Privacy

What we store with an account

• Your email address and password. They are used to sign you in and to send sign-in emails (confirming your address, resetting your password). The password is stored hashed; nobody can read it.
• Your name and picture from Google, if you sign in with Google.
• Your username, which you pick after signing up.
• Your games. Finished games against people, and bot games while you are signed in: the moves, the result, the time control and the ratings before and after.
• Your ratings, one per time control and one for puzzles.
• Your puzzle results: which puzzles you tried, whether you solved them, and how many mistakes you made.

What other people can see

Your username, your ratings and your finished games are public: anyone can open a game page and see who played and every move. Your email address and your puzzle history are visible only to you.

Playing as a guest

A friend you invite can join a casual game as a guest, with no account. We store the name the guest types, which is shown in the game and saved with it. The browser also keeps a random key so the game server can recognise the same guest after a reconnect; the server only ever stores a scrambled (hashed) form of it.

What stays in your browser

Your settings (theme, sound, board and pieces) and a bot game in progress are saved in your browser's local storage, on your device only. Signing in sets cookies that keep you signed in. That is all: there are no advertising, analytics or tracking cookies, which is why the site shows no cookie banner.

Services that handle your data

• Supabase runs our database and sign-in, and sends the sign-in emails. Its servers for this site are in the United States.
• Vercel hosts the website and keeps short-lived request logs, as any web host does.
• Cloudflare runs the game server for games against people.
• Google, only if you choose to sign in with Google.

Each of them handles the data only to provide that service. We share it with nobody else.

Getting a copy, fixing or deleting it

You can ask for a copy of your data, ask us to correct it, or ask us to delete your account. There is no delete button yet; until there is, write to support@forkandknight.com from the address you signed up with and we will do it by hand.

Deleting your account removes your email address, your profile, your ratings and your puzzle history. Your finished games stay, because they are also your opponents' games, but your name is removed from them.

Children

You need to be at least 13 to make an account, or older if the law where you live requires it. If you are younger, you can still play the bots and puzzles without one.

Changes to this page

When this page changes, the date at the top changes with it. If a change affects what we store or who can see it, we will say so on the site first. See also the terms of use.