1. Effective Date

This Privacy Policy is effective as of February 24, 2026. If we update it, the effective date will be changed on this page.

2. Who We Are

Nichedle is operated by an independent solo developer. If you have privacy questions, contact us at contact@nichedle.com.

3. Data We Collect

Nichedle is token-based and does not require a traditional account with email and password.

Data stored in your browser (localStorage):

• nichedle_token for your player token.
• nichedle_token_lock for daily import lock state.
• nichedle_token_pin_<token> for your local PIN cache.
• nichedle_first_game_save_offer for onboarding modal state.

Data stored in Supabase database:

• players: token, username, country code, lives, daily counters, total wins/played, admin flag, timestamps.
• PIN security fields: pin_enabled, pin_hash, pin_set_at.
• daily_guesses: per-day, per-round result records for daily stats.

4. How We Use Data

We use your data to run game functionality, including token-based identity, daily and practice limits, score/rank updates, personal rank display, and leaderboard rendering.

We also use it to support profile features (username and country flag), PIN-secured token access, and aggregated daily round statistics.

5. PIN and Token Security

Your token identifies your game profile. If PIN is enabled, protected actions require a valid PIN.

PIN values are hashed server-side using PostgreSQL pgcrypto (crypt(..., gen_salt('bf'))). Plain PIN values are not stored in the database.

If you lose your token and PIN, access to that profile may be permanently lost.

6. Sharing and Processors

We do not sell personal data. We rely on service providers to operate the game:

• Supabase for database and RPC processing.
• Hosting provider that serves the web app.
• jsDelivr CDN to load @supabase/supabase-js.
• External merchant/product pages opened from item links.
• BuyMeACoffee when you choose to open support links.

7. Data Retention

Player and gameplay records are retained until they are removed. There is currently no automatic user-level deletion workflow in the app interface.

For deletion requests, contact contact@nichedle.com with your token details.

8. Your Choices and Rights

You can set or change username, country flag, token PIN, and token import directly in the app.

You can also clear browser localStorage at any time, but this may remove local access to your token and PIN cache.

Depending on your location, you may have additional rights to request access, correction, or deletion. Contact contact@nichedle.com.

9. International Data Transfers

Infrastructure providers may process data in multiple countries. By using the service, you understand that data may be transferred and processed outside your country.

10. Children

Nichedle is not directed to children under 13. If you believe a child provided personal data, contact contact@nichedle.com and we will review and remove data where appropriate.

11. Changes to This Policy

We may update this Privacy Policy to reflect product or legal changes. Material updates will be posted on this page with a new effective date.

12. Contact

Operator: Nichedle is operated as an independent project.

Contact: contact@nichedle.com

Email: contact@nichedle.com

Jurisdiction: Hungary