The Privacy of the Club
What we keep, why, for how long, who sees it — and how you delete it. One page, no legalese. In force since 9 September 2026.
What we keep
- A handle. You choose it or the server hands you one (“Phoenix_N”). It is your face in the Club.
- A country. Only if you declare it — two letters, for the country table.
- Your score. Palms, streak, Passes, positions in the questions and their reasons, answers of the Day, medals, Missions, league, Theories, reports (“I saw something”), Shift messages, disputes.
- An email — only if you “Keep your account”. With it we keep the language of the page (so the key arrives in your language) and the time you accepted the Law and this Privacy. Without an email the account lives only on your device.
- A random device identifier to count visits — no cookies, no ads, no third-party tools. The servers keep your IP address briefly for safety (per-IP limits, captcha).
We never ask for a real name, phone, address, date of birth or password. Palms are not money — there is no payment, no card.
Why
So that you can play. The handle and the score are the game: other players see them on the Board, in the questions, in the Shift. The country counts in the country table.
The email exists for one reason: to enter the same account from any device. We send you only the key when you ask for it. No newsletter, no updates, no ads, no “you forgot your streak”.
What is public
Handle, country flag, Palms, streak, rank, medals, your positions in a question once the Fog lifts, your reasons, your Shift messages, your Theories that opened. All under the handle.
The email never. It lives only in the sign-in table, which no player reads — not even the shift host.
For how long
As long as your account exists. Anonymous sign-ins that never played (not one Day, not one position) are deleted after 7 days. Email keys expire in 1 hour and work once.
Who
Supabase (database and sign-in) — servers in Frankfurt, EU. Resend (sends the emails) — EU, Ireland. Vercel (hosts the pages). Nobody else. We do not sell, hand over or cross-reference with anything.
Your rights
- See what we keep: the Me page shows it all.
- Change your handle, country or email in the Settings of Me.
- Leave a device (“Sign out of this device”) — the account waits behind your email.
- Delete yourself (“Delete me” in Settings): immediately, without emailing anyone, your handle, country, email, Palms, streak, medals, Theories, reports, messages and sign-ins are deleted. Your positions in the questions stay as anonymous amounts (“Ghost”), because the pool belongs to everyone who staked — otherwise other players’ odds would change.
The General Data Protection Regulation (GDPR) and Greek law 4624/2019 apply. If you are under 15, ask a parent first — we ask at the same step as the email.
Contact
The Club is part of an independent fan site. For anything about your data, write to us from the About page with your handle. Changes to this page are written here, with a date.