1. Introduction
PopBluff (“we”, “us”, or “our”) operates the website popbluff.com. This Privacy Policy explains how we collect, use, and safeguard your information when you visit or use our service. By using PopBluff you agree to the practices described here.
2. Information We Collect
Account data. When you sign up we collect your email address and, if you use Google Sign-In, your Google profile name and avatar URL. We do not receive your Google password.
Game data. We record the answers you submit, time spent per question, round scores, streaks, and rank. This data is used to calculate your stats and leaderboard position.
Usage data. We may collect standard web server logs (IP address, browser type, pages visited) for security and performance monitoring. We do not use third-party analytics trackers.
3. How We Use Your Information
- To operate and improve the PopBluff service
- To calculate scores, streaks, and leaderboard rankings
- To send transactional emails (e.g. account confirmation)
- To detect and prevent abuse or fraud
We do not sell your personal data to third parties.
4. Data Storage and Security
Your data is stored in Supabase (hosted on AWS). We use industry-standard encryption in transit (HTTPS/TLS) and at rest. Authentication tokens are stored in httpOnly cookies to prevent JavaScript access.
5. Cookies
We use the following cookies:
supabase-auth-token — stores your authentication session. Required for login to work.
admin_key — admin session cookie, only set for admin users.
We do not use advertising or tracking cookies.
6. Third-Party Services
- Supabase — authentication and database
- Vercel — web hosting and edge delivery
- Cloudflare Workers — API hosting
- Google OAuth — optional sign-in method
Each service operates under its own privacy policy.
7. Data Retention
We retain your account and game data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us at
hello@popbluff.com.
8. Children's Privacy
PopBluff is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.
9. Your Rights
Depending on your jurisdiction you may have the right to access, correct, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at
hello@popbluff.com.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the “Last updated” date above. Continued use of PopBluff after changes constitutes acceptance of the revised policy.