Privacy Policy

1. Who operates One More

One More is operated by Greg Avola (“we,” “us,” or “our”). This policy applies to the One More website and its game, account, leaderboard, and shared-results features.

For privacy questions or requests about your information, contact us through gregory.avola+onemore@gmail.com.

2. Information we collect

• Guest players: a randomly generated player identifier, a display name, and account creation and update dates. Guest play does not require an email address.
• Google sign-in: Google provides a verified account identifier, name, email, and profile photo as part of authentication. We store the Google identifier, display name, and photo URL with your player record. Authentication also uses an encrypted session cookie. We do not receive your Google password.
• Gameplay: game mode, deck seed, scores, streaks, lives-related results, guesses, banking and Peek statistics, daily attempts, timestamps, and Resurrection token balances and validation history.
• Usage and technical information: page views, gameplay and interface events, browser and device information, referring pages, and approximate location through analytics. Hosting providers may process IP addresses and request or error logs to deliver and protect the service.
• Messages: information you choose to provide when contacting us.

3. How we use information

We use this information to recognize your player, keep you signed in, save and validate games, maintain statistics and token balances, operate daily challenges and leaderboards, respond to requests, prevent abuse, and understand and improve the game.

Signing in may connect your guest game history to your Google-linked player account so your progress can follow you across devices.

4. What other players can see

Leaderboards can show your display name, profile photo, scores, and game statistics. Completed runs have shareable result pages that anyone with the link can view. These pages include your display name, photo, result, game mode, and completion information; previews of shared links may show some of the same information.

Choose a display name you are comfortable making public. Signing out does not remove previously saved scores or shared results. Avoid putting contact details or other sensitive information in your display name.

5. Cookies and browser storage

• Guest identification: the One More guest cookie can last up to one year. Clearing it can remove your ability to access an unlinked guest player.
• Sign-in: authentication cookies support secure Google sign-in. Signed-in sessions are configured to last up to 30 days, with separate short-lived cookies used during authentication.
• Local storage: your browser stores your sound preference and an unfinished game so it can be resumed. Local data can remain until it is replaced, cleared by the app, or removed in your browser settings.
• Offline support: a service worker stores an offline fallback page.
• Analytics: Google Analytics may set or read cookies, including cookies commonly named _ga and _ga_…, to measure visits and interactions.

You can manage cookies and site storage in your browser. Blocking essential storage may affect sign-in or resuming games. Clearing browser storage does not delete records already saved on our servers.

6. Google Analytics

We use Google Analytics 4 to understand visits and actions such as starting a game, making a guess, banking points, using Peek, sharing a score, and using a Resurrection token. Google receives browser and device information, visited URLs, and usage events, and processes network information such as your IP address when your browser contacts its services.

Our custom gameplay events exclude your name, email, profile input text, and player and game identifiers. Google signals and advertising personalization are disabled in our tag configuration. This does not make all analytics data anonymous or stop Google from receiving information needed to provide its service.

Read how Google uses information from sites that use its services and Google’s Privacy Policy. On supported browsers, you can use Google’s Analytics opt-out add-on to prevent collection by its tag. Browser privacy tools may also block analytics.

7. Sharing and service providers

Information is processed by providers that support hosting, databases, authentication, and analytics. Google processes information for Google sign-in and Google Analytics under its applicable terms and policies. We may also disclose information when required by law, to respond to lawful requests, or to protect the service and its users.

Providers may process information in countries other than yours. Their handling and retention of information are also subject to their own terms, settings, and legal obligations.

8. Retention and security

Player records and game history are retained to maintain your account, statistics, leaderboards, and game integrity. There is currently no automatic expiry period for these records. You can request deletion using the contact details below. Limited information may need to be retained for legal requirements, security, or resolving disputes, and backup copies may remain until the provider’s backup cycle expires.

Analytics retention depends on the Google Analytics property’s settings and Google’s policies. Cookies and local storage have the lifetimes described above.

We use measures such as HTTPS in production, protected session cookies, and server-side score validation. No internet service or storage system can be guaranteed completely secure.

9. Your choices and requests

You can play as a guest, edit your display name in your profile, sign out of Google, manage browser storage, and use analytics blocking tools. To request access, correction, or deletion of server-held information, contact us through gregory.avola+onemore@gmail.com. We may need to verify that the player account belongs to you. For a guest player, contact us before clearing its identifying cookie if you want help locating your records.

Depending on where you live and which laws apply, you may also have rights to portability, restriction, objection, withdrawal of consent where processing relies on consent, and a complaint to your local data protection authority. We will handle requests as required by applicable law.

10. Children and policy changes

One More is not intended for children under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and address it.

We may update this policy as the service changes. The date at the top identifies the latest version. We will provide additional notice of material changes when required. Our Terms of Service explain the rules for using One More.