Privacy Policy

Who is responsible

Norman Yang operates N1GHTMARE and is the contact for information handled by the game. For privacy questions or requests, email norman.tmy@gmail.com.

Guest play and browser storage

Guest play does not require an account. Your characters, completed questions, mistakes, XP, equipment, and checkpoints are saved on your device using browser storage. The browser also stores settings, cached question packs, and information needed to recover interrupted saves. Signing in can also leave a local copy of confirmed cloud progress.

Clearing this site’s browser data removes local saves and preferences. It does not delete an existing cloud account. Guest progress stays local unless you choose to transfer it after sign-in. Loading the website still sends ordinary connection requests to its hosting providers, even when you play as a guest.

When you sign in or use cloud features

• Sign-in information. Google and Firebase Authentication handle your account identity, which may include your email address, name, profile image, and a unique account identifier. N1GHTMARE does not receive your Google password or request access to your Gmail messages or contacts.
• Profile and progress. We store your chosen display name, optional country or region, character appearance, learning history, game progress, rewards, checkpoints, and eligible ranking results to provide account features.
• Social information. Friend connections, Covenant membership and roles, and invitation records are stored when you use those features.
• Technical information. Hosting, authentication, and security providers may process IP addresses, browser information, request logs, and security tokens to deliver the service, diagnose failures, and prevent abuse.
• Support messages. If you email us, your email address and the information you include are processed in the support inbox to respond to your request.

We use this information to provide the features you request, maintain saves, administer rankings and social connections, respond to you, and protect the service. Country or region is selected by you; the game does not request your device’s precise location.

What other people can see

Your public display name, representative character appearance, selected country or region, and scores may appear in rankings, invitations, and social screens. Covenant names, membership, and combined scores are shown where needed for those features. Your Google email address and private save history are not part of the public profile.

Invitation links can be used by anyone you share them with until they expire or are revoked. Public information may be seen or copied by others, so choose names you are comfortable making visible. Cached ranking and social screens may take time to reflect changes.

Service providers and browser technologies

Google Firebase provides authentication, cloud data storage, and server functions. Firebase App Check and Google reCAPTCHA can be used to protect cloud requests from abuse. Cloudflare provides website and content delivery for hosted versions of the game. These providers may process information in the United States and other countries where they operate.

Browser storage supports saves, preferences, and sign-in. Authentication and security providers may also use their own cookies or storage. This version of the app does not include advertising or marketing analytics SDKs. Blocking storage may prevent saves or sign-in from working.

Read the providers’ notices for their own processing: Firebase privacy information, Google Privacy Policy, Google Terms of Service, and Cloudflare Privacy Policy.

How long information is kept

Local saves remain until you or your browser remove them. Cloud account data, progress, ranking history, and certain records that prevent duplicate rewards do not currently have an automatic deletion schedule. You can contact us to request their deletion.

Temporary server records have shorter lifetimes: ordinary save-recovery records are scheduled to expire after 30 days, invitations normally expire after seven days, and temporary ranking and social caches expire sooner. Expiry is not a promise of immediate removal from all systems. Security records, limited records needed to prevent repeated imports, and provider backups may remain longer.

Your choices and requests

You can play as a guest, leave country or region unset, edit your public identity, remove friends, leave a Covenant, revoke your invitations, or sign out. Signing out does not delete your cloud account or progress.

To request access, correction, a copy, or deletion of your account information, email norman.tmy@gmail.com. Account deletion is currently handled by email, not by an in-game deletion button. We may need to verify that the account belongs to you. We will explain any information that must be retained for security or legal reasons. We cannot retrieve guest saves that exist only on your device.

If you are a parent or guardian with a concern about a child’s information, please contact us through the same address. Do not send passwords or sign-in codes.

Updates

We may update this policy when features or data practices change. The date above identifies the current version. Questions about a change can be sent to Norman Yang through the Contact page.