Privacy Policy

Last updated: 2 August 2026

What we collect

PlayMemorize operates in two modes:

• Without an account (default): You don't give us your email or any account identity. We do record privacy-respecting usage analytics · see “Usage analytics” below · and your game progress is saved in your browser.
• With an account (optional): When you sign in with your email address, we store your email and a unique account identifier on our servers and sync your progress across devices. We do not store passwords · authentication uses a one-time 6-digit code sent to your email.

We also process two things you start yourself:

• Feedback reports. If you send feedback, we store your note and · only when you agree to it · a picture of your screen at that moment.
• Experiments. We record which variant of a test your browser saw, so a result is readable.

We do not collect payment information, precise GPS location, or social media profiles.

Usage analytics

To understand how the games are used and to keep the site reliable, we record analytics events. When you accept the consent banner, or when a page needs to save your progress, we create an anonymous identifier (held in a cookie and in your browser storage) so we can count returning players without knowing who you are. If you refuse, no analytics beacon is installed and no anonymous identifier is created for analytics. For each visit and game round we record coarse, non-identifying technical context:

• Approximate country and region, derived from your IP address by our hosting provider. We use this to compare engagement across countries; we do not store your full IP address in our analytics tables.
• Device category (mobile / tablet / desktop), operating-system family and browser family, screen/viewport size, timezone, and language.
• Referrer and any UTM campaign tags in the link you arrived from.
• Game-round outcomes: which game, score, duration, difficulty, and streak.

Two legal bases apply. Page views, performance metrics, and error reports load only after you accept the consent banner, so the basis is your consent · they are never collected before you accept, and the browser signals GPC and Do Not Track count as a refusal. Game-round outcomes for a signed-in account are part of the service you asked for (your stats, your badges, the leaderboard), so the basis is our legitimate interest, and they continue while you are signed in. Google Analytics 4 also loads only after you accept (see below). You can change your choice at any time with the Cookie Settings link in the footer.

Account data

If you create an account, we store:

• Your email address (used to identify your account and send authentication codes).
• Account creation date and last login date.
• A session token in an httpOnly cookie on your device, used to keep you signed in for up to 90 days.

Account data is stored on Netlify's infrastructure. You can delete your account at any time using the “Delete account” button on your /me page, or by emailing hello@playmemorize.com.

Authentication emails

When you request a sign-in code, your email address is passed to Resend (our email delivery provider) to deliver the code. We do not send you marketing unless you ask for it.

Marketing email (optional)

On your /me page you can choose “Ads in Inbox”. That choice subscribes your email address to our newsletter, and it suppresses display advertisements for your account. The legal basis is your consent, and we record each grant and each withdrawal. You can go back to “Ads on Site” at any time on the same page · that unsubscribes you immediately. We do not sell or rent your email address.

Your practice progress

Detailed game progress, streaks, and settings are saved to your browser's localStorage. This detailed data stays on your device unless you sign in, in which case it syncs to your account so it follows you across devices. (The coarse round outcomes described under “Usage analytics” reach our servers only while you have a session · anonymous or signed in. Without one they stay on your device.)

Data retention

Account data (email, account identifier, dates) is kept while your account exists. Everything else is deleted on a rolling schedule by a nightly job:

• Page views and performance metrics · 90 days.
• Error reports · 365 days.
• Game-round events · 400 days. Daily totals that identify nobody live on.
• Feedback reports, and any screenshot attached to them · 180 days.
• Experiment and feature-flag records · 30 days.
• Consent records · kept for as long as we must be able to prove your choice.

When you delete your account, we mark it deleted at once and remove it from every page and every ranking. A job hard-deletes the rows 30 days later. You can delete your account and all associated data yourself on the /me page, or email hello@playmemorize.com if you prefer.

You can download a copy of everything we hold, on the /me page. You do not need an account for that · the download follows your session, so an anonymous visitor gets their own data too. To delete does need an account, because we must know the request comes from you and not from another person on the same device. Without an account you can clear your browser storage, and the rest expires on the schedule above. Email us if you want help.

Cookies

If you sign in, we set a short-lived code-verification cookie (it expires in 15 minutes), a session cookie pm_session and a companion hint cookie pm_sh (both expire in 90 days). These keep you signed in and are never used for advertising or cross-site tracking. Google Analytics sets its own cookies, but only after you accept. We also keep a small number of items in your browser storage · your consent choice, your local game progress, and your favourite games. The Cookie Policy lists every one of them with its lifetime.

Google Analytics

We use Google Analytics 4 (GA4) to understand aggregate usage: which games are played, how often pages are visited, and which countries users come from. Google Analytics sets cookies and collects data including your IP address, browser type, and pages visited. Google Analytics 4 does not store the IP address · it uses it to derive a coarse location and then discards it. This data is processed by Google under their own privacy policy.

Google Analytics loads only after you accept the consent banner. To turn it off again, use the Cookie Settings link in the footer and choose “No thanks”. You can also install the Google Analytics Opt-out Browser Add-on.

Service workers and caching

PlayMemorize registers a service worker to enable offline use and fast loading. The service worker caches app files locally on your device. No personal data is included in this cache.

Third-party services

• Google Analytics 4 · aggregate usage statistics.
• Netlify · hosting and serverless infrastructure.
• Resend · email delivery for authentication codes.

We use no advertising network, no social media pixel, and no affiliate link. If that changes, we will update this page and the Cookie Policy before the change goes live.

Children

PlayMemorize is suitable for all ages. If you are under the age of digital consent in your country, please do not create an account without parental consent. Contact us to delete any account created without consent.

Changes to this policy

If this policy changes in a material way we will update the date at the top of this page. Continued use of the site after any change constitutes acceptance of the updated policy.

Contact

Questions about this policy? Email us at hello@playmemorize.com.