Privacy Policy
Last updated 12 October 2026
Daily Speedrun (dailyspeedrun.com) is run by Tom Greer, based in the United Kingdom ("we", "us"). This page explains what we collect when you play, why, and what you can do about it. If anything here is unclear, email support@dailyspeedrun.com.
Playing without an account
You can play the daily level without signing in. We don't collect anything about you on our servers when you do. Your browser keeps a few things locally so the game works: your best run of the day, how many attempts you've made, and your daily streak. They stay on your device, and clearing your browser's site data removes them.
What we collect when you have an account
- Your email address, which identifies your account and is used to send you sign-in codes. We never show it to anyone and never send you marketing.
- If you sign in with Google, Google tells us your email address, name and profile picture. These are stored with your account, but we only use your email address; your Google name and picture are never shown.
- Your display name, which appears on the leaderboards. It's public.
- Your runs: the recording of each run you submit (the keys you pressed, frame by frame) and its time. We replay every recording on our server to check it's a real run before it goes on the leaderboard. Your times are public; recordings are only shown to you, to Premium players watching a past day's winning run or their own medal runs, and to us when reviewing runs for cheating.
- A log of checked runs: each run you submit, whether it was accepted, and why not if it wasn't. We use it to spot cheating.
- Your medals. While you have Premium, your medal cabinet is public.
- Your purchase, if you buy Premium: that you bought it, when, the amount and currency, and Stripe's reference for the payment. We never see or store your card details.
Why we use it
- To run your account, the leaderboards and medals, and to give you Premium if you buy it: this is what you sign up for (performance of a contract).
- To keep the leaderboards fair by checking runs and investigating cheating (our legitimate interest in fair competition).
- To keep records of purchases that the law requires (legal obligation).
We don't sell your data, show ads, or use tracking or analytics cookies.
Who else handles your data
- Supabase hosts our database and sign-in, on servers in the European Union (Ireland). It stores everything listed above.
- Stripe processes Premium payments. Stripe acts as the seller of record for your purchase, which means Stripe collects your payment details and billing country, works out and pays any sales tax, and handles fraud checks and disputes. Stripe's use of your payment details is covered by Stripe's privacy policy.
- Google, if you choose to sign in with it, confirms who you are. Google's handling of your account is covered by Google's privacy policy.
- Cloudflare serves the website and protects it from attacks. It sees standard request information such as your IP address.
- Our sign-in emails are sent through Resend, an email delivery service that sees your email address.
Some of these providers may process data outside the UK. Where they do, they rely on the protections UK data protection law requires, such as standard contractual clauses.
Cookies and local storage
We only store what's needed for the site to work: your sign-in session, so you stay signed in, and the local game data described above. Because these are strictly necessary, we don't ask for cookie consent. There are no advertising or tracking cookies.
How long we keep it
We keep your account, runs and medals while your account exists. If you ask us to delete your account, we delete your email, display name, runs and medals. Purchase records are kept for as long as tax and accounting law requires (usually six years), and are then deleted.
Your rights
Under UK data protection law you can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. To do any of these, email support@dailyspeedrun.com from the address you sign in with. If you're not happy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk).
Children
Accounts are for people aged 13 and over. If you're under 13, please play without an account.
Changes
If we change this policy, we'll update the date at the top of this page. If a change matters, we'll make it clear on the site before it applies.