Privacy policy

Who is responsible?

Daily Tile Battle at https://dailytilebattle.site is operated by CHANGCHEN LIU. Contact liuchangchen1@gmail.com for privacy questions and requests.

Information used to run the game

You do not need to provide a name, email address, password, birth date, or precise location to play. The game creates an anonymous browser identifier and records your selected state team, puzzle dates, game sessions, moves counted in a completed run, completion status, timing, verified contributions, tool credits, and gameplay events.

Your selected U.S. state is a team label you choose, not a GPS reading or verified residence. The server checks submitted move sequences to verify results. Anonymous identifiers and game activity may still be personal data under applicable law.

For abuse prevention, the application derives a keyed hash from the network address supplied by its hosting proxy. Its rate-limit table stores that hash, the action, time window, and count. Hosting providers may process IP addresses and technical request information in their own operational logs.

Cookies and browser storage

The essential dtb_player cookie is signed and HttpOnly. It connects requests to your browser's player record and can last up to one year. Browser storage also holds an anonymous player identifier and local preferences. A separate, short-lived cookie protects the operator's internal metrics page.

These features support identity, fair scoring, preferences, and security. You can clear this site's cookies and local storage in your browser. Clearing browser storage does not itself delete server records and can prevent the game from recognizing your previous profile.

Purposes and service providers

We use gameplay records to provide the game, verify results, maintain the leaderboard, deliver tool credits, understand aggregate game usage, and prevent abuse. Public State Battle results are aggregated by team; the site does not publish individual browser identifiers.

The service uses Vercel for hosting and Supabase for database services. They process technical information needed to operate the service. Data may be processed outside your country, including in the United States. See the Vercel privacy policy and Supabase privacy policy.

Advertising and privacy choices

Rewarded advertising is currently disabled. The game does not load its Google advertising library while that launch switch is off.

Before advertising is activated, the operator must complete the selected provider's approval and audience-appropriate privacy and consent setup. The intended audience includes children, so adult personalized advertising must not be enabled by default. A button agreeing to watch an ad is not a substitute for any separate data-consent requirements.

When advertising is active, the provider may process technical request information and identifiers according to the applicable consent choices and settings. We may record ad loading, display, close, reward-signal, error, and issued-credit events tied to a game session. These records are operational diagnostics, not proof of advertising income. See how Google uses information from partner sites and our advertising explanation.

Children and families

The game is intended for all ages worldwide. Parents and guardians should supervise younger players. We do not ask children to submit names, email addresses, birth dates, or precise location to play, and we do not operate a public chat or player-upload feature.

Advertising remains subject to appropriate child-directed treatment, provider restrictions, and any consent or parental-authorization requirements that apply. A parent or guardian may contact the operator about a child's data. Please avoid sending unnecessary information about a child in your initial message.

Retention and your requests

Server records are retained for gameplay history, scoring integrity, security, and service operation while reasonably needed for those purposes. Cookie expiration or clearing local storage does not automatically remove those records. We do not currently offer an automatic account-deletion control.

Depending on the rules applicable to you, you may have rights concerning access, correction, deletion, objection, or consent withdrawal. Email the operator to make a request. We may need to identify the relevant anonymous record and confirm that a request concerns your data before acting.

Changes and contact

We may update this page as the service changes, including before introducing new advertising or data features. The date above identifies the latest published version. For questions, use the contact page.