What this site keeps about you

What is stored

Your account. The name you chose, your password, and your email address if you gave one. The password is kept only as a hash, which cannot be turned back into the password, so nobody can read it, us included. The address is used to confirm your account, to reset a password, and to tell you when something about the account changes.

Your play. The games you save and the games you play against the bot: the moves, the timing and the result. These are what the replay list, the stats pages and the leaderboard show.

Your settings. Your keys and handling, so they follow you to another computer.

Two-step sign-in. If you turn it on, the key the authenticator app shares with the site, locked with a key kept outside the database, and a hash of each recovery code. A code is never stored as you typed it.

Your sessions. Each sign-in keeps a row with the address (IP) it came from, your browser's own name for itself, and when it started and was last used. A session works for 30 days, and its row is deleted once it has run out, or when you end it.

The server's log. A line for what happens here: a sign-in or a failed one, a saved game, a mail we sent, an error, an admin action. A log line can hold the address (IP) the request came from, and keeps it for six months. A saved game's line stays as long as the game does.

The record of mail we send. For each mail, the address it went to, what kind of mail it was, and when. After six months the address is blanked. The rest stays, so the site can keep count of how much mail it sends.

Games the server refused. When a game sent to be saved does not check out, the server keeps what was sent, why it was refused, and your account's number (not your name) in a file, to find the fault. The file is deleted after six months.

The counters that stop flooding. Requests are counted for a short time: per address, per name tried at sign-in, per email address asked about for a new password, and per account for changes to it. A counter can therefore hold your address and a name or email someone typed, even one that is not an account. A job that runs every hour deletes the counters more than an hour old, so none lasts more than two hours. Deleting an account does not remove them sooner.

One cookie. It keeps you signed in. It is not used to follow you around the web, and the site has no advertising or tracking cookies.

Who sees it

You see your own account, games and stats. The site's administrators can see the log and any game the site shows in public. Nobody else sees your email address or your password hash, and nothing here is sold or handed to anyone.

Replays of TETR.IO matches saved for practice carry the TETR.IO names that were already public on TETR.IO.

Why it is kept

To run your account, to show your games and stats, to keep the leaderboard honest, to send the mail an account needs, and to find abuse and fix faults.

Deleting it

Sign in, open your account, and press Delete my account. It asks for your password, and for a code too if two-step sign-in is on. That deletes your account, your saved games and replays, your settings, your sessions, your two-step set-up and your places on the leaderboard. It cannot be undone.

The server's log keeps its lines, but they no longer name you, and the address in them goes when the line is rotated out. The record of mail we sent you loses its address. A file kept for a game the server refused stays until its six months are up; it has the number your account had, not your name.

A new account whose email is never confirmed is deleted the same way after 7 days, or sooner if someone signs up with that address before it is confirmed.

Asking about it

For a copy of what is kept about you, or a question about this page, write to the site's administrator at the address the site's mail comes from.