Privacy Policy
Snake League ("we", "us") is a competitive Snake game available at snakeleague.app and as a mobile app. This policy explains what data we collect, why, and the choices you have. We collect as little as we can while still running leaderboards, leagues, friends and fair play.
1. Data we collect
| Data | Why |
|---|---|
| Anonymous player ID created on first launch | So your scores, settings and progress persist without an account. |
| Username you choose | Shown on leaderboards, leagues, friend lists and challenge links. Public. |
| Email address (optional) | Only if you save your account or sign in by email. Used to send sign-in codes and keep your account across devices. |
| Google account details (optional): email, name, profile picture | Only if you choose "Continue with Google". Used to identify your account. We do not post to or read anything else from your Google account. |
| Profile photo (optional) | If you upload one it is shown next to your username to other players. Public. |
| Gameplay data: scores, run lengths, input replays, mode, timestamps | Leaderboards, leagues, ghost races, challenges, and replay verification to stop cheating. |
| Friends and duels: who you add, challenge or play against | To run the social features you use. |
| Voice chat records: that a call happened, with whom and when. Never the audio itself. | To connect the call and to stop somebody ringing you over and over. See section 5. |
| Online status: when you were last using the game, and whether you are in a run or a duel | So friends can see who is around to play or talk to. Visible to your friends only, and you can switch it off. |
| Device and usage data: device type, OS, app version, screen size, coarse country, crash reports, feature usage events | To keep the game working, fix bugs and understand which features are used. |
| Advertising ID (mobile apps only) | Used by Google AdMob to show and measure ads in the free version. See section 4. |
| Purchase records | If you buy Snake League Pro, payment is handled by Stripe on the web or by Google Play / the App Store in the apps. We only store that your account owns Pro and the payment reference. |
2. What we do not collect
- No precise location.
- No contacts, no camera, no photos other than a profile picture you choose to upload.
- No recordings. Voice chat is live only: we never record, store or listen to it. See section 5.
- No payment card details. Purchases go through Stripe (web), Google Play or the App Store.
- We do not sell your personal data.
3. Where your data lives
Accounts, scores and replays are stored with Supabase on servers in the European Union (eu-west-1). Sign-in emails are delivered by Resend. The website is hosted by Netlify. Crash reports may be processed by Sentry and product analytics by PostHog. These providers process data on our behalf under their own security commitments.
4. Advertising
The free mobile app shows ads through Google AdMob: an optional rewarded video you can choose to watch to revive in Endless mode, and an occasional full-screen ad between unranked runs. Google may use your device's advertising ID and, where you have consented, show personalised ads. You can reset or limit your advertising ID in your device settings, and you can choose non-personalised ads where a consent prompt is shown. Snake League Pro removes all ads. The web version currently shows no third-party ads.
5. Voice chat
You can talk to a friend during a Live Duel, or by calling them from your friends list. It is off until you start it, it only works between accounts that are friends with each other, and the other person has to accept before anything connects.
- We never hear it. Audio goes directly between the two devices using WebRTC and is encrypted in transit. It does not pass through our servers, and it is never recorded or stored by us or by anyone else.
- When a direct connection cannot be made, the encrypted audio is relayed by Cloudflare's TURN service so the call still works. Cloudflare passes it through; it is not stored.
- We do store that a call was requested, between which accounts and when, so we can ring the right person and limit repeated calls.
- Your microphone is only used while a call is live. Your browser or phone will ask permission first, and you can refuse or withdraw it at any time in your browser or device settings.
- Turn it off entirely in Settings, under "Voice chat in duels".
6. Public information
Your username, profile photo, league placement, scores, ghosts and win/loss records are visible to other players. Do not put personal information in your username or photo. Anything else (email, Google details, device data) is private.
7. How long we keep data
Account data is kept while your account exists. Replays used for verification and ghost races are kept for as long as they are on a leaderboard or linked to a challenge. Anonymous accounts that are never used again may be deleted after 12 months of inactivity. Crash and analytics data is retained for up to 12 months.
8. Your rights and choices
- Delete your account and data: in the app, open Profile and tap Delete account; it is immediate and permanent. Or email support@snakeleague.app from the address on the account (or include your username) and we will delete it within 30 days. Details: snakeleague.app/delete-account.
- Export: ask at the same address and we will send you a copy of your data.
- Correct: you can change your username and photo in the app at any time.
- Voice chat: switch it off in Settings, or simply never accept a call. Your device also controls microphone permission.
- Online status: turn off "Show when I am online" in Settings and friends always see you as offline.
- Ads: buy Pro to remove ads, or limit ad personalisation in your device settings.
- If you are in the UK or EEA you also have the right to object to or restrict processing and to complain to your data protection authority.
9. Children
Snake League is not directed at children under 13 (or the age of digital consent where you live) and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will remove it.
10. Security
Data is encrypted in transit (HTTPS) and at rest with our providers. Database access is restricted by row-level security so players can only read the data the game intends to be shared. Scores are verified server-side by replaying the run.
11. Changes
We will post any changes here and update the effective date. Material changes will be announced in the app.