Your boards and your data.
CPU and same-device games save progress on your device. Friend play uses Supabase to keep shared boards and identify their players. Linking an email allows you to recover your boards on another device.
Saved on your device
The browser stores your sign-in session, confirmed boards, pending requests, and local game saves. It also caches game files for offline use. Clearing this site's browser data removes those local copies and signs you out; it does not delete shared boards from the server.
A guest identity cannot be recovered after its session is lost unless you linked and verified an email first.
Stored for friend play
Supabase stores your user identifier, display name, board membership, moves and game history, invitations, offers, results, archive choices, and request receipts used to prevent duplicate moves. If you link an email, Supabase Auth stores that address and manages sign-in verification.
Your opponent can see your display name and shared game. Invitation links let their holders preview and join an available board, so share them only with the intended friend. An invitation preview shows the inviting player's display name. Email addresses are not included in game snapshots.
Services and operational records
The website host and Supabase handle network requests and may keep security and access logs, including IP addresses and request details. The game server records command type, response status, and elapsed time. Its application metrics do not include sign-in tokens or invitation links.
When bot protection is enabled, Cloudflare Turnstile processes a browser verification challenge. Verification emails are delivered through the mail service configured for Supabase Auth.
The game bundle does not include advertising or analytics scripts. Its font and invitation QR generator are bundled locally.
Retention and your choices
Shared boards, game history, and request receipts currently have no automatic expiration. Archiving hides a board from your current list; it does not delete it, and your opponent's archive choice is separate. Cancelling or closing a board also retains its history.
For a question or a request about server-side data, contact info@offekt.com. Include enough information to identify the board or account, but never send a password, verification code, session token, or private invitation link. Requests involving shared game history require review because another player's records may be involved.