privacy
last updated 11 november 2026.
the short version
we keep what the game needs and nothing else. no ads, no analytics cookies, no trackers, no third-party fonts. we don’t sell data.
what we collect, and why
- a session cookie. one strictly-necessary, http-only cookie that ties your browser to your clock and, if you sign in, to your account. without it the game can’t work.
- your clock. your time, rank, streak, freezes, game cooldowns and who recruited you. this is the game.
- your email address if you sign in by email, to send you sign-in links and to sign you in. we don’t send marketing.
- your google account id (and the email google shares with us) if you sign in with google, to recognise you next time.
- your handle, sign, link and image if you post them. these are public on the pyramid.
- a hashed connection id. a one-way hash of your network address, used only to limit new clocks and accounts per connection (one person, one account) and to stop abuse. we don’t store the address itself.
- reports you send about a sign: the seat, the reason and your note.
- backing if you back the pyramid: the tier, the amount, the date and stripe’s payment reference. stripe handles the payment; we never see or store your card number.
what others see
your handle, time, rank, streak, backer mark, sign, link and image are public. your email and google id are never shown to anyone.
who else touches it
- cloudflare hosts the site and runs an invisible robot check (cloudflare turnstile) when you ask for an email sign-in link. turnstile processes information about your browser and connection under the cloudflare turnstile privacy addendum.
- google, only if you choose “continue with google”, to sign you in.
- stripe processes payments if you back the pyramid. stripe receives your card details and email directly.
- cloudflare sends your sign-in emails.
- anthropic runs the automated moderation that checks handles, signs, links and images against the content rules before they go up. it sees only the content being checked.
how long we keep it
- guest clocks: deleted 30 days after your last visit.
- sign-in links: expire after 15 minutes.
- accounts: until you delete them. when you delete your account we remove your clock, handle, sign, image and email straight away; your handle is held back for 30 days before anyone else can take it. backups roll off within 30 days.
- hashed connection ids: up to 30 days.
- reports: up to 12 months, then deleted.
cookies
we use one strictly-necessary session cookie and nothing else, so there is no cookie banner. if we ever add anything that isn’t strictly necessary, we’ll ask first.
your browser also remembers a few conveniences locally (for example, whether you paused motion). these never leave your device.
your rights
you can download your data and delete your account from the account sheet. for anything else (correction, objection, questions) write to privacy@. depending on where you live you may also complain to your data protection authority.
contact
privacy: privacy@ · abuse and reports: abuse@ · everything else: hello@