Privacy Policy

HSKetch is a multiplayer drawing game for learning Chinese vocabulary, operated as a personal project. This Privacy Policy describes how we handle information about you when you use the web app at hsketch.vercel.app and related services.

Questions about this policy can be sent to official.lahlou@gmail.com.

We collect only the information needed to run the game:

• Account information. If you sign in, we receive your email address (via magic-link sign-in) or your Google account email and basic profile (via Google OAuth). Authentication is handled by Supabase.
• Display name. The in-game alias you choose. Visible to other players in rooms you join.
• Gameplay data. Words you save to flashcards, your spaced-repetition review history, XP earned, and a record of completed game sessions.
• Ephemeral session data. While a game is active, your drawings, chat messages, and guesses are transmitted in real time to other players in the same room. This data is not persisted after the round ends.
• Error reports. When the app encounters an error, technical details (stack trace, browser, page URL) are sent to Sentry to help us fix bugs.
• Cookies. We use cookies only as needed for authentication. Signing in sets a Supabase session cookie so you stay logged in.

We do not use advertising trackers, analytics services that profile individuals, or third-party social-media pixels.

• To create and maintain your account.
• To match you with other players, host live game rooms, and persist your saved flashcards and review schedule.
• To diagnose and fix bugs reported through Sentry.
• To enforce our Terms of Service (for example, in response to reports of abuse).

We do not sell your information. We share data only with the service providers that make the app run:

• Supabase — hosts our database and handles authentication. Your account and gameplay data live here.
• Vercel — hosts the web frontend.
• Cloudflare (Partykit) — runs the realtime game-room servers.
• Google — only if you choose to sign in with Google OAuth.
• Sentry — receives error reports.

We may disclose information when legally required (for example, in response to a valid subpoena).

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you. To exercise these rights, email official.lahlou@gmail.com from the address associated with your account and we will respond within a reasonable time.

You can delete your saved flashcards at any time from the home page. To delete your entire account, contact us at the address above.

We retain your account data and saved flashcards for as long as your account is active. Game-session records (scores, XP earned) are kept indefinitely so they can drive your XP progression. If you request account deletion, we remove your personal data within 30 days, except where retention is required by law.

HSKetch is not directed at children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

We may update this policy as the app evolves. The “Last updated” date above reflects the most recent revision. Significant changes will be communicated through the app.