Privacy Policy

Who is responsible

mathaura is run by an individual based in Taiwan, who decides how your data is used. Contact: [email protected]. We do not sell your data and show no ads.

What we collect

• Google sign-in: your name, email address and profile photo. Your email stays in our sign-in system and is never shown to anyone.
• Your profile: username, and if you add them: country, city, school, age (stored as a birth year), bio, and Instagram and Threads handles.
• Location from your IP address: our host tells us your approximate country and city. We use it to suggest your region and board, and remember it in a cookie for a year.
• Gameplay: for every ranked run, your total and per-question times, retries, aura, the date, and your country and city at the time. Answers are checked, not stored.
• Guest id: a random id stored in your browser, so your guest runs can join your account when you sign in.
• Payments: Polar collects your card and billing details; we never see your card. We keep the plan, amount, currency, status, Polar's order and subscription ids, and Polar's record of the order, which can include your email and billing country.
• Invites: who invited you, if you arrived through someone's link.
• Analytics: page views counted by Vercel Web Analytics, which uses no cookies and does not identify you.

What is public

Your profile page shows your avatar, username, country, city, school, bio, best time, ranks, total aura and social links. Your ranked run history (total and per-question times, and dates) is public on your stats page. Your username, avatar, time, country and school appear on leaderboards, run pages and share images.

Never public: your email, your Google name, your age, and anything about payments.

Why we use it

• To run the game, your account and the boards.
• To keep the boards fair: run timings are how we catch bots and cheating.
• To take payments and keep the records that tax and accounting rules require.
• To understand, in aggregate, which pages people use.

Who processes it for us

• Supabase: database and sign-in, servers in Sydney, Australia.
• Vercel: hosting (Sydney), IP location and analytics.
• Google: sign-in. Profile photos load from Google's servers.
• Polar: payments, as merchant of record (Polar's privacy policy).

This means your data is stored and processed outside Taiwan and Indonesia.

Cookies and browser storage

We use only what the game needs: a sign-in session cookie, a guest id (cookie and browser storage), a region cookie, and browser storage for your practice best, your last run and challenge links. No advertising or tracking cookies.

How long we keep it

• Your account, profile and runs: until you delete your account.
• Guest runs: linked to the guest id until claimed by an account or deleted.
• Payment records: as long as accounting rules and fraud prevention require.
• Ban records (a guest id and the reason): kept so that bans hold.

Your rights

You can see, correct and delete your data, object to how we use it, and complain to your data protection authority. Most of your profile can be changed in Settings. To delete your account and runs, or get a copy of your data, email [email protected] from the address you sign in with. We reply within 30 days.

Children

Anyone can play, and we collect no more from children than from anyone else. If you are a parent or guardian and want your child's account deleted, email us and we will delete it.

Changes

We will update this page when what we collect or who processes it changes. The date at the top shows the latest version.