Privacy

The site stores your local player profile, hashed session tokens, answers, scores, progression and group memberships in its own database. Email sign-in and email verification are provided by the dedicated PlayPlain Supabase project; Supabase stores its protected password credentials, and Resend delivers requested account emails. Legacy username accounts use a salted password hash stored by this site. Guests use a random cookie; signing up can keep the current guest’s progression. Passwords are never stored in plain text.

Stripe hosts payment and billing management and processes your payment details. This site stores customer and subscription references and verified access status, never card numbers. If you explicitly link your Krillion benefit, the server checks the verified email and Krillion entitlement, stores the linked identity and checks eligibility again while you use Premium. You can unlink this benefit in Premium without canceling Krillion.

Cookies maintain your session. Local storage keeps game recovery and display preferences. The service worker caches public resources, while personal APIs stay outside the cache. This edition does not load advertising or analytics services.

Google sign-in contacts Google only when configured and chosen. Opted-in notifications use your browser’s push service. A group owner can connect an external webhook; its destination receives the requested group message. Calendar links use your calendar provider. These optional services never involve the original game backend.