Privacy Policy

Account information. When you register, we collect your email address and, if you sign in with Google, basic profile information shared by Google (name, email, profile photo). We do not see or store your Google password.

Public profile information. Your display name, avatar, country code, current level, streak, and total score are stored and displayed publicly on leaderboards and profile pages, since this is core to how the game works.

Gameplay data. We collect data generated by playing the game: round results, scores, correct/incorrect answers, time taken per turn, hint usage, and a record of recently played facts (used only to avoid repeating the same fact to you too often).

Technical and usage data. Like most web services, we automatically collect technical information such as IP address, browser type, device type, and basic usage logs, typically gathered by our hosting infrastructure for security and reliability purposes.

Cookies. We use essential cookies to keep you signed in and maintain your session. If we add analytics or marketing tools in the future, this section will be updated to describe any additional cookies and your choices regarding them.

Payment information (future). If and when premium subscriptions or content packs become available, payments will be handled by a third-party payment processor [Payment Processor Name — TBD]. We will receive confirmation of payment and a subscription status, but we will not directly receive or store your full card number.

We use the information above to:

• Create and maintain your account and game progress.
• Operate core features: scoring, leaderboards, streaks, hint tokens, and the daily challenge.
• Communicate with you about your account, the Service, or changes to these policies.
• Maintain the security and integrity of the Service (for example, detecting abuse or cheating).
• Process payments, if and when paid features are introduced.
• Improve the Service, including understanding which content and features are used.

Where the GDPR or a similar law applies to you, we process your information on the following bases: performance of a contract (providing the Service you signed up for), legitimate interests (security, improving the Service), consent (where required, e.g. for optional cookies), and legal obligation (e.g. tax records for payments). Under the Law of Georgia on Personal Data Protection, we process data on comparable grounds, including your consent and the necessity of processing to perform our agreement with you.

To be clear about visibility:

• Public: display name, avatar, country code, current level, streak, total score, and leaderboard rank.
• Private (visible only to you and to us): email address, detailed round-by-round statistics, hint token balance, recently played facts, and any payment/subscription status.

If you do not want your name or image visible to other players, do not use identifying information as your display name or avatar.

We do not sell your personal information. We share information only with:

• Service providers who process data on our behalf to operate the Service, including Supabase (database hosting and authentication) and Google (if you use Google sign-in). When premium features launch, this will include a payment processor.
• Legal authorities, if required to comply with a legal obligation, court order, or governmental request.
• A successor entity, if we are involved in a merger, acquisition, or sale of assets, subject to the same protections described here.

Service providers are only permitted to use your data to provide services to us, not for their own independent purposes.

Our infrastructure (Supabase, and our hosting provider) may store or process data in countries other than your own, including outside Georgia and outside the European Economic Area. Where required, we rely on appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) for these transfers.

We retain your account and gameplay data for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where we are required to retain certain records (for example, transaction records) for legal or accounting purposes.

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Request deletion of your account and associated personal data.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable format.
• Withdraw consent, where processing is based on consent.

To exercise any of these rights, contact us at berulava@gmail.com. We may need to verify your identity before fulfilling a request.

Eons is not directed at children under 13, and we do not knowingly collect personal information from children under that age. If you believe a child under 13 has created an account, contact us at berulava@gmail.com and we will take steps to delete the associated data. Users between 13 and the age of majority in their country should have a parent or guardian's involvement, particularly before making any purchase.

We use reasonable technical and organizational measures to protect your information, including encryption in transit, row-level security policies on our database, and access controls limiting who can view sensitive data. No system is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. If changes are material, we will provide reasonable notice before they take effect, such as via email or an in-Service notice. The "Last Updated" date at the top of this page reflects the most recent revision.

For privacy questions or to exercise your rights, contact us at berulava@gmail.com.