Privacy Policy

We collect only the data we need to run m7nk and provide you with a fair, secure game experience.

• Account data: email address, username, country, and profile picture (avatar).
• Game data: scores, XP, rank, win rate, streaks, games played, and question history.
• Payment data: subscription status and transaction ID. We do not store credit or debit card numbers — all payment information is handled directly by Paddle.
• Technical data: IP address, browser type, device type, essential cookies, and session data.
• Preferences: your language preference.

• To provide the game service — performance of a contract with you.
• To process payments via Paddle — performance of a contract.
• To improve the service — our legitimate interest in making m7nk better.
• To send account emails such as email verification and password reset — performance of a contract.
• To prevent fraud and cheating — our legitimate interest in keeping the game fair and secure.

We share data only with the trusted service providers we need to run m7nk:

• Supabase — database and authentication hosting.
• Paddle — payment processing and subscription management. Paddle acts as the Merchant of Record for all purchases.
• Cloudflare — hosting, content delivery, and security.

We never sell your personal data to anyone, ever.

Because we operate globally, your data may be transferred to and processed in countries outside your own, including the United States and the European Union. Where required by law (for example, under GDPR), these transfers are protected by appropriate safeguards such as Standard Contractual Clauses.

• Active accounts: we keep your data for as long as your account is active.
• Deleted accounts: all personal data is permanently deleted within 30 days of account deletion.
• Payment records: kept for 7 years to comply with tax and accounting laws.

Wherever you live, you have meaningful control over your data. Subject to applicable law (including GDPR and CCPA), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and all associated data.
• Export your data in a portable format.
• Opt out of non-essential emails at any time.
• Object to processing based on legitimate interests, and (for California residents) to know what we collect and request its deletion. We do not sell personal data, so there is nothing to opt out of in that regard.
• Lodge a complaint with your local data protection authority if you believe we have mishandled your data.

To exercise any of these rights, email brinkalabs@gmail.com. We respond to verified requests within 30 days.

• We use essential cookies only, strictly to keep you signed in and to keep your session secure.
• We do not use advertising or tracking cookies.
• We do not use Google Analytics, Facebook Pixel, or any third-party behavioural tracking.

m7nk is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If we discover that an account belongs to a child under 13, we will delete the account and all associated data immediately. If you believe a child has provided us with personal data, please contact brinkalabs@gmail.com.

• All data is encrypted in transit using HTTPS/TLS.
• Our database is protected with Row Level Security, so each user can only access their own data.
• Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• We perform regular security audits of our code and infrastructure.

No online service can guarantee absolute security, but we work hard to protect your data and will notify affected users without undue delay if a personal data breach is likely to result in a high risk to their rights.

We may update this Privacy Policy from time to time. If we make material changes, we will notify users by email and update the "Last updated" date above. Your continued use of m7nk after the changes take effect means you accept the updated policy.

For any privacy question, request, or concern, please email brinkalabs@gmail.com. We respond to all privacy requests within 30 days.