Legal
Privacy notice
This notice explains what Kartikeya Mishra (“we”) collects through this website and why. We collect as little as we can.
What we collect
| When | Data | Why |
|---|---|---|
| Early-access request | Email address; player/organizer preference; whether you opted in to updates and when; your age confirmation; a referral code if you arrived through one; a campaign source tag if the link had one; request, confirmation and invitation timestamps | To confirm your address, manage invitations, honour your email choices and measure whether the game is wanted |
| After confirming | A random referral code linked to your request; a count of confirmed sign-ups that used it | To understand word of mouth. Other people never see your email or account |
| Playing (confirmed players) | Each run's mode, arena seed, score and statistics (shards, combo, hits, duration); totals such as personal best, number of runs and days played; your optional leaderboard name; a sign-in session record. We don't keep your keystrokes or pointer movements after a run is verified | To verify scores, run leaderboards, and learn whether people enjoy the game enough to come back |
| Playing as a guest | Each run's mode, seed, score and statistics with no identifier attached. If you enter your email on the results screen, we store that run's ID with your sign-up and attach the run to your profile when you confirm | To verify scores and let you keep a run you played before signing up |
| Friend challenge links | The arena seed and twist, the score to beat, the recording of your movements in that run (shown to the people you share it with as a “ghost”, and only saved when you choose to share), your leaderboard name and your referral code (used only to credit sign-ups). People who play a challenge without an account have their run stored without any identifier | To let friends play the same arena |
| Optional playtest feedback | Your yes/no answer and any note you write | To improve the game |
| Campus Clash interest | Name, email, institution or club, role, expected size and your message | To contact you about pilot events |
| Any form submission | A one-way keyed hash of your IP address, kept for about two hours | Rate limiting and abuse prevention. We don't store raw IP addresses in our database |
| Emails we send | Delivery status (sent/failed) and the provider's message ID | To avoid duplicate emails and fix delivery problems |
We don't ask for your date of birth, phone number, location, government ID or school identity for early access. Our hosting provider may keep standard server logs (such as IP address and browser type) for security and operations.
Legal basis and consent
We process your email to handle the access request you made. Product updates are sent only if you tick the optional box. With that consent we may also send at most three short reminders if you stop playing (after 3, 7 and 21 days), then stop. You can withdraw consent any time using the one-click link in any email. Withdrawing doesn't affect processing that already happened.
Who processes it
- Vercel: website hosting and delivery.
- Google (Firebase / Google Cloud): database (Cloud Firestore).
- Our transactional email provider (Resend): delivering confirmation, invitation and optional update emails.
- Razorpay (website payments), Google Play and Apple (in-app payments) and RevenueCat (in-app purchase records): only if you buy something.
These providers may process data outside India, including in the United States, under their own safeguards. We don't sell personal data or share it with advertisers.
Analytics, cookies and ads
The site uses one strictly necessary sign-in cookie for confirmed players and no analytics, advertising or tracking cookies. See the cookie notice. If that changes, we'll update this notice and ask for consent where required before anything non-essential runs.
Battle mode
To play Battle you choose a gamer tag; no email or account is needed. We store the room (gamer tags, teams, colours, results) and each player's game inputs for that room so the server can verify the result. A random seat key is kept in your browser so you can rejoin after a refresh; we store only a keyed hash of it. Battle rooms and inputs are deleted automatically after about 6 hours. If you rate a battle, we keep the rating and any comment you type (don't include personal details).
Daily reminders (notifications)
If you tap Remind me, your browser gives us a push address (a random URL at Google, Mozilla, Apple or Microsoft) so we can send one reminder a day at the hour you picked, only if you haven't played yet. We store that address, the hour, the last day you played and your streak count. Nothing else, and no name or email is needed. Turn it off from the Play screen or your browser settings; we delete the address then, after 30 days without play, or when your browser revokes it.
Purchases
Buying is optional. In the Android and iOS apps, payments are handled by Google Play or the Apple App Store, and purchase status reaches us through RevenueCat (our in-app purchase provider), linked to an anonymous ID or, if you sign in, your account ID. On the website, payments are handled by Razorpay. We never see or store your card, UPI or bank details. We store what you bought, when, the amount and the payment or order ID, so your items work on every device and for tax and accounting. If you delete your account, your items and profile are erased; the bare payment record (order ID, item, amount, date, without your email) is kept for as long as tax law requires.
AI assistants (ChatGPT, Grok and other MCP apps)
Our MCP server lets AI assistants read public game information: today's Daily Arena and twist, the public leaderboard names and scores, level targets, rules, guides and public challenge details. It requires no account, reads no cookies and collects no personal data from the assistant or its users. We keep only short-lived, hashed IP counters for rate limiting, like the rest of the site. What you type into an assistant is handled by that assistant's provider under its own privacy policy; we receive only the tool request (for example “level 7”).
How long we keep it
- Unconfirmed early-access requests: deleted automatically after 90 days.
- Confirmed requests: until 24 months after public launch, or sooner if you ask us to delete them.
- Campus Clash interest: up to 24 months, or sooner on request.
- Email delivery records: 90 days. Rate-limit records: about two hours.
- Sign-in sessions: 30 days. One-time sign-in links: 15 minutes.
- Gameplay data and feedback: deleted with your early-access record, or when playtest data is reset before public launch.
Deleting your account
You can delete your account at any time, in the app or on the web: Your account → Delete my account (instant when signed in), or request a deletion link by email. Deletion removes your account and all linked game data immediately; provider backups expire within 30 days.
Your rights
You can ask to access, correct or delete your data, withdraw consent, or raise a grievance. Email support@onemoregame.me from the address concerned with “Privacy request” in the subject. We'll respond within 30 days. You may also have the right to complain to your data protection authority, such as the Data Protection Board of India.
Children
Early access is for people aged 18 and over, or a parent or guardian requesting for a child. We don't knowingly collect data from children without parental involvement. If you think a child has submitted data, contact us and we'll delete it.
Security
Data is stored in a database that browsers can't read directly; all access goes through our server. Confirmation and invitation links are random, single-purpose and stored only as one-way hashes. No system is perfectly secure, and we'll notify affected people and authorities of a breach as the law requires.
Changes
We'll update this page when our practices change and note the date below.
Last updated 2026-11-08.
This document describes how the site works today. It is maintained by Kartikeya Mishra and has not yet been reviewed by a lawyer; questions are welcome at support@onemoregame.me.