Privacy Policy

Overview

This policy explains how penfight.org handles information when you browse the site or launch the game. We do not require an account, profile, payment, or newsletter signup to play.

Hosting and technical logs

Our hosting provider may process standard technical information needed to deliver pages and protect the service, including IP address, request time, requested URL, browser or device information, response status, and security signals. Retention and processing by the host are governed by its infrastructure policies.

Website analytics

We load a lightweight Plausible analytics script once from https://data.1back.link/js/app.js using the endpoint https://data.1back.link/api/send and the site domain penfight.org. In addition to aggregate page views, we record limited interaction events such as navigation and game-card clicks, game launch and fullscreen actions, score-board prompts, score registration or removal, FAQ opens, scroll-depth milestones, and 30- or 120-second engagement milestones. Scroll-depth and timed-engagement measurements are marked as non-interactive so they do not change whether Plausible treats a visit as bounced; deliberate actions such as launching the game or registering a score remain interactive. Score events contain only a broad score range, entry count, and whether a tactic note was provided; they do not contain a player name, tactic-note text, exact score, or the locally stored ranking. The provider may receive technical request data such as the visited page, referrer, browser characteristics, and IP-derived network data. Browser privacy controls, content blockers, or script blocking can prevent this measurement.

Embedded game and browser storage

The game is hosted under the same penfight.org domain at /game/pen-fight/. The current build may keep temporary score or session state in browser memory. The optional Desk Score Exchange stores the player name, manually entered score, tactic note, and entry time in this browser's localStorage under pen-fight-scoreboard-v1. These ranking records are not uploaded to a public leaderboard or shared with other visitors.

Managing local scores

You can remove one score with its delete control, clear the full local ranking inside the score area, or erase penfight.org site data through your browser settings. Private browsing and cleanup tools may remove the records automatically. Clearing them cannot affect another device because there is no account synchronization.

Optional Google account and Desk Legends saves

Desk Legends offers optional Google sign-in through Supabase. Google and Supabase process authentication information, including your account identifier, email address and basic profile information made available by Google. We do not receive your Google password or access your Gmail messages. Supabase stores your account's quest results, stars, earned skins and backgrounds, and selected equipment. Authentication tokens and an account-specific save cache are stored in this browser to restore your session and retry pending saves. Guest and local-only modes remain available without Google sign-in. Importing normal local quest records requires your confirmation; clearing browser data does not delete an existing cloud save. Signing out stops this browser session but does not delete the account or cloud history. To request account and associated cloud-save deletion, contact mooyuking@gmail.com; we may ask you to verify ownership. Pending offline changes can be lost if browser storage is cleared before synchronization.

Cookies and third parties

Google and Supabase handle the optional account authentication described above. Third-party advertising services may use cookies or similar identifiers. The analytics service and hosting infrastructure may use technical identifiers or similar mechanisms where necessary. Embedded YouTube videos and external links are governed by those services' own privacy policies and may process technical data when loaded or played.

Advertising

This site loads a third-party advertising script from abscloud.org after the page becomes interactive. The advertising service may receive technical request data such as IP address, browser and device information, page URL and referrer, and may use cookies or similar identifiers for advertising delivery and measurement. Advertisements may lead to external pages or windows whose content and data handling are controlled by their providers. Browser privacy controls or content blockers may prevent loading.

Your choices

You may avoid entering a name or tactic note, block nonessential scripts, clear browser storage, use private browsing, or leave the site. Blocking JavaScript will prevent the game and local score tools from running. Depending on your location, you may have rights to ask about, correct, restrict, or delete personal data that can reasonably be associated with you.

Children

The site is not designed to collect personal information from children. If you believe a child has provided personal data to us, contact us so we can review the request.

Policy changes and contact

We may revise this policy when the site, service providers, or legal requirements change. The date above identifies the current version. Send privacy questions to mooyuking@gmail.com.