Privacy Policy

Effective June 11, 2026

Restreak is a daily NBA roster game. This policy explains what information we collect, why we collect it, and what we do with it. The short version: we collect the minimum needed to run the game, we don't sell or share your information, we don't run ads, and analytics only runs if you say yes.

What we collect

If you play without an account

Nothing is stored on our servers about you. Your daily results and local streak are saved in your own browser using localStorage, and they never leave your device. Clearing your browser data erases them.

If you create an account

We store the following in our database:

• Username — your public name on the leaderboard.
• Email address — used to verify your account, deliver password-reset links, confirm email changes, and for occasional Restreak announcements (see below). Never shown publicly, never shared or sold.
• Password — stored only as a one-way cryptographic hash. We cannot see or recover your actual password.
• Game results — your daily scores, streaks, and the dates you played, which power your stats and the leaderboard.

Briefly and automatically

• Email verification and password-reset tokens — stored as hashes, single-use, and expire within 24 hours or less.
• Rate-limiting records — to prevent abuse, we log the email address used in sign-in and email requests. These records are automatically deleted within 24 hours.

Cookies and local storage

Strictly necessary: Restreak sets one session cookie that keeps you signed in. It contains only a random session identifier and expires when you close your browser. We use browser localStorage to remember your daily result so the puzzle locks after you've played, and to remember your cookie choice below.

Analytics (optional, off by default): with your consent, we use Google Analytics. In plain language: Restreak is a small independent project, and analytics is how we find out whether anyone is actually playing — how many people visit, whether the game is growing over time, and how players discover it. That's the whole reason it's here. We don't use it to profile you, and the data we see is aggregate counts, not individuals.

If you accept, Google sets analytics cookies (such as _ga) and processes usage data on our behalf under Google's privacy policy. If you decline, or simply ignore the banner, no analytics cookies are set at all.

You can change your choice at any time: reset your cookie preference and the banner will reappear. Google also offers a browser opt-out add-on.

We do not use advertising cookies or any other third-party trackers.

How your information is used

• To run the game: grading, stats, streaks, and leaderboards.
• To send transactional email: account verification, password resets, and email-change confirmations.
• To keep you in the loop: on rare occasions we may email registered users about significant Restreak news — new features, important changes to the game, or updates to this policy. Every such email will include a simple way to opt out of future announcements.
• Anything beyond that is sent only to users who explicitly checked the opt-in box at registration, and also always includes an unsubscribe link.
• To prevent abuse: rate limiting on authentication endpoints.

What we never do

• Sell, rent, or share your personal information with anyone.
• Send email on behalf of any third party, or let anyone else email you through us.
• Run advertising of any kind.
• Run analytics without your consent.
• Ask for your real name, location, or any payment information.

Security

Passwords are hashed with an industry-standard algorithm. All database access uses parameterized queries. Verification and reset tokens are stored only as hashes. The site is served over HTTPS.

Your rights

You can change your email address and password at any time from your account page, and delete your account — along with all associated data — using the Delete Account button there. You can also email contact@restreak.com from your registered address and we will remove it. If you are in the EU/EEA, UK, or California, you may also have rights to access, correct, or export your data — the same email address handles those requests.

Children

Restreak is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

If this policy changes, we will update this page and its effective date. Material changes will be noted on the home page.

Contact

Questions about this policy or your data: contact@restreak.com