Privacy Policy

Your email address is never displayed to other players — not on your profile, not on leaderboards, nowhere.

It is not merely hidden. It is never written into your profile record at all, so there is no version of a bug or a permissions mistake that exposes it to another player. It exists in the sign-in system, and it is visible to the developers, only for running the service.

Signing in with Google gives us your email address and nothing else. Your Google display name and your Google profile photo are not copied, not stored, and never become your Skylith identity by default — those are frequently your real name and your real face, and that is your decision to make, not a default to discover later.

You choose a display name and a picture yourself when you set up your account. If you want your Google photo, there is a button that asks for it plainly.

Google (Firebase) — sign-in and the database everything else is stored in.

Cloudflare — hosts the avatar images, and runs the human check on the sign-in and play pages that keeps automated traffic out.

Resend — sends account email. It sees the address a message is going to.

Vercel — runs the site itself.

That is the whole list. There is no analytics service, no advertising network and no tracking beyond what these four need to work.

Avatar images are stored on a content network and served from an ordinary web address, so that a page showing thirty faces loads thirty images instead of reading thirty database records.

The practical consequence is worth stating plainly: anyone holding that address can open the image, whether or not they can see your profile. Replacing your avatar replaces the file, and deleting your account deletes it.

Pausing hides your profile and signs you out of the game while keeping everything. Restoring it puts you back where you were.

Deleting waits seven days first. Through all seven you can cancel from the sign-in screen in a single click, and the countdown is on the screen every time you sign in. Deletion is the only decision here that cannot be walked back, so it is the one given the most time.

Pausing, restoring and deleting each ask you to confirm through a link sent to your email address, valid for ten minutes. Cancelling a deletion never does — the fire exit does not get a lock.

These actions are limited to a few a day. The limit protects a shared email allowance, not you, and cancelling a deletion is never refused by it.

After the seven days: your progress and collection, your settings, your avatar image, your display name, your bio, your showcase, and every follow relationship — including the copy of it held on the profile of everyone who followed you.

Then the sign-in record itself, which is what removes your email address. It is not disabled or flagged; it stops existing, and the address is free to make a new account with.

One thing survives on purpose: a record holding your @handle, your account's internal id, and the date. It keeps the handle from being taken by somebody claiming to be you, and it stops every reference elsewhere from pointing at nothing. It contains nothing that identifies a person — your email was never in it, and the record that held your email is gone.

We don't sell your data. We don't show ads against it. We don't collect more than the service needs to run.

Your display name, bio, avatar, showcase and preferences are editable in Settings, and your profile page shows you exactly what other players see.

Pausing and deletion are in Settings → Account → Danger zone.