Privacy Policy

When you first play, we give your browser a random player identifier, stored in a cookie. It isn't linked to your name or email. It lets us keep your Daily progress, streak and results on this device, and stops the same Daily being played twice from one device.

We store your gameplay with that identifier: the chains you start and finish, your moves, scores, times, hints and undos, Live Duel rooms and results, and Friend Challenges you create or answer.

Accounts are optional. They let you keep your progress across devices.

Email and password: we store your email address. Your password is handled by our authentication provider, Supabase, and is never stored in readable form or visible to us.

Continue with Google: Google shares your email address, your name and your profile picture with us. We use them to sign you in, to show your initial or picture in the app, and to tell you apart from other players. We don't receive your Google password or access to anything else in your Google account.

When you sign in, the device you're playing on is linked to your account so its existing progress carries over.

Leaderboards, Live Duels and Friend Challenges show a display name next to scores. By default this is a generated name (like “SwiftOtter42”). If you have an account you can choose your own; it is public, so don't use anything you wouldn't want others to see. We may change or remove names that are offensive or impersonate someone.

We record simple game events (for example: a Daily started or finished, a share, a Live Duel joined), with your random player identifier and a short session identifier, to understand how the game is played and to fix problems. These are never sold or used for advertising.

We use Vercel Web Analytics, which counts page views without cookies, and Vercel Speed Insights, which measures page loading performance. Before anything is sent we remove query strings and game codes from page addresses.

When you first arrive in a browser session we note which page you landed on and the kind of site that referred you (for example “search” or “social”), not the full referring address.

We use only the cookies the game needs to work:

chained_player — your random player identifier (about one year). chained_session — groups one visit's activity (one day). chained_daily — stops today's Daily being replayed on this device (two days). chained_landing — the landing page and referrer category for the current browser session.

If you sign in: sb-…-auth-token — your sign-in session (set by Supabase), chained_auth — tells the site you are signed in, chained_profile — the initial or picture shown on the account button.

We also keep small preferences in your browser's local storage, such as whether you've dismissed the How to play tip. We don't use advertising or cross-site tracking cookies. No ads are shown on CHAINED. To verify the site with Google AdSense for possible future ads, our pages load a Google verification script; like any request to Google, this lets Google see standard technical information such as your IP address and browser.

We only email you about your account: confirming your address, signing in, and resetting your password. These emails are sent through our email delivery provider, Resend. We don't send marketing emails.

Supabase stores the game's data and runs sign-in. Vercel hosts the website and provides the analytics described above. Resend delivers account emails. Google provides Continue with Google if you use it. They process data on our behalf to provide these services, and may do so in countries other than your own.

CHAINED is free and has no payments today. If paid features such as CHAINED+ launch, payments will be handled by a payment provider (we expect to use Stripe), and we'll update this page before any payment is taken. We will never see or store your full card number.

We share information beyond this only if the law requires it, or to protect players and the game from abuse.

We keep your gameplay history and results while CHAINED is running, because they make up your streaks, trophies and the leaderboards. Account details are kept until you ask us to delete your account. Usage events are kept only as long as we need them to understand how the game is used, and then deleted.

You can play without an account, sign out at any time, and clear CHAINED's cookies in your browser (this removes your anonymous progress on that device).

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete your account and the progress linked to it. Use the contact details below. Depending on where you live, you may have further rights under local data-protection law, including the right to complain to your data-protection authority.

CHAINED is a general-audience trivia game and is not directed at children under 13. Please don't create an account if you're under 13 (or the minimum age in your country).

If we change this policy we'll update the date at the top. For significant changes we'll also tell you in the game or on the Updates page.

Questions or requests about your data: Email privacy@playchained.com.

See also our Terms of Use.