Privacy · Play test

What we keep

• Sign-in. When you sign in with Google or Discord, our sign-in service receives your account ID, email address, and the name and picture on that account. We use this only to know it's you. Your Google or Discord name and picture are never shown in the game.
• Your player profile. The in-game name you choose, which sign-in method you joined with, and your lifetime re-take count.
• Invites. Which invite code you used, who created it, and when. The game never shows other players who invited you.
• Battles. Your recorded takes (audio), their length and re-take count, the stars you give, the text you write for your opponent, when you listened, and game timers.
• Reports. If you report an opponent: the reason, the time, and a copy of the reported text.
• Feedback. If you send the team a note from the game: what you wrote, which page you sent it from, your in-game name, and the time. Notes go to the team only — no other player sees them.
• On your device. Your sign-in session and your audio setup choices are kept in your browser's storage. Signing out removes the session.
• Notifications. If you turn notifications on, we keep the address your browser gives us for sending notifications to that device, the two keys that encrypt them, and your site language (English or Thai). The address has no name or email in it. We keep up to 5 devices per player.

We do not ask for your real name, phone number, address, ID card number, or payment details. We do not sell your data or use it for advertising.

Who can see it

• Your opponent hears your takes and reads your text during the battle, without your name. After the reveal, both players in that battle see each other's in-game name, takes, stars and text.
• Thaitablist admins can see reports and remove reported text, and read the feedback notes players send the team.
• Service providers that run the game for us: Supabase (database, sign-in and audio storage, hosted in Singapore) and Cloudflare (serves this website). Google and Discord handle their own sign-in pages under their own privacy policies.
• Your browser's push service (Google for Chrome, Mozilla for Firefox, Apple for Safari, Microsoft for Edge on Windows) delivers the notifications you turned on. Each message is encrypted and only says which kind of notification it is — never a name, a score, or what your opponent did.
• Anyone a player shares with. After the reveal, either player can save that battle as an image or a video clip and post it anywhere they like. The file is made on your device — we never receive it and never store it. It shows both in-game names, the result, the stars given in each round, the re-take counts and the date. The video clip also plays both players' recorded takes over the beat. It does not include the text you wrote to each other.

How long we keep it

• Recorded takes are kept for up to 3 months after the battle, then deleted. If a report about that battle is still open, its takes are kept until the report is closed, then deleted.
• Your account and battle records are kept while the Beta runs, or until you ask us to delete them.
• Feedback notes are kept until the team closes them, then deleted 90 days later.
• Notification addresses are deleted when you turn notifications off, when your browser's push service tells us the address stopped working, or when you add a sixth device (the oldest one goes).
• Anything shared outside the game is beyond our reach. If someone saved a battle as an image or a clip and posted it, deleting your data here does not delete the copy they already have. The times above cover our own copies only.

Your choices

You can ask us to show you what we hold about you, correct it, or delete your account and everything linked to it. Email us from the address you signed in with, or tell us your in-game name:

contact@thronetablist.com