Privacy Policy

We operate Squibz (the "Service"), a free browser-based multiplayer gaming platform. We are the data controller for personal data processed in connection with the Service.

For privacy-related enquiries, contact us via our contact page. We will respond within 30 days.

Squibz is designed to be played without an account. We collect only what is strictly necessary:

We do not store usernames, scores, or game histories in any persistent database. When a room closes (last player leaves or 2 hours of inactivity), all room data is permanently deleted from server memory.

For users in the European Economic Area (EEA), the United Kingdom, and Switzerland, we process personal data under the following lawful bases (GDPR Article 6):

• Legitimate interests — operating the gaming platform, preventing abuse (server logs, IP rate-limiting), and displaying non-personalised advertising to fund the free service.
• Contract performance — providing the real-time game session you requested (in-memory game state).
• Legitimate interests — processing contact form submissions to respond to your enquiry.

For Google AdSense: Google manages its own consent and privacy frameworks for advertising cookies. You can control ad personalisation via Google Ad Settings.

Squibz itself sets no cookies. We use the browser's localStorage to remember your username, avatar, and audio preferences entirely on your own device.

Third-party advertising (Google AdSense) may set cookies for ad personalisation and measurement. You can manage these via:

• Google Ad Settings — opt out of personalised ads
• YourAdChoices — industry-wide opt-out
• Your browser's built-in cookie management settings

We display advertisements served by Google AdSense to fund the free service. Google may use cookies and similar technologies to show you relevant ads. Squibz never uses game-session data to target ads. Ads are clearly labelled "Advertisement" and are separated from game content.

We comply with Google AdSense programme policies, including the AdSense content policies. We do not place ads inside active game canvases, use deceptive ad placement, or encourage accidental clicks.

We do not sell, rent, or trade your personal data. We share minimal data only with:

• Supabase Inc. — contact form submissions (name, email, subject, message) are stored in a Supabase PostgreSQL database hosted on AWS. Supabase acts as a data processor under a Data Processing Agreement. See Supabase's Privacy Policy.
• Google LLC — AdSense advertising and optional site verification. Governed by Google's Privacy Policy.
• Hosting provider (Railway / Render) — server logs are processed on the infrastructure we use to run the service.

Where data is transferred outside the EEA, appropriate safeguards are in place (e.g., Standard Contractual Clauses or adequacy decisions).

• localStorage data: stored on your device until you clear your browser data.
• In-memory game state: deleted when the room closes or after 2 hours of inactivity.
• IP addresses (rate-limiting): held in server memory for up to 24 hours, then automatically cleared.
• Contact form submissions: retained in Supabase for as long as necessary to respond to your enquiry, and deleted upon request.
• Server access logs: retained for up to 30 days for security purposes, then deleted.

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of data we hold about you.
• Erasure: request deletion of your data.
• Rectification: request correction of inaccurate data.
• Objection: object to certain types of processing.
• Portability: receive your data in a structured format.
• Restriction: request we limit processing of your data.

Because we store no persistent user profiles, most requests can be fulfilled by clearing your browser's localStorage. For contact form data or server log data, please contact us and we will respond within 30 days. EEA/UK users also have the right to lodge a complaint with their local data protection authority.

Squibz is intended for general audiences aged 13 and above (16 in the EEA). We do not knowingly collect personal information from children under these ages. If you believe a child under the applicable age has submitted a contact form or used the Service, please contact us and we will delete any associated data promptly.

We may update this Privacy Policy periodically. When we do, we will update the "Last updated" date above. Continued use of Squibz after changes are posted constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

Questions about this Privacy Policy or your rights? Contact us via our contact page and we will respond within 30 days.