Privacy Policy
1. Who is responsible
Brainmaxx is operated by Breathe IT AS, Norway, which is the data controller for any personal data described here.
Privacy enquiries: privacy@brainmaxx.gg
2. What we collect
Today, playing without an account: no personal data reaches us. Your progress — level, rating, streaks, achievements, chosen theme and nickname — is written to your browser's local storage on your own device. It is not transmitted anywhere, and we cannot see it. Clearing your browser data deletes it permanently, and we cannot restore it.
If you create an account (not yet available), we will collect only:
- Nickname — shown publicly in duels and on leaderboards. Choose one that doesn't identify you if you'd rather stay anonymous.
- Email address — used to confirm the account, let you sign in, and recover access. Never shown to other players and never sold or shared for marketing.
- Game data — scores, ratings, match results and streaks, so progress follows you across devices and leaderboards work.
- Minimal technical data — approximate timing and integrity checks used to detect cheating on ranked ladders.
We do not ask for your real name, date of birth, address, phone number or location. An optional age band may be offered in settings purely so scores can be compared within age groups; it is never required.
3. Why we may process it, and on what legal basis
- Providing the game and your account — necessary to perform the contract you enter by signing up (GDPR Art. 6(1)(b)).
- Keeping ranked play fair — our legitimate interest in preventing cheating (Art. 6(1)(f)).
- Security and abuse prevention — legitimate interest (Art. 6(1)(f)).
- Optional emails or notifications — only with your consent (Art. 6(1)(a)), withdrawable at any time.
4. Storage and cookies
Brainmaxx sets no advertising or tracking cookies and uses no analytics that identify you. We use your browser's local storage for things that are strictly necessary for the game to function at all:
- your game progress, rating and streaks
- your chosen theme and whether sound is muted
- your nickname, if you set one
- a service worker cache so the game works offline
Because this storage is strictly necessary to deliver a service you have actively asked for, it does not require consent under the ePrivacy rules. If we ever add analytics or any non-essential storage, we will ask you first.
5. Third parties
- Microsoft Azure hosts the site (and, in future, the database), acting as our processor. Servers are located in the EU/EEA.
- Google Fonts — the game's typefaces are currently loaded from Google's servers, which means your IP address is transmitted to Google when the page loads. We plan to self-host these fonts to remove that transfer entirely.
We do not sell personal data, and we do not share it with advertisers.
6. How long we keep it
Local device data stays until you clear it. Account data will be kept while the account is active and deleted within 30 days of a deletion request, except where we must retain something to meet a legal obligation.
7. Your rights
Under the GDPR you may request access to your data, correction of it, erasure, a portable copy, restriction of processing, or object to processing based on legitimate interests. You can also withdraw consent at any time.
Write to privacy@brainmaxx.gg and we will respond within 30 days. If you are unhappy with our response you may complain to the Norwegian Data Protection Authority (Datatilsynet) or your local supervisory authority.
8. Children
Brainmaxx is not intended for children under 13, and accounts may not be created by anyone under that age. We do not knowingly collect data from children under 13. If you believe a child has given us data, contact us and we will delete it.
9. Security
The site is served over HTTPS only. Where accounts exist, passwords are stored using a modern one-way hashing algorithm, verification tokens are stored hashed rather than in plain text, and access to production data is restricted to named administrators.
10. Changes
If this policy changes materially we will update the version at the top and, for account holders, tell you before the change takes effect.
Note: this policy is written to be accurate and complete for how Brainmaxx works today, but it has not been reviewed by a lawyer. Before accepting real user registrations, have a qualified adviser check it against your final data flows.