Privacy policy
Last updated: 20 October 2026
Daily Apex is run by [your name or business name], based in the United Kingdom ("we", "us"). This policy explains what information the game collects, why, and the choices you have. If you have any questions, email [your contact email].
The short version
- You can play without an account. Your progress is saved only in your own browser.
- If you create an account, we store your email address, your username and your lap times.
- Your username and lap times are public on the leaderboards. Your email address never is.
- We don't sell your personal information.
- You can delete your account, and everything linked to it, at any time from My account → Delete my account.
What we collect
| Information | Why | Legal basis (UK GDPR) |
|---|---|---|
| Email address (if you sign up) | To log you in, send you sign-in, confirmation and password-reset emails, and keep your account secure. | Contract: it's needed to provide your account. |
| Password (only if you choose to set one) | To log you in. Supabase stores it only as a secure one-way hash, so nobody, including us, can ever read it. | Contract |
| Username and lap times (if you sign up) | To show the global leaderboards and your past scores. | Contract |
| Game progress stored in your browser: attempts, best laps, ghost replays, streak, sound and cookie settings, sign-in session | So the game remembers where you are. This stays on your device; only the laps of signed-in players are sent to us. | Strictly necessary, so no consent is needed |
| Technical data: IP address, browser type, and pages requested, recorded automatically by our hosting and service providers | To deliver the website, and to keep it secure and working. | Legitimate interests |
| Advertising cookies and identifiers (only if ads are shown and you choose "Accept all") | So our advertising partners can show and measure ads, including personalised ones. | Consent. You can change your choice any time with "Cookie settings" at the bottom of the game. |
Who we share it with
We use these service providers to run the game. They process data on our behalf:
- Supabase: hosts our database and handles sign-in (accounts, usernames, lap times). Region: [your Supabase region, e.g. London / EU West].
- Resend: delivers sign-in emails.
- [Netlify / Cloudflare / GitHub Pages]: hosts the website.
- Google Fonts: supplies the fonts the site uses, which means your browser connects to Google's servers.
- Google AdSense and its partners (once ads are live): show ads. See how Google uses information from sites that use its services.
Some of these providers may process data outside the UK. Where they do, they use legal safeguards such as the UK International Data Transfer Addendum or Standard Contractual Clauses.
Public information
If you have an account, your username and lap times appear on the public leaderboards. Choose a username that doesn't identify you if you'd rather stay anonymous.
How long we keep it
- Your account, username and lap times are kept until you delete your account.
- Deleting your account permanently removes your email address, username and every lap time straight away. Backups held by our providers are overwritten within their normal cycle.
- Progress stored in your browser stays there until you clear it.
Your rights
Under UK data protection law you can ask to access, correct, delete or move your data, object to or restrict how we use it, and withdraw consent at any time. To make a request, email [your contact email]. You can also complain to the Information Commissioner's Office at ico.org.uk.
Children
Daily Apex accounts are not intended for children under 13, and we don't knowingly collect their personal information. If you think a child under 13 has created an account, contact us and we'll delete it.
Changes
If we change this policy, we'll update the date at the top of this page.