Privacy policy
Last updated 27 October 2026
This policy explains how this site handles information when you visit, play as a guest, or create an optional account. It matches how the product works today. It is product documentation, not legal advice.
Who this policy covers
This policy applies to this website and the games offered on it, including Odd One Out and Fix This Idiot. It covers guest play and optional accounts. If new features collect different information, this page will be updated before that collection begins.
The short version
- You can play as a guest without creating an account.
- Optional accounts store an email address, a public username, and an optional avatar URL with the database used to run the site. You can also sign in with an outside account.
- Essential cookies keep login sessions and remember your cookie choice. This build does not run advertising or analytics cookies.
- Your latest Odd One Out result can stay in your browser for that visit. That result is not uploaded to the site’s servers.
- Personal information is not sold.
Information the site handles
What is handled depends on how you use the site.
Guest play
You can open games and play without signing up. Guest play does not require a name, email address, or profile. After a round of Odd One Out, your browser may keep the latest result in session storage so the results page can show it. That can include the level reached, score, win or loss, a short verdict, and which face was the odd one. That information stays on your device for the browser session. Closing the tab or clearing site data removes it. A copy of that result is not received by the site.
Accounts
If you create an account, the site processes:
- Email address and password. Sign-in is handled by an authentication provider. The app does not store your password in plaintext.
- Outside sign-in. If you choose to sign in with an external account, that provider handles the sign-in. The site stores the email, display name, and profile photo URL that provider sends.
- Username. Usernames are stored in a public profiles table and are readable by others. Outside sign-ups get a generated username you can change later.
- Optional avatar URL, if you set one or if the outside provider sends a photo. Profile rows also include an account id and creation time.
Password reset and related auth mail are sent through the authentication provider using the email on the account.
Sharing and contact
Sharing a game result uses tools on your device — a share sheet, the clipboard, or your email app. Those messages are not received by the site. The contact form is a visual shell and does not send messages yet. When it does, this policy will describe what is collected and how long it is kept.
Cookies and similar technology
Cookies and similar storage help the site run. You choose a cookie preference the first time you visit (except on this page and the terms page, which stay readable so you can decide). You can change that choice later with Cookie settings in the footer.
| Name / type | Purpose | Duration |
|---|---|---|
| oddfun_consent | Stores your cookie choice (accept all or essential only). Strictly necessary. | About 6 months |
| Sign-in cookies | Keep you signed in when you use an account. Strictly necessary for login. | Session / as set by the authentication provider |
| sessionStorage (Odd One Out last run) | Shows your latest result on the results page. Stays on your device. Not a cookie. | Until the tab session ends |
| Analytics / advertising | Not used in this build. If they are added later, consent will be requested first and this table will be updated. | — |
Accept all and Essential only unlock the same features today, because there are no optional tracking cookies yet. The stored choice is what any future non-essential script must check before it runs. Essential cookies still work either way.
Why information is used
Information is used for these purposes:
- Creating and signing into an account, resetting a password, and showing your public profile — steps you ask for when you use those features.
- Delivering the site, keeping it secure, and fixing outages — including standard hosting logs — so the site can stay reliable.
- Remembering your cookie preference — as a necessary step to respect that choice.
- Any future non-essential cookies or similar technology — only with your consent, which you can withdraw through Cookie settings.
The site does not use automated decision-making that produces legal or similarly significant effects about you, and it does not build advertising profiles from play.
Who receives information
Outside services help the site run. Today that includes:
- An authentication and database provider — accounts, public profiles, and auth-related email such as password reset.
- An external sign-in provider — only if you sign in with an outside account. That provider receives the sign-in request and returns the email, name, and photo used to create or open the account on this site.
- The host — standard technical logs such as IP address, browser type, and the page requested, so the site can be delivered and kept reliable. Those logs are not used to build player profiles.
- A transactional email sender prepared for later use. The public contact form does not send mail yet, and signup mail goes through the authentication provider, not that contact form.
Personal information is not sold, rented, or traded. Information may be disclosed if the law requires it, or to protect the site and its users from abuse or harm.
International transfers
Providers may process information on servers outside your country. A specific processing region is not listed on this page.
How long information is kept
- Account data (email, username, avatar URL, profile id) stays until you delete the account or the account is closed under the terms.
- Auth session cookies last for the period set by the authentication provider or until you sign out.
- The cookie preference cookie lasts about six months, or until you clear it or change your choice.
- Odd One Out session results stay in the browser until the tab session ends or you clear site data.
- Hosting logs are kept by the host according to its own retention practices for security and reliability.
Security
Sign-in and hosting use common industry providers, account traffic is sent over HTTPS, and profile data sits behind row-level access rules. No method of transmission or storage is completely secure. Keep your password private. Use the contact page if you believe an account has been compromised.
Your rights
Depending on where you live — including the EEA, the UK, and similar regimes — you may have the right to:
- access the personal information held about you;
- correct inaccurate information;
- ask for information to be deleted;
- restrict or object to certain processing;
- receive a portable copy of information you provided;
- withdraw cookie consent at any time without affecting earlier lawful use;
- lodge a complaint with a supervisory authority in your country.
You can change cookie preferences with Cookie settings in the site footer. You can clear on-device game results by closing the tab or clearing site data. For account access, correction, or deletion requests, use the contact page. Mail delivery there is not connected yet, so a reply may take longer. A request may need a check that it comes from the account holder.
Children
The site is general entertainment. It is not a school product and it is not directed at collecting personal information from children. Creating an account is for people who are at least 16 years old. An account that belongs to a younger child is not kept on purpose. If you believe such an account exists, use the contact page and steps will be taken to remove it.
What may change later
Saved scores, leaderboards, broader email features, and privacy-conscious analytics may be added later. If new categories of information are collected, or if non-essential cookies are introduced, this policy will be updated first and, where required, consent will be requested before those cookies run.
Changes to this policy
This page may be updated as the product changes. The date at the top will change when that happens. The current version is always the one published at /privacy. If a change is material, reasonable steps will be taken to make it noticeable on the site.
Contact
Questions about this policy can go through the contact page. Mail delivery is not connected yet. See also the terms and conditions.
