive your email address and your display name from Google. We use your email to check it against our invite list and to identify your session.
IP address. Our game server sees your IP address when you connect. We use it to limit the number of simultaneous connections per address (abuse prevention) and our analytics provider uses it for approximate geolocation.
Gameplay and usage events. We record product-analytics events such as sign-in, menu selections, match start/end, and round results, associated with your email.
Error reports. If the Game crashes or errors, we capture a technical error report (stack trace, browser/build information) to help us fix bugs.
Feedback you send. If you use the in-game feedback button, we receive the message you write, an optional screenshot you choose to attach, and your email/name so we can follow up.
Local storage on your device. We store a signed session token in your browser’s localStorage so you stay signed in, and our analytics SDK keeps its own state in localStorage. We do not set tracking cookies.

We do not collect passwords (sign-in is delegated to Google), and we do not process any payment information.

3. Why we use it (purposes & legal bases)

Purpose	Data used	Legal basis (GDPR)
Authenticate you and control access to the invite-only Game	Email, name	Performance of a service you requested; legitimate interest
Prevent abuse and rate-limit connections	IP address	Legitimate interest (security)
Diagnose crashes and improve stability	Error reports, build/browser info	Legitimate interest
Understand how the Game is used	Gameplay/usage events, IP (geolocation)	Consent / legitimate interest
Respond to feedback and bug reports	Feedback message, optional screenshot, email/name	Consent

4. Who we share it with

We do not sell your personal data. We use the following third-party service providers:

Google — sign-in (OAuth). Google Privacy Policy.
Mixpanel — product analytics (EU endpoint). Mixpanel Privacy Policy.
Sentry — error tracking and feedback intake. Sentry Privacy Policy.
Cloudflare — hosting and delivery of the website. Cloudflare Privacy Policy.
Oracle Cloud (OCI) — hosting of the game server. Oracle Privacy Policy.

5. International transfers

Our game server is hosted in the EU and our analytics uses an EU endpoint. Our error-tracking provider (Sentry) may process data in the United States. Where data leaves your country, we rely on the safeguards offered by these providers (such as standard contractual clauses).

6. How long we keep it

Session token: kept on your device until it expires (about 7 days) or you sign out.
Invite list membership: kept for as long as you have access to the Game.
Analytics & error data: retained according to our providers’ default retention periods (Mixpanel and Sentry), after which it is deleted or anonymised.
Feedback messages: kept as long as needed to address them.

7. Cookies and local storage

We do not use tracking or advertising cookies. We use your browser’s localStorage to keep you signed in (a session token) and for our analytics SDK’s internal state. You can clear this at any time through your browser settings or by signing out.

8. Your rights

Depending on where you live (for example, under the EU/UK GDPR or the California CCPA), you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact us at eyal.shaham@keemail.me. You also have the right to complain to your local data protection authority.

9. Children

The Game is not directed to children and we do not knowingly collect personal data from children under the age required by local law. If you believe a child has provided us data, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above, and you may be asked to re-confirm the updated terms before continuing to use the Game.