Privacy policy
legalReviewed: true in portal/lib/site.ts once it has been checked, and this banner disappears.1. The short version
You can play ThereCanOnlyBeOneSnake without giving us anything. There is no sign-up wall: open the page and play. If you choose to create an account, we store the minimum needed to keep your progress and let other players see who they are playing against.
We do not sell your data, we do not share it with advertisers, and we do not run advertising or third-party tracking pixels on our games.
2. Who we are
Idea Guy Games operates ideaguygames.com and its game subdomains, including therecanonlybeonesnake.ideaguygames.com. For anything in this policy, write to privacy@ideaguygames.com.
3. What we collect
| What | When | Why |
|---|---|---|
| Technical request data — IP address, browser and device type, pages requested, timestamps | Every visit, automatically | Serving the site, keeping it up, and spotting abuse and attacks. Held in our host's server logs. |
| Account details — email address, display name, and a password or the third-party login you chose | Only if you create an account | Signing you in and letting you keep one identity across our games. Handled by Clerk; we never see your password. |
| Match data — the moves you make and your display name, shared with the other players in that match | During online play | Running the match and resolving disputes about it. |
| Scores and ranking, shown next to your display name | When you finish a ranked game | Leaderboards and matchmaking. Assume anything on a leaderboard is public. |
| Aggregate gameplay statistics — how many people started and finished a match, which features get used, crash and error reports | While playing | Understanding what is broken and what is worth building. Used in aggregate; not used to build a profile of you or to target advertising. |
4. What we do not do
- We do not sell or rent personal data. We never have.
- We do not run advertising networks or advertising trackers.
- We do not use your data to train machine-learning models, ours or anyone else's.
- We do not ask for your real name, address, phone number or payment details — an email address is the most we ever need.
5. Storage on your own device
ThereCanOnlyBeOneSnake keepssome things in your browser's local storage: your settings, sound preferences, and — if you play without an account — your progress. This never leaves your device unless you sign in. Clearing your browser data clears it, and if you were not signed in, that progress is gone for good.
We do not use cookies for advertising or cross-site tracking. Signing in sets a session cookie so you stay signed in; that is its only job.
6. Who else is involved
We use a small number of service providers. They process data only to provide their service to us:
| Provider | What it does |
|---|---|
| Vercel | Hosting and content delivery. Sees the request logs described below. |
| Cloudflare | DNS for our domains, and protection against attacks. |
| Clerk | Runs sign-in and stores your account credentials and email address. |
| Supabase | The database that stores game progress, matches and scores. |
| Photon (Exit Games) | Carries live movement between players during a match. |
These providers operate internationally, so your data may be processed outside your own country, including in the United States.
7. How long we keep things
- Server request logs: a short rolling window, then deleted.
- Account and progress data: for as long as your account exists. Ask us to delete it and we delete it.
- Finished match records: kept while they are useful for ranking and for investigating cheating, then removed or reduced to anonymous aggregates.
- Aggregate statistics with no personal identifiers: kept indefinitely.
8. Your rights
Wherever you live, you can ask us to show you the data we hold about you, correct it, or delete it — deleting your account deletes it all by writing to privacy@ideaguygames.com. We will answer within 30 days.
If you are in the UK or the European Economic Area, the GDPR gives you rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your national data protection authority. Our legal bases are: performing the contract of letting you play and keeping your account; our legitimate interest in keeping the service working and free of abuse; and your consent where we ask for it.
If you are in California, the CCPA gives you rights to know, delete and opt out of the sale or sharing of personal information. We do not sell or share personal information, so there is nothing to opt out of, and we will not discriminate against you for exercising any of these rights.
9. Children
ThereCanOnlyBeOneSnake is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has given us personal data, write to privacy@ideaguygames.com and we will delete it.
10. Security
Traffic is encrypted in transit. Access to the database is restricted by row-level security so one player cannot read another player's data, and our providers hold the credentials rather than us where that is possible. No system is perfectly secure; if we ever have a breach that affects you, we will tell you.
11. Changes
We will update this page when what we do changes, and move the date at the top. If a change is significant, we will say so in the game itself.
12. Contact
privacy@ideaguygames.com for anything about privacy or your data. support@ideaguygames.com for everything else.