GraphDuel
Privacy & Policy
Your data, cookies and storage, and privacy information—all in one place.
Policy preview — operator details are being finalized
Account data
Checking your account…
Clear this browser’s game data
Removes saved practice, equations, and game preferences on this browser, signs out this device, and clears its linked anonymous daily records. Your registered account remains unless you delete it separately. A temporary under-age restriction cookie may remain for its security purpose.
The short version
Practice works without an account. Accounts are for players aged 16 and older. We do not sell personal data, use it for advertising, or offer cash prizes. We collect limited, aggregate traffic and performance data to help keep the service available.
What we collect and why
- Eligibility: completing your account setup requires your declaration that you are 16 or older and your agreement to the Terms. We record that declaration, the terms version, and agreement time. We do not request a birthday from Google or verify your age through ordinary Google sign-in. Google verifies your identity first; online account access stays restricted until you complete setup.
- Google sign-in: Google returns your account identifier, verified email, and profile information through its sign-in service. We store the identifier and email to authenticate and recover your account. We do not store your Google password or use your Google name or email to generate your public nickname.
- Account and game data: we store your nickname, optional country, chosen appearance, rating, progress, submissions, scores, solve times, personal bests, and match and daily activity to provide the game and your history.
- Practice and device preferences: your browser can store practice progress, saved equations, and settings such as audio preferences. They stay on that device unless a feature sends them to the server or you share a link. The Daily Graph sends guesses and results to the server, including for players without accounts.
- Security and delivery: requests necessarily reach our hosting provider, which can process network information such as IP addresses and server logs. The application uses hashed network or visitor identifiers for abuse prevention and session cookies for sign-in. Hashed identifiers are not necessarily anonymous.
- Traffic and performance measurement: Vercel Analytics and Speed Insights collect page-view and technical visit data, such as the page route, referrer, country, device, browser, and operating system. We use aggregated reports to monitor traffic, plan capacity, and support traffic management and service reliability. We do not send query strings, fragments, profile names, match identifiers, or custom events to these tools.
- Support: if you email us, we use your message and contact details to answer, handle a request, or investigate a report. Avoid including unnecessary personal information.
Where EU or UK data-protection law applies, account and game processing supports providing the service you request; security and limited operations support legitimate interests in running and protecting the service, including limited traffic and performance measurement, subject to your rights and the safeguards owed to children. We may process data to meet applicable legal obligations. These purposes do not authorize unrelated uses.
What other players can see
Signed-in players can see your nickname, rating, chosen country or region, and results in matches and leaderboards. World Records also shows your fastest perfect solves by graph type in Practice and Duels, including when your profile is private. Country display is optional. New accounts have detailed profiles and history public by default and can be made private through profile settings. Private profiles still show a player card, rank, rating, and basic competitive stats. Opponents can see the equations and scores disclosed by the game.
Shared links may contain equations or invite codes. Anyone you give a link to can potentially read or forward it. Use a nickname and avoid putting personal information in equations.
Traffic and performance measurement
Vercel Analytics and Speed Insights run by default on a small set of public game pages. They provide aggregate traffic and performance data so we can monitor demand, plan capacity, and maintain reliable service.
We limit measurements to known routes and strip query strings and fragments before sending them. We do not use advertising trackers, session replay, or custom analytics events.
Providers and sharing
Google provides sign-in; Vercel hosts the application and supplies traffic and performance measurement; Neon stores the production application database. They receive the data needed for their respective roles. Local development may use a database on the developer’s computer.
We may disclose information when legally required or necessary to investigate abuse, protect users, or respond to a security incident. We do not sell personal data or share it for cross-context behavioral advertising.
Providers may process information outside your country. Storage locations, provider contracts, international-transfer arrangements, and any required local representation must be assessed for the markets we serve; this notice does not assert EU-only hosting or certify that every transfer requirement is resolved. You can request information about applicable arrangements by contacting us.
Retention
Account identity, agreement records, rating, personal bests, and accumulated progress remain while your account is active unless you request removal. The application maintenance job removes daily and finished-match detail older than approximately one year, and anonymous daily detail older than the current day plus two previous days. Expired sessions, rate-limit records, and stale queues are also cleared by maintenance.
Cleanup occurs when the maintenance job runs. Provider logs, email, and backups have separate retention and may outlast removal from the live database. We do not claim that the application deletion button immediately removes every provider copy. Contact us for a request involving those systems. Cached views or copies held by other players may also persist briefly or independently.
Your choices and rights
Use the controls on this page to download account data, delete your account, or clear this browser’s game data. Country and profile-sharing choices are in profile settings. Account export excludes security secrets and other players’ identifying data.
Deleting an account removes its identifying details, submissions, sessions, rating, progression, and daily records from the live application database. Shared match scores may remain with a deleted-player placeholder to preserve opponents’ results. Clearing browser data signs out this device and removes its linked anonymous daily data; it does not delete an account or data held on another device.
Depending on applicable law, you may have rights to access, correction, deletion, restriction, objection, portability, and withdrawal of consent. Email us if the controls do not cover your request, including a parent’s request about a child. We may need proportionate identity verification. We will explain applicable legal exceptions or limits and respond within applicable deadlines. You may complain to your local data-protection authority where that right applies. Exercising a privacy right will not incur a fee for ordinary requests or change the price of the free game.
Children
Accounts are limited to age 16 and older. A parent’s agreement to game terms does not open an account for a younger child. Practice remains available without an account and uses the same limited operational measurement described above.
If we learn that an account belongs to a younger child, we will restrict it and review and remove improperly collected data as required. A parent or guardian can contact us to request review or removal. The game’s educational subject matter and stated age rule do not remove child-privacy obligations applicable to its actual audience.
Updates
The version above identifies this notice. We will explain material changes and obtain fresh consent when required. The cookies and storage section describes device storage in more detail.
Who runs GraphDuel?
GraphDuel is an independent personal project.
Contact: contact@graphduel.com.