Privacy Policy

We collect the following categories of information when you use the Service:

• Account information. If you sign up with email and password, we store your email address and the display name you choose. If you sign in with Google, we receive and store your Google account email and display name.
• Profile photo. If you are signed in and choose to upload a photo as your avatar, we store a cropped copy and show it wherever your avatar appears, including to other players. You can remove it from your profile at any time.
• Guest identifiers. When you play as a guest, Firebase Auth assigns you an anonymous user ID. No personal information is collected for guest accounts unless you choose to link one.
• Game data. We store game state, move history, lobby settings, and in-game chat messages in order to operate the Service.
• Usage statistics. We collect aggregate statistics such as games played and formations completed to power your profile page. We do not use third-party analytics or advertising trackers, and we do not sell this data.
• Country. When a signed-in player loads the app, we derive their country from the IP address of the request, at most once an hour, and store it as a two-letter country code only. The IP address itself is not stored. The country powers the leaderboard's region and country filters and is shown as a flag on your avatar wherever other players see it, such as the leaderboard, lobbies and games. Tap the badge on your avatar in your profile to switch the flag off or show a competition badge instead. Guest accounts are never located.
• Matchmaking activity. To keep competitions fair, we record when you leave the matchmaking queue or cancel a found match (with your search settings and the players you were grouped with), and how many turns in each game were played for you after you went idle. This is kept for 12 months, or deleted sooner if you delete your account.

• To create and manage your account and authenticate you across sessions.
• To operate real-time multiplayer games, including syncing board state and delivering chat messages to other players in your game.
• To display your profile, display name, and statistics within the game.
• To send transactional emails (e.g., email verification codes and password reset codes) via Plunk. We do not send marketing emails.

Your account and game data is stored using Google Firebase (Firestore and Firebase Authentication), and your profile and statistics are stored in a PostgreSQL database hosted on Google Cloud SQL, all within the us-central1 region.

In-game chat messages are stored in Firestore and are visible to other players in the same game session. Chat is moderated server-side for prohibited content before being stored. Chat messages are deleted automatically 3 days after the game ends.

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We share data only with the infrastructure providers necessary to operate the Service (Google Cloud, Firebase, Plunk, Google reCAPTCHA Enterprise, Anthropic, Google AI / Gemini API) and only to the extent required to provide it. See the sections below for what each receives.

Your display name and game activity (board moves, formations) are visible to other players in your active game lobby.

If you win a prize in a leaderboard competition, we email you at the address on your account to arrange payment. The details you send in reply (a PayPal email or Venmo username; an Amazon gift card goes to your account email) are used only to pay your prize and are not stored in the Service. The payment itself is handled by the provider you choose, under its own terms.

We use Google reCAPTCHA Enterprise to distinguish human visitors from automated traffic. When you load the site, reCAPTCHA collects device and behavior signals (IP address, browser fingerprint, mouse and touch interactions) and returns a risk score that we use to block scripted abuse of sign-in, account creation, and AI advisor endpoints.

This data is sent to Google and is governed by the Google Privacy Policy and Terms of Service. reCAPTCHA runs invisibly — there is no checkbox or visible challenge for typical visitors.

Sequentis offers an in-game AI advisor (the “Oracle”) powered by Anthropic’s Claude models, accessed through the Anthropic API, with Google’s Gemini models (through the Gemini API) as a fallback when Anthropic is unavailable. When you invoke the Oracle, we send one of these providers your message and a server-built prompt describing your current game state — the board, your hand, and the public state of opponents. The display names of players in your game are included so the Oracle can refer to opponents by name.

We do not send your email, real name, payment data, or any private state belonging to other players (other players’ hands, the deck order, or your private chat). Prompts and responses sent to these paid APIs are not used by Anthropic or Google to train their models, per each provider’s commercial API terms.

Account data is retained for as long as your account is active. Guest accounts with no associated game activity may be eligible for deletion at our discretion to preserve system resources.

Your game results, Renown history, and statistics stay linked to your account for as long as it exists, so your history remains available to you. The live game and lobby records in Firestore (including chat) are temporary and expire automatically within a few days of a game ending.

You can permanently delete your account at any time from Profile → Security → Delete Account. When you do:

• Your profile, username, profile photo, Renown, and statistics are permanently erased.
• Your participation in past games is anonymized — the records remain so other players' game history is preserved, but they are no longer linked to you.
• Your Firebase Auth account is removed; you will be signed out immediately.
• Your previous username becomes available for others to claim.

If self-serve deletion fails for any reason, contact legal@sequentis.io and we will complete the deletion within 30 days.

The Service is not directed to children under 13. By creating an account or continuing as a guest, you confirm that you are at least 13 years old. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account or provided us with personal information, please contact us at legal@sequentis.ioand we will delete the account and associated data promptly.

You may access, correct, or delete your personal data at any time.

• Deletion — self-serve via Profile → Security → Delete Account (see the Data Retention section above for what that involves).
• Data export (right to access) — email legal@sequentis.io from your registered account email and we will send you a copy of your account data (profile, statistics, Renown history, game participation records, and authored chat messages within their retention window). We may ask you to verify ownership via a one-time email code before delivering the export.
• Correction — most fields (display name, avatar) are editable in your profile. For anything you can't edit yourself, email legal@sequentis.io.

We respond to all requests within 30 days of receipt.

We may update this policy from time to time. When we do, we will revise the "last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the revised policy.

Questions or concerns? Email us at legal@sequentis.io.