Privacy Policy

The short version

• You can play Maze Dash without an account. If you make one, we store your email, your username, your picture if you add one, and your game records.
• Your username, picture, and leaderboard times are public. Everything else stays private.
• We use Google Analytics to count visits and see which features people use.
• We never sell your information, and we don't show ads.
• You can delete your account and data at any time from your profile.

What we collect

If you play without an account: your records, settings, and theme are saved only in your own browser. We don't receive them.

If you create an account:

• Account details: your email address, or your Google account's name, email, and photo if you sign in with Google. Passwords are handled by Google Firebase and are never visible to us.
• Profile: the username you choose and a profile picture if you upload one. Pictures are shrunk to a small square before they're saved.
• Game records: your times, efficiency, maze sizes played, time played, practice results, duel wins and losses, and your settings (theme, colors, key controls).
• Leaderboard runs: to check that a time is real, the moves you made during a run are sent to our server once, replayed, and then discarded. Only the final time is kept.
• Social features: your friends list, friend requests, duel challenges, mazes you share with friends, players you block, and your online status (Online, Away, Busy, or last seen).
• Reports: if you report a player, we store the report, the reason, and any note you add.

Everyone who visits: Google Analytics collects information like pages viewed, game events (for example, starting or finishing a maze), device and browser type, and approximate location based on your IP address (city or region, never your exact address). It uses cookies to tell visits apart. Our web host, Netlify, keeps standard server logs, which include IP addresses.

What other players can see

• Anyone: the leaderboards, including your username, picture, times, and efficiency.
• Signed-in players: your username and picture in search results and on your player card, and who is friends with whom.
• Your friends: your online status, and your live progress during a duel.

Your email address is never shown to other players.

How we use it

• To run the game: saving your progress, leaderboards, friends, duels, and sharing.
• To keep Maze Dash fair and safe: verifying leaderboard times, blocking offensive usernames, and checking uploaded pictures with Google Cloud Vision's safety scan. Pictures flagged as adult or violent are removed automatically.
• To improve the game, using Google Analytics totals.

Who we share it with

We don't sell or rent your information. It is stored and processed by these services on our behalf:

• Google Firebase (sign-in, database, server code) and Google Analytics
• Google Cloud Vision (picture safety checks)
• Netlify (website hosting)

We may also share information if the law requires it, or to protect players from abuse.

Children

Maze Dash is not directed to children under 13, and children under 13 should not create an account. If you believe a child under 13 has made an account, contact us and we'll delete it. Players under 18 should have a parent's or guardian's permission to create an account.

Your choices and rights

• Delete your account: open your profile (top right) and choose Delete account. This removes your records, profile, friends, and leaderboard times.
• Change or remove your username or picture at any time in your profile.
• Control friend requests in Settings, and block any player from their player card.
• Analytics: you can block cookies in your browser or install Google's opt-out add-on at tools.google.com/dlpage/gaoptout.
• Depending on where you live (for example California, under the CCPA), you may have the right to know what we hold about you, get a copy, correct it, or delete it. Contact us and we'll help.

How long we keep it

We keep your account data until you delete your account. Leaderboard times stay up while your account exists. Analytics data is kept according to Google Analytics' retention settings. Reports are kept as long as we need them to handle safety issues.

Security

Data is sent over encrypted connections, and our database rules only let you read and change your own private data. No system is perfectly secure, so please use a password you don't use anywhere else.

Changes

If we change this policy, we'll update the date at the top. For big changes, we'll let players know in the game.

Contact

Questions or requests: [CONTACT EMAIL]