Data Protection

Last updated: June 2025

This page describes the personal data RankTheGame holds, the legal basis for processing it, and the rights available to you under applicable data protection law (including GDPR where applicable).

Data Controller

RankTheGame is operated as a personal project. For data protection enquiries, contact:

Data We Hold About You

Account Information

Your email address and the date your account was created. If you used Google Sign-In, your Google email is stored.

Session Records

Session start/end timestamps, duration, IP address, and IP-derived country and city. Browser user-agent string.

Usage Events

Records of specific in-app actions: revealing a game score, opening game details, changing filters, and changing the selected date. No freeform text or keystrokes are recorded.

Derived Counters

Aggregate counts of your total sessions and total score reveals, stored against your account for display in the admin dashboard.

Legal Basis for Processing

Your Rights

Right of Access

You may request a copy of all personal data we hold about you.

Right to Rectification

You may request correction of inaccurate personal data.

Right to Erasure

You may request deletion of your account and all associated data. We will action this within 30 days.

Right to Data Portability

You may request an export of your personal data in a machine-readable format (JSON).

Right to Object

You may object to processing based on legitimate interests. We will cease that processing unless we have compelling legitimate grounds.

Data Transfers

Your data is stored on Supabase infrastructure. Supabase operates under standard contractual clauses for international data transfers. See Supabase's Privacy Policy for details.

Retention

Account data is retained while your account is active. Session and event data is retained for up to 12 months. You may request earlier deletion at any time by contacting us.

How to Exercise Your Rights

To make a data subject request, email us at with the subject line "Data Request". Please include the email address associated with your account. We will respond within 30 days.

Complaints

If you are in the EU/EEA and believe we have not handled your data lawfully, you have the right to lodge a complaint with your local supervisory authority.