At a Glance
Identity & Scope
This policy covers the Type Slayer game operated by Deruvish Labs LLC (Wyoming, USA). Questions: contact@deruvishlabs.com.
Data We Collect
Account & identity
- Email and password (hashed by Supabase)
- OAuth provider info (Google)
- Nickname, avatar, premium/bot/rank status
Gameplay & performance
- Score, level, MMR, rank progression
- Correct/incorrect keystrokes, CPM, combos, enemies defeated
- Matchmaking and match history (opponent, score, duration, language)
- Keyboard mistake logs (expected/typed character and counters)
Payments & billing
- Amount, currency, transaction ID, premium/plan type
- Success/failure state, renewal info (if subscriptions are offered)
- Card data is processed by Stripe; we do not store card numbers
Ads & promotions
- Ad views, daily/total counters, reward amounts
- Ad type (interstitial/rewarded), completion status
- Google AdSense may collect browsing data for personalized ads
Device & technical
- IP-based country lookup (ipapi.co), language preference, browser language
- Session/token info (Supabase), socket connection identifiers
- Server logs for errors and security
Preferences
- Local storage:
supabase.auth.token,preferred-locale,leaders-language-filter,rememberedEmail - In-game sound/payment/promo preferences (if set)
How We Use Data
- Service delivery: authentication, session management, real-time play via sockets, language choices.
- Game mechanics: scores, levels, MMR, leaderboards, anti-cheat checks.
- Payments: activating premium access, verifying payments, keeping financial records.
- Ads/rewards: checking ad requirements, issuing rewards/gold, enforcing daily limits.
- Security: abuse prevention, anti-cheat, unauthorized access and spam detection.
- Support and notices: account actions, error notifications, legal notices.
- Compliance: tax/billing records, responding to lawful requests.
Sharing & Recipients
- Supabase (US/EU regions): authentication, database, edge functions.
- Socket server (typeslayer.io): matchmaking, scoring, real-time play.
- Stripe (or similar): payment processing; card data handled only by the provider.
- ipapi.co: IP-based country/language lookup.
- Google AdSense: ad serving, view/reward logging. See Google Privacy Policy.
- Legal requirements: court/law enforcement requests or fraud prevention.
- Corporate events: succession in a merger or acquisition.
We do not store sensitive payment data such as full card numbers or CVV.
Cookies & Local Storage
- Supabase sessions are stored in localStorage; cleared when you sign out or clear browser data.
- Preference storage: language, leaderboard filters, “remember me” email, cookie consent choice.
- Google AdSense: may set cookies for ad personalization and measurement. See How Google uses cookies in advertising.
- Stripe: may set cookies during the checkout process.
You can manage your preferences via the cookie consent banner shown on your first visit. You may also block or delete cookies in your browser settings; login, payments, and ads may not function without them.
Retention
- Account data: kept while your account is active; deleted on request unless legally required.
- Gameplay stats and ad records: retained as needed for service functionality; may be anonymized.
- Billing/payment records: kept at least 5 years for tax and dispute purposes.
- Logs and security records: typically up to 12 months.
Security
- Supabase auth, role-based access, password hashing, TLS in transit.
- Restricted database access; service keys kept secret.
- Critical flows (payments, premium grants, MMR updates) validated server-side.
- Backup/continuity plans for outages or third-party incidents.
Your Rights & Choices
- Access and correction: via your account or by contacting us.
- Deletion: email contact@deruvishlabs.com to request account/data deletion (billing records may be retained where legally required).
- Objection/limitation: contact us for nickname or leaderboard visibility concerns.
- Children: we do not knowingly allow users under 13; we close accounts if identified.
We will address requests from California, EU/EEA, UK and similar jurisdictions in line with applicable laws.
International Transfers
Data may be transferred to our U.S. systems and Supabase regional infrastructure. By using the service you consent to transfers to the United States.
Updates
We will update the date at the top when this notice changes. Material changes will be communicated through reasonable means.
Contact
Privacy questions, complaints or requests:
- Email: contact@deruvishlabs.com
- Address: Deruvish Labs LLC, 30 N Gould St Ste R Sheridan, WY 82801 USA