Privacy

Last updated 2026-08-03.

Account & gameplay data

If you sign in, we store your email (via Supabase Auth), your nickname, and your game results (guesses, scores, session history) so leaderboards and ratings work. This is necessary to provide the game you asked for — no separate consent is needed for it.

Analytics (optional)

With your consent, we use PostHog — hosted in the EU (Frankfurt) — to understand how people play ScoreGuessr across devices. Nothing is captured until you accept the cookie banner, and you can withdraw at any time from the Settings section of the account menu (top right of any page).

What we collect once you opt in:

  • Coarse device type, browser, and OS (derived from your browser, not stored raw)
  • Screen orientation (portrait/landscape) and a coarse viewport size band
  • Gameplay events (round started, guess submitted, session completed) tied to your game session id

What we deliberately don't collect:

  • Your IP address
  • Your raw user-agent string or exact screen resolution
  • Session recordings or automatic clicks/DOM capture (autocapture is off)

If you're signed in, analytics events are linked to your account id (not your email) so we can improve the product for real usage patterns. If you're not signed in, no personal profile is created.

Lawful basis

Storing anything on your device for analytics (a cookie/local storage id) relies on your consent, given via the banner. Linking coarse device data to your account, once you've consented, relies on that same consent as its legal basis under GDPR Art. 6(1)(a).

Retention

Analytics data is retained for 12 months, after which it is deleted.

Your rights

You can withdraw analytics consent at any time (Settings section of the account menu, top right of any page). Deleting your account also deletes your PostHog analytics profile. To request deletion or ask about your data, contact us at privacy@scoreguessr.app.