Privacy Policy

• We collect the bare minimum needed to run the game.
• We don't sell your data to anyone. Ever.
• No ads. No third-party tracking pixels.
• You can play without signing in.
• If you sign in with Google, we get your name, email, and avatar — nothing else.

If you play as a guest

• A randomly generated guest ID stored in a cookie.
• A display name (auto-generated unless you change it).
• Your moves at our tables — which rooms you joined, what cards you played.

If you sign in with Google

• Your Google account name, email, and avatar (via Clerk, our auth provider).
• Everything in the guest section, plus persistent stats across devices.

Automatically

• Standard server logs (IP, user agent, timestamps) for debugging and rate-limiting.
• Anonymous analytics (page views, performance) via Vercel Analytics.

Bower is built on a few services. Each one only handles its slice of the data:

• Clerk — handles sign-in and identity. Sees your Google login info.
• Supabase — hosts our database. Stores game state, rooms, and your profile.
• Vercel — hosts the website and runs analytics. Sees request metadata.
• Google — provides OAuth sign-in. Only sees what you share with them.

We don't share your data with anyone else.

We use exactly these:

• __session (Clerk) — keeps you signed in.
• bower_guest_id — your guest identity if you don't sign in.
• theme (localStorage) — remembers your light/dark mode preference.

That's it. No tracking pixels. No ad cookies. No third-party trackers.

You can:

• See your data in your account at any time.
• Delete your account by emailing us. We'll wipe your profile and tied data within 30 days.
• Export your data on request (also via email).

We retain anonymized game history (rooms, moves, scores) indefinitely so leaderboards and stats stay coherent. If you delete your account, your historical games stay but aren't linked to you anymore.

Bower is for users 13 and older. We don't knowingly collect data from children under 13. If you believe a child has signed up, email us and we'll delete the account.

If we update this policy, we'll change the “Last updated” date above and announce significant changes on the homepage.

Email us at hello@holyschmittstudios.dev for any privacy questions, data export requests, or account deletion.