YOUR EMAIL IS PRIVATE.

EMAIL ADDRESSES ARE ENCRYPTED IN STORAGE AND USED TO SEND SIGN-IN AND ACCOUNT-VERIFICATION CODES. THEY ARE NOT SHOWN TO OTHER PLAYERS.

NO SELLING YOUR DATA. BECAUSE EWW.

WHAT IS STORED.

YOUR USERNAME, ENCRYPTED EMAIL ADDRESS, ACCOUNT IDENTIFIER, POINTS, WINS, LOSSES, AND DRAWS ARE SAVED. USERNAMES AND GAME STATS CAN APPEAR ON PUBLIC LEADERBOARDS.

TEMPORARY SECURITY RECORDS INCLUDE CODE HASHES, SESSION-TOKEN HASHES, EXPIRY TIMES, FAILED ATTEMPTS, AND REQUEST LIMITS. EMAIL LOOKUPS AND IP-BASED RATE LIMITS USE KEYED HASHES.

WHAT ENCRYPTION PROTECTS.

EMAIL ADDRESSES USE AES-256-GCM ENCRYPTION AT REST, WITH THE KEY KEPT SEPARATELY FROM THE DATABASE. OPENING THE DATABASE DOES NOT SIMPLY REVEAL EMAIL ADDRESSES.

THE SERVER CAN DECRYPT YOUR ADDRESS TO SEND A CODE. THIS IS NOT END-TO-END ENCRYPTION. SOMEONE WITH ACCESS TO BOTH THE DATABASE AND THE KEY, INCLUDING AN AUTHORIZED OPERATOR, COULD DECRYPT IT.

BROWSER & PROVIDERS.

YOUR SIGN-IN TOKEN IS KEPT IN SESSION STORAGE AND YOUR SOUND PREFERENCE IN LOCAL STORAGE. LIVE ROOMS AND GAME STATE ARE HELD IN SERVER MEMORY.

THE EMAIL PROVIDER RECEIVES YOUR ADDRESS TO DELIVER CODES. GOOGLE FONTS MAY RECEIVE YOUR IP ADDRESS AND BROWSER REQUEST DETAILS WHEN THE FONT LOADS. HOSTING PROVIDERS MAY PROCESS CONNECTION DATA OR KEEP ACCESS LOGS ACCORDING TO THEIR CONFIGURATION.

VERSUS DOES NOT ADD ADVERTISING TRACKERS OR ANALYTICS TO SELL YOUR ACTIVITY.

KEEPING & REMOVING DATA.

ACCOUNT DETAILS AND SCORES REMAIN UNTIL REMOVED. TEMPORARY LOGIN, SESSION, AND RATE-LIMIT RECORDS EXPIRE AND ARE CLEANED UP REGULARLY. YOU CAN ASK COCO TO REMOVE YOUR ACCOUNT AND SCORES; THERE IS NO SELF-SERVICE DELETE BUTTON RIGHT NOW.