Privacy policy

What we collect

If you play without an account, we know nothing about you beyond an internal id for the current round.

• Your email address — when you sign in with Google or through a link we mail you.
• Your name and picture from Google — only if you sign in with Google. The name becomes your nickname and you can change it.
• Your nickname — what other players see on the leaderboard and in duels.
• Game statistics — characters guessed, streaks, attempts, duel and challenge results.
• Technical records — round timestamps and internal ids, so the game remembers an unfinished round.

What we do not collect

We never ask for or store passwords: you sign in with Google or a one-time link. We collect no phone numbers, no addresses, no payment details, and we run no advertising trackers.

Cookies

Technical only. One holds your session after signing in, the other a temporary id if you play without an account. There are no advertising or tracking cookies.

Who else handles the data

Each service sees only what it needs to do its job.

• Vercel — serves the site.
• Railway — runs the backend.
• MongoDB Atlas — stores accounts and statistics.
• Cloudflare — domain, DNS and image storage.
• Resend — sends the sign-in emails.
• Google — if you chose to sign in with Google.

How long we keep it

Account data and statistics for as long as the account exists. Rounds played without an account are deleted after a week.

Deleting your data

Write to hello@nandaguessr.com from the address the account is registered to and we will delete it along with all statistics. You can also reset just the statistics from your profile.

Children

The game is not meant for children under 13, and we do not knowingly collect their data.

Changes and contact

If this policy changes we will update the date at the top. Questions go to hello@nandaguessr.com.