Privacy Policy

Last updated: March 2026

What we collect

When you register we store your email address, a username you choose, and a hashed version of your password. During gameplay we record game moves, scores, and timing data.

API keys

If you choose to play against AI opponents, you may store API keys for third-party AI providers (Anthropic, OpenAI, Google). Keys are encrypted at rest using a per-user derived key. You can view, replace, or delete your stored keys at any time from your profile page.

Third-party AI services

When you play a game with AI opponents, game state data (board positions, moves, and scores) is sent to the AI provider associated with your API key to generate moves and optional chat responses. Chat messages in games with AI players may also be sent to generate bot replies. We do not control how third-party providers handle this data — please review their privacy policies.

Chat

In-game and lobby chat messages are ephemeral — they are broadcast in real time but are not stored in our database.

How we use it

Your data is used solely to operate the game: authenticating your account, tracking game state, and computing leaderboard rankings. We do not sell, rent, or share your personal information with third parties.

Cookies

We use a session cookie to keep you logged in and a preference cookie to remember your theme choice. No third-party tracking cookies are used.

Data retention

Your account and game history are retained for as long as you have an active account. If you would like your data removed, contact us at hausbroker@toobigtofail.net.

Contact

For privacy-related questions, email hausbroker@toobigtofail.net.