Your game.
Your information.

What we use and why

• Guest sessions: choosing Play Daily, Play Practice or View leaderboard without signing in creates a random account identifier and a session with Supabase. It lets you read the public leaderboard. If you play, we also use it to associate and recover your guest games, apply the server clock and prevent duplicate actions. Opening the leaderboard does not start a game. No Google account or email is needed to play.
• Sign-in information: your account identifier, email and basic profile information supplied by Google, such as your name and profile picture. Google handles your Google password; sevenVseven.lol does not receive it. We use the verified account to sign you in, identify your saved games and enforce one ranked attempt per account per UTC day.
• Your public nickname: we assign a random nickname when your profile is first created or you start Daily. Eligible Daily results saved to a Google account appear on the leaderboard under this nickname. You can change it in Account or clear it to hide your scores from the leaderboard and Friends. Existing blank names remain hidden. Your email and Google profile are not displayed there.
• Game records: attempts, submitted guesses and selected answer identities, scores, question/package references, timestamps and request receipts. These let us run and recover games, calculate results, prevent duplicate actions and show your history.
• Messages you send: your email address and the content of support, answer-review or privacy requests. We use these to respond and investigate. The draft helper sends nothing until you send the email through your email service.
• Technical information: hosting, sign-in and database providers process connection and security information, such as IP address, browser and request logs, to deliver and protect the service.

Daily challenge and Practice are available with a guest session. Google sign-in lets you save a completed Daily result to your account and enter the leaderboard when eligible. You can read the demonstration and information pages without a session. You can hide your scores by clearing your public nickname in Account.

Our lawful bases

We rely on performing the service contract to provide your account, games and history. We rely on legitimate interests in operating a fair, secure game and handling support and answer reports. We rely on legal obligations when handling applicable data-protection requests. You can object to processing based on legitimate interests.

Who processes the information

Supabase provides account authentication, the game database and game API. Google provides sign-in; it also provides Gmail for the support address. OpenAI Sites hosts the frontend, with Cloudflare infrastructure delivering and protecting it. Your email service processes messages you choose to send.

The application does not send player profiles, answers or support messages to an AI model or search service. It does not include advertising or behavioural-analytics scripts. Hosting and security infrastructure may perform its own technical processing.

Providers can process information outside the United Kingdom. Their applicable data-processing terms describe transfer safeguards, including contractual clauses where relevant. You can contact us for details about the arrangements applicable to this service. Provider information: Supabase data-processing terms, Google privacy, OpenAI privacy and Cloudflare privacy.

Browser storage

Google sign-in tokens use this browser’s local storage so you can stay signed in across visits. Sign out from Account to end that session on this browser. Guest sign-in tokens and the sign-in verification step use this tab’s session storage. Game drafts, pending requests and briefly cached account, friends and leaderboard views stay in memory; saved games are recovered from the server. Closing a tab does not delete the account or server records. Closing the tab or ending the guest session can end access to unsaved guest games. When you choose Google after completing a Daily, a one-use save request stays in this tab’s session storage for the sign-in handoff; the server stores its digest for verification. The request expires after 30 minutes. The completed Daily is then saved to the signed-in account. Practice games do not transfer.

The demonstration and support helper do not save what you open or type in browser storage. The application does not set optional advertising or analytics cookies. Providers may use storage or cookies for their own sign-in and security features.

How long information is kept

Account information and game history are kept for the lifetime of your account so you can return to your results. This also applies to guest identifiers and game records: losing access to a guest session does not delete them. There is currently no automatic inactivity-based deletion. You can request account and data deletion at any time.

Support correspondence is kept while a request is being resolved and, where needed, to handle a related complaint or establish what action was taken. When dealing with a deletion request, we will explain any information that must be retained, why and for how long. Provider logs and backups have separate retention arrangements; removal from active records does not imply instant removal from every backup.

Your choices and rights

Depending on the circumstances, you can ask to access, correct, erase, restrict or receive a portable copy of your personal information, or object to its use. You can remove your public name in Account. For other requests, email boffsterbot@gmail.com, from your sign-in address if you use Google. For guest games, contact us while the tab is still available and include the game reference in your message. We may need to verify ownership before acting. Never send session tokens or sign-in codes.

Prepare an account and data deletion request or request a copy of your data. These are manual requests; opening a draft does not delete anything. We will respond in accordance with applicable data-protection law.

You can complain to the UK Information Commissioner’s Office: make a complaint to the ICO. You can also contact your local data-protection authority where applicable.

Changes to this notice

We will update this page when the way the service uses information changes. The date at the top identifies this version.