Privacy policy.
Effective: [EFFECTIVE DATE]
Owner and legal review required before launch. Provider facts are current; legal language, entity details, retention periods, and effective date are not yet approved.
What we collect.
You can play Classic, Timed, AI/PvE, and solo power-up modes as a guest. Guest game progress stays in the browser session and is not submitted to Supabase.
If you create or use an account, Supabase provides authentication and PostgreSQL storage for account-linked features such as multiplayer, invitations, saved scores, history, and leaderboards. This can include your email address, account identifier, and gameplay records.
Email and contact messages.
The contact form sends your name, email address, and message to the 2048 Surge API. Resend delivers that message to the support recipient. The API rate-limits requests and does not log message bodies.
When a new account profile is created, Resend may deliver one personalized welcome email and store the account email and display name as a contact. Optional challenge and product emails are off by default. You can turn them on or off in Settings, and Resend records the corresponding subscription preference and handles unsubscribe requests. Contact details and retention terms require owner/legal approval.
Advertising and consent.
Google AdSense H5 Games may show an interstitial after eligible completed solo or AI games. Ads do not interrupt gameplay and are skipped when consent, inventory, or the provider is unavailable. Where required, a Google-certified consent flow controls applicable advertising choices. Google may process browser, device, cookie, consent, and advertising data under its own policies when ads are enabled.
Browser storage and connectivity.
The site uses browser storage for session-only guest state, authentication state, ad cadence, consent state, and PWA update behavior. 2048 Surge is online-only. Versioned static assets may be cached, but authentication, API, WebSocket, ads, logs, and contact requests are not cached for offline use.
Service providers.
- Supabase — authentication and PostgreSQL data services.
- Google — H5 Games advertising and applicable consent tooling.
- Resend — delivery of contact messages, account welcome emails, and optional email campaigns.
- Render — hosting for the site and API.
Your choices.
You can play supported guest modes without an account, decline optional advertising consent where offered, keep optional challenge and product emails off or disable them in Settings, use the unsubscribe link in an email, clear browser storage, or contact us to ask about account-linked data. The final request process, response timeline, jurisdiction-specific rights, and retention schedule remain pending owner/legal review.
Contact.
Use the contact form for privacy questions. The responsible legal entity is [LEGAL ENTITY NAME].