Privacy Policy

What we collect

Account details. If you create an account, we store your email address, your display name, and a secure one-way hash of your password. We never store your actual password and cannot see it.

Gameplay. We record each reveal you make: which tier, the amount paid, when, and the count you saw. This is what lets the game show your progress and keep the tallies honest.

Payments.Payments are handled by Polar (polar.sh), which acts as the Merchant of Record: the charge on your card statement will appear as Polar. Your card details go to Polar, not to us: we never see or store your full card number. The email address Polar asks for at checkout is used to send your receipt and stays with Polar; masked or alias email addresses work fine, and we never store or use that address. We keep a record that a reveal was paid and Polar's order reference, so we can match payments to reveals and answer payment questions or disputes.

Playing as a guest. If you play without an account, a random game id is stored in your browser, which we use to link your reveals to that browser; the reveal records themselves are stored on our servers under that id. The id holds no personal information, and clearing your browser storage removes it (and with it, your access to that history on the device).

If you sign in with Google. Google shares your verified email address and name so we can create or find your account. We do not receive your Google password.

Technical data. Like most sites, we briefly use your IP address to prevent abuse (rate limiting). It is not attached to your account or kept as a long-term profile of you.

How we use it

To run the game: create and secure your account, record your reveals, and show your progress.

To take payment for a reveal, through our payment provider.

To send you the account emails needed to secure your account: email verification when you sign up and password reset when you ask for one. We do not send marketing email.

To keep the game working and fair: prevent abuse, debug problems, and provide support.

We do not use your data for advertising, and we do not build a marketing profile of you.

Who we share it with

We do not sell your data. We share it only with the service providers that make the game work, and only for that purpose:

Our payment provider: Polar (polar.sh), the Merchant of Record that charges your card and handles all card data.

Google, only if you choose to sign in with Google.

A small number of service providers that run the app on our behalf: delivery of the account emails described above, and the hosting and database infrastructure that stores the data. Each receives only what it needs for that job.

We may also disclose information if the law requires it, or to protect the game and its players from fraud or abuse.

Cookies and local storage

A session cookie keeps you signed in. It is essential to logging in and cannot be turned off while you use an account.

Your theme choice (light or dark) and, for guests, your game id are stored in your browser. We do not use third-party advertising or tracking cookies.

We count visits and measure engagement with a privacy-preserving, cookieless method: a daily-rotating, non-identifying hash that stores nothing on your device and cannot follow you across days. We use no third-party analytics, and we honor Do Not Track and Global Privacy Control.

Keeping your data, and your choices

We keep your account details for as long as your account exists. Records of reveals and payments are kept after that, with the link to your account removed, because they are part of the game's tally and our accounting. Guest reveals are kept the same way, tied only to the random game id.

You can ask us to access or delete your account data by contacting us (see below). Depending on where you live, you may have additional rights over your personal data, and you can exercise them the same way.

Security, and children

We protect your data with standard measures: passwords are hashed, connections use TLS, and access is limited. No system is perfectly secure, but we take reasonable care.

How Many Paid is not directed at children, and is not intended for anyone under the age required to form a contract or make a payment where they live.

Changes and contact

If we change this policy, we will update the date at the top of this page.

Questions, or a request about your data? Email the operator at support@howmanypaid.cash or reach us via hindermost.com.