Privacy Policy

Omnigames ("we", "us") runs the games at omnigamestudio.com. This policy explains what we collect, why, and the choices you have. We keep data collection to the minimum needed to run the games and your account.

1. What we collect

• No account (guest play): game progress is stored only in your browser (local storage). We do not receive it.
• Anonymous account: a randomly generated account id, your display name, game progress, stats, in-game currency balance, and multiplayer match history. No email or real name.
• Full account: everything above plus the email address you provide to sign in.
• Contact form: the name, email, and message you submit so we can reply.
• Push notifications (optional): if you enable them, a browser-provided push subscription token so we can notify you about your turn in a match.
• Technical: our host (Cloudflare) processes standard request data such as IP address for security and to serve the site.
• Usage analytics (our own, not a third party): we record which pages and games are opened, plus a few named actions such as starting a game, making a first move, and finishing a daily. A record holds a random identifier stored in your browser, the game, the action, and the time. When you reach us by following a link, it also holds the host name of the site you came from (for example "example.com"), never the full address of that page. It does not hold your IP address, your device details, or the page address. If your browser sends a Do Not Track signal, we record nothing at all.
• Bug reports (only if you send one): your message, plus the game, our software version, the page address, your screen size, your browser's user-agent string, your account id when signed in, and the last few errors your browser logged. To limit abuse we store a one-way hash of your IP address, never the address itself.
• Play records (signed-in players): what the games need to work across devices: profile and display name, Omnicoin balance and a ledger of changes to it, items you own, match history and the moves within a match, scores and ratings, daily completions and streaks, and hint purchases.
• Friends (only if you use it): your friend code, and a record of who you are friends with, who has asked you, and who you have asked. There is no way to search for a player and no friend suggestions: someone can only send you a request if you gave them your code, and you can change your code at any time to stop old links working.
• Bot protection: when you first play online we use Cloudflare Turnstile to check you are human. It may process limited technical signals for that check.

2. How we use it

• To run your account, save progress across devices, and power leaderboards and multiplayer.
• To operate the in-game currency ("Omnicoins"), which is a prepaid, non-cashable credit used only inside the games.
• To show your friends your recent activity, if you use the friends feature. Your friends can see that you completed a daily or posted an event result in the last week, and which game it was in. Nobody who is not your friend sees this, and removing a friend stops it immediately.
• To reply to messages you send us.
• To send push notifications you have opted into.
• To keep the service secure and prevent abuse.

3. Who we share it with

We do not sell your personal data. We share it only with service providers that help us run Omnigames, under their own terms:

• Supabase hosts our database and authentication (accounts, progress, leaderboards, matches).
• Cloudflare hosts the site and provides bot protection (Turnstile).
• We use no third-party analytics provider. Fonts are served from our own servers rather than a font CDN, so opening a page does not disclose your address to a font provider.

We may disclose data if required by law or to protect our rights and users.

4. Cookies and local storage

We use browser local storage to keep you signed in, to store guest progress, and to hold the random identifier described above that lets us count visits without knowing who you are. We do not use advertising or cross-site tracking cookies. Clearing your browser storage clears all of it, and a fresh random identifier is created on your next visit.

5. Data retention

We keep account data while your account exists. Anonymous accounts that are inactive for an extended period may be deleted. Contact messages and bug reports are kept as long as needed to handle them. Usage analytics are not linked to your account and are kept in aggregate. You can ask us to delete your account and associated data at any time.

6. Your choices and rights

• Play as a guest to share no personal data with us.
• Access, correct, or delete your account data by contacting us. On request we send a machine-readable copy of the records tied to your account; deletion removes your profile, balance and ledger, inventory, scores, ratings, daily records, and bug reports.
• Turn push notifications off at any time in your account or browser settings.
• Depending on where you live, you may have rights under the GDPR or CCPA/CPRA, including access, deletion, and portability. Contact us to exercise them.

7. Children

Omnigames is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will remove it.

8. Security

We use reputable providers and reasonable safeguards to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Changes

We may update this policy. Material changes will be reflected by the "last updated" date above.

10. Contact

Questions or requests: contact@omnigamestudio.com, or use the contact form on the home page.