Privacy
The short, real version.
What we collect
Your email and password (for the account), your display name, gender and preferences (to run the game), your standardized selfie and its face embedding (only with separate consent; see the face data policy), your picks and hearts (they are the game), and standard usage events.
What we do with it
Run the three features you signed up for. Your choices also feed an aggregate, anonymized preference graph that makes everyone's estimates sharper. No advertising, no data brokers, no selling anything about you, biometric or otherwise.
What others see
Your standardized image, and nothing else. Never your name, your email, your age, your answers, or your results. People appear to each other as faces in a game, not as findable identities, so nobody can use what they saw here to look you up somewhere else. Nobody ever sees who passed on them, and nothing about you is ranked publicly.
Who we share with
Infrastructure only: Supabase (database/storage), Vercel (hosting), Stripe (payments, so they see billing details but never your game data), and Anthropic (text generation for coaching copy; your questionnaire text is sent for that purpose, your face data never is).
Your controls
Withdraw face-data consent (purges biometrics, keeps the account) or delete the account entirely (purges everything). Both live in You → Data & privacy, both are immediate, and both are guaranteed by a scheduled sweep.