Skip to content

Privacy policy

Template – the site owner must complete the controller details and update this page before enabling analytics or ads.

Who we are

Data controller: [owner name, address, contact e-mail – to be completed].

What is stored on your device

  • Your best scores, recent results, daily results and settings (language, symbol mode).
  • They are stored in your browser's localStorage under the key omt:data. Without an account they never leave your device.
  • You can delete them at any time by clearing site data in your browser.

Accounts (optional)

Every game works without an account. If you create one, we store on our server: your username, a password hash (scrypt – never the password itself), your game results and the date the account was created. We do not ask for your e-mail or real name.

  • Signing in sets one strictly necessary cookie, omt_session (HttpOnly, 30 days), that keeps you signed in. It is not used for tracking.
  • Purpose and legal basis: providing the account you asked for (Art. 6(1)(b) GDPR).
  • Public rankings: your username and best scores (per game and per daily challenge) are shown publicly in the rankings. You can switch this off at any time on the Account page; you are then removed from all rankings immediately.
  • You can delete the account at any time on the Account page. This immediately and permanently removes it together with all results; server backups containing it are overwritten within 14 days.

Challenge links

A challenge link contains only the game, the round parameters (a random number) and optionally a score and a date. It contains no personal information.

Analytics

By default no analytics are active. If the owner enables privacy-friendly analytics, only anonymous product events (for example "game started") are recorded, without cookies or personal data. This section must be updated with the provider name when enabled.

Advertising

By default no ads are shown. Before enabling ads the owner must add a consent mechanism compliant with GDPR and the ePrivacy rules and update this section.

Hosting

The site runs on our own server (VPS). The web server (nginx) keeps standard access logs with IP addresses for security purposes. [VPS provider – to be completed].

Your rights

Under GDPR you have the right to access, rectify and erase data and to lodge a complaint with a supervisory authority.