Privacy Policy
Don't Think! is run by David Alonzi, an individual in Ontario, Canada, who is responsible for the personal information described here. This page explains what the site holds about you, why, who else handles it, and how to get a copy or have it deleted. It is written to be read, not to be legally impressive.
The short version
- We keep only what the site needs to work: your email, a username, and your game results.
- No advertising, no analytics, no tracking pixels, no third-party scripts watching you.
- Nothing is sold, rented or shared for marketing — ever.
- Card details go to Stripe and never reach us.
- You can download your data or delete your account yourself, any time.
- You must be 13 or older to have an account.
What we collect, and why
| What | Why | Kept until |
|---|---|---|
| Email address | To sign you in, and to contact you about your account or a change to the price or these policies. Never for marketing. | You delete your account |
| Password | To sign you in. Stored only as a one-way hash — nobody can read it back, including us. | You delete your account |
| Username | Your name on the leaderboard. It is public — choose accordingly. | You delete your account |
| Game results | Each puzzle: game, date, moves, score, mistakes, start and finish time. Used to resume a game, check scores are genuine, and work out streaks and stats. | You delete your account |
| Consent record | When you accepted the Terms and confirmed you're 13 or older, and which version of the Terms. Kept as proof you agreed. | You delete your account |
| Premium status | Your Stripe customer ID, whether premium is active and when it renews, or that you bought lifetime. | You delete your account (Stripe keeps the payment records the law requires) |
Your date of birth is not stored. It's asked for at sign-up only to check you're old enough, then thrown away.
Signing in with Google. Google sends our sign-in provider your email address, name and profile picture. We use only the email. The name and picture aren't copied into your profile, shown anywhere, or used for anything, but the sign-in provider keeps the copy Google sends alongside your login, and it is deleted with your account.
Stored in your browser, not sent to us: the sign-in cookie and — only if you allow it — your theme, accessibility settings, Carnivore settings and which rules you've seen. The Cookie Policy lists every one.
What we don't collect
- No analytics or visit tracking of any kind
- No advertising identifiers, and nothing shared with advertisers
- No location, contacts, camera or microphone
- No card or bank details
- No real name, address, phone number or date of birth
What other players can see
Only your username, next to your score and time on the daily leaderboard. Your email, your results on other days and your premium status are never shown to anyone else.
Who else handles your data
These are every outside company involved — the site loads no other third-party code. Each handles data only to provide its service to us.
| Company | What it does | Where |
|---|---|---|
| Supabase | Database and sign-in. Holds your account and game results. | Canada (Montréal) |
| Vercel | Hosts and serves the site. Handles your requests as they pass through. | United States |
| Stripe | Takes payments. The only one that ever sees your card. | Canada and United States |
| Only if you choose “Continue with Google”. | United States |
Because Vercel, Stripe and Google operate in the United States, your information may be processed there and may be accessible to authorities under US law. We don't otherwise disclose personal information unless the law requires it.
Children
Accounts are for people aged 13 and over. Sign-up asks for a date of birth and refuses anyone younger; the date isn't kept. If a new Google account turns out to belong to someone under 13, it is deleted on the spot. If you're a parent or guardian and believe a child under 13 has an account, email jdalonzi@gmail.com and it will be deleted along with everything in it.
If you're 13 or older but under the age of majority where you live, please read this page with a parent or guardian. In Québec the law requires a parent's consent for anyone under 14 — if you're in Québec and under 14, please don't sign up.
Your rights
You can, at any time:
- Get a copy of everything — Account → Data & privacy → Download my data.
- Delete everything — same page. Immediate and permanent. Can't sign in? See Delete my data.
- Correct your username from Account → Profile. To change your email, contact us.
- Withdraw consent to optional browser storage with “Cookie settings” at the bottom of any page.
- Ask a question or complain. Email us first — you'll get a reply within 30 days. You can also complain to the Office of the Privacy Commissioner of Canada or the data-protection authority where you live.
How long it's kept
Everything is kept while your account exists and deleted with it — straight away, with no grace period and no archived copy. Our hosting providers keep short-lived technical logs for security; they aren't used to track you. Stripe keeps payment records for as long as tax law requires.
Security
Passwords are hashed, all traffic is encrypted, and the database itself enforces who can read what, so one person's data can't be read by another even if the website had a bug. If a breach ever puts your information at real risk, we'll tell you and the Privacy Commissioner, as Canadian law requires.
Changes
When this page changes, the date at the top changes. For anything significant we'll say so on the site and email account holders before it takes effect.
Contact
David Alonzi — jdalonzi@gmail.com