Privacy Policy

Effective 10 October 2026

Who we are

The eXorb app and the xthegame.world website are operated by Data Scientists Pty Ltd, a company based in Australia (“we”, “us”). This policy explains how we handle personal information when you use the eXorb app on your phone or in your browser at exorb.xthegame.world, and when you visit xthegame.world.

Questions and requests: privacy@xthegame.world

The short version

• You can play as a guest without giving us anything.
• If you create an account, we keep your email address and your saved games.
• We don’t sell your information, show ads, or use analytics or tracking tools.
• You can delete your account in the app at any time, and it is removed straight away.

Information we collect and why

Playing as a guest

You can draw cards without an account. Guest games stay on your device and are not uploaded.

Your account

If you create an account, we keep your email address, a password (stored only in scrambled, hashed form by our account provider, Supabase), an account identifier, and when the account was created and last signed in. We use these to sign you in, keep your account secure, and send confirmation and password-reset emails. We only email you about your account.

When you sign up or sign in, the app tells you whether an email address already has an account, so you know whether to sign in or register.

Saved games

When you play signed in, we save each game’s name, the cards and decks drawn, their order and times, and which account drew each card. We use this only to save your games and bring them back on any device. Game names are text you choose, so please don’t put anything in them you wouldn’t want stored or seen by a game partner.

Playing with a partner

When you invite someone into a game, or join theirs, we store who is in the game, who is host and who is partner, the invitation, and when each happened. Both players can see the game’s full history, including its name and who drew each card.

Anyone signed in who has a valid invitation code can take the partner place, so share codes privately. Cancelling a code after someone has used it does not remove them from the game.

Technical information

Like any online service, our providers see technical details such as your IP address, request times and browser or device type when you use the app or website. These are used to deliver and secure the service. We don’t use them to identify or track you.

When you contact us

If you email us, we use what you send to answer you and deal with your request.

Storage on your device

The app stores a few things on your device: your sign-in session, whether you’ve seen the tutorial, and any cards you’ve drawn that are still waiting to upload (for example when you’re offline). Waiting cards include your account and game identifiers, the card, the time, and sometimes the game name.

Signing out stops uploading, but cards still waiting stay on the device and upload the next time that account signs in. Deleting the app, or clearing the website’s data in your browser, removes everything stored on the device, including cards that haven’t uploaded yet. It doesn’t delete your saved games online.

The website remembers only your light or dark theme choice, in your browser. We don’t use cookies for tracking or advertising.

Who we share information with

We don’t sell personal information, and we don’t use it for advertising. The app and website contain no advertising, analytics or tracking tools. We share information only with the providers that run the service for us, and only what they need to do that:

• Supabase: accounts, the database of saved games, and live updates in shared games.
• Microsoft 365: sends account emails and receives email you send us.
• GoDaddy: hosts the website and the browser version of the app.
• Google: the browser version of the app loads its graphics engine and fonts from Google’s servers, which see your IP address. The phone apps don’t do this.
• App stores (such as Apple’s App Store): deliver the app to your phone under their own privacy policies. We don’t receive your app-store account details.

We may also disclose information if the law requires it.

Where your information is stored

Your account and saved games are stored by Supabase in Seoul, South Korea. Requests to Supabase pass through its network provider’s servers, usually close to where you are. Our web host is in the United States, and Microsoft may process email in other countries. By using eXorb with an account, your information will be stored and processed outside Australia.

How long we keep information

• Your account and saved games: until you delete your account, or ask us to.
• Shared games: kept while either player still has an account, because the history belongs to both of you (see below).
• Deleted games: removed straight away. We keep only a random game number, with nothing about you or the cards, so an offline device can’t bring the game back.
• Supabase service logs: 1 day.
• Website access logs: kept by our web host for a limited period for security and troubleshooting.
• Emails you send us: as long as needed to deal with your request.
• Backups: we don’t keep backups of the database, so deleted information can’t be restored.

Deleting your account

You can delete your account in the app: open your profile, then Delete account. This immediately and permanently deletes your sign-in, email address, profile and saved solo games.

If you shared a game, the other player keeps it, so their history isn’t lost. If you were the host, they become the host. Your draws stay in the game but are no longer linked to you. Cards still waiting on your device are never uploaded.

You can delete solo games one at a time in the app. Shared games can’t be deleted in the app, because they belong to both players.

Your choices and requests

You can ask to see the personal information we hold about you, correct it, or have it deleted by emailing privacy@xthegame.world from the email address on your account. If you write from another address, we may need to check it’s really you before acting. We’ll respond within 30 days.

Keeping information secure

The app and website use encrypted HTTPS connections. Access rules in our database mean only you, and a partner in a game you share, can see your saved games. Passwords are stored only in hashed form. No system is perfectly secure, but we work to protect your information and will act promptly if something goes wrong.

Children

eXorb accounts are for people aged 13 and over. Anyone can play as a guest, which collects no personal information. We don’t knowingly hold accounts for children under 13; if we learn an account belongs to one, we’ll delete it. If you think this has happened, please email privacy@xthegame.world.

Questions and complaints

Please send questions or complaints to privacy@xthegame.world. We’ll respond within 30 days. If you’re not satisfied with our response, you can contact the Office of the Australian Information Commissioner.

Changes to this policy

We’ll post any changes on this page and update the date at the top. If a change significantly affects how we use your account information, we’ll also email account holders before it takes effect.