Privacy Policy
Last updated: 25 September 2026
Which Happened First? ("the game", "we") is a history quiz in which you arrange events on a timeline. This page explains what data the game stores about you, why, and how to remove it.
What we store
- Account. When you register we store your email address and a hashed password. If you sign in with Google or Apple, we receive the account identifier, email address and name the provider shares with us (Google also shares a profile picture URL; Apple may share a private relay address instead of your real one). Authentication is handled by Supabase.
- Guest play. If you play without creating an account, we create an anonymous account identifier that is stored in your browser so your game can be saved. It contains no personal data. Anonymous accounts and their games are deleted automatically after 30 days of inactivity, unless you turn them into a full account.
- Profile. A username and an optional display name that you choose. Your display name (or username) is shown publicly on leaderboards.
- Gameplay. Your games and answers: which events you were shown, the order you placed them in, whether you were right, how long you took, your scores, skill rating, streaks and Daily Challenge results.
- Read later. The events you bookmark.
- Technical logs. Our servers keep short-lived request logs (including IP address and browser type) for security, abuse prevention and debugging. Sign-in tokens are never written to logs.
What we don't do
We do not show advertising, sell or share your data for marketing, or use third-party analytics or tracking cookies. The only cookies and browser storage we use are those needed to keep you signed in.
How we use your data
To run the game: sign you in, save your progress, calculate scores and ratings, show leaderboards and your statistics, and keep the service secure and fair (for example rate limiting and one Daily Challenge attempt per day).
Who processes it
- Supabase — authentication and database hosting
- Vercel — hosts the website
- Render — hosts the game API
- Google — only if you choose "Continue with Google"
- Apple — only if you choose "Continue with Apple"
Historical content comes from Wikidata and Wikipedia. Event images are loaded by your browser directly from Wikimedia Commons (upload.wikimedia.org), so the Wikimedia Foundation receives the standard technical data of an image request, such as your IP address, under its own privacy policy.
How long we keep it
For as long as your account exists. Deleting your account (Profile → Delete account) immediately and permanently removes your login, profile, game history, rating, streaks and Read later list, including your entries on past leaderboards. Backups kept by our hosting providers expire on their normal schedule. Guest accounts that have not been used for 30 days are removed automatically.
Your rights
You can view your data in the game (profile, game history, Read later), edit your profile, and delete everything yourself at any time. Depending on where you live you may have further rights, for example under the GDPR, such as receiving a copy of your data — contact asatillo.akhmedov@gmail.com to exercise them.
Children
The game is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect their data.
Changes
We will update this page when our practices change and revise the date above.