Privacy Policy

This Privacy Policy describes how Itai Zeilig ("Owner", "we", "us", or "our") collects, uses, and protects your personal information when you use the SQL Protocol website and game (the "Service").

We are committed to protecting your privacy and handling your data in an open and transparent manner. By using the Service, you agree to the collection and use of information in accordance with this policy.

Account Information (when you sign in with Google):

• Email address
• Display name / username (server-generated, never your Google name)
• Profile picture (if provided by Google)
• Google account identifier

Guest Session Information (when you choose “Continue as Guest”):

• A randomly generated device identifier (a UUID stored on your device). It is not derived from any hardware identifier and contains no personal information.
• A server-generated guest username (e.g., GUEST_AB12CD) tied to that identifier.
• Your gameplay data (see below), associated with the guest identifier rather than a real account.

Guest sessions are intentionally limited: they are excluded from public leaderboards, and progress is bound to your browser's local storage. Clearing browser data ends the session and orphans the server-side guest record. You can upgrade a guest session to a Google-linked account at any time from inside the game; doing so preserves all of your progress.

Gameplay Data:

• SQL queries you execute in-game
• Game progress and completion status
• Scores, rankings, and MMR (matchmaking rating)
• Time spent on challenges
• PVP match history and results

Technical Data:

• Browser type and version
• Device type and screen dimensions
• General geographic location (country/region level)
• Session duration and access times

Directly from you: When you create an account, play the game, submit SQL queries, or participate in PVP matches.

From Google OAuth: When you sign in using your Google account, we receive basic profile information as authorized by you.

Via guest device authentication: When you choose “Continue as Guest”, your browser generates a random identifier and the game server creates a throwaway account tied to that identifier. No third party is involved in this flow and no personal information is collected.

Automatically: Through cookies and similar technologies that collect technical data about your device and usage patterns.

We use the collected information to:

• Provide, maintain, and improve the Service
• Manage your account and game progress
• Enable PVP matchmaking and leaderboard functionality
• Analyze and improve our SQL training engine
• Send service-related communications (e.g., account updates)
• Detect and prevent cheating, fraud, or abuse
• Comply with legal obligations

Note: SQL queries submitted in-game may be analyzed to improve our query validation engine and create better educational content. These queries are processed without personal identifiers.

Your data is stored securely on protected servers. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Retention Period: We retain your personal data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes.

Local Storage: Authentication tokens (for both Google and guest sessions) and the guest device identifier are stored locally on your device using browser storage. Clearing your browser data signs you out and, for guests, ends the session permanently.

Guest Account Lifecycle: Guest accounts are inherently ephemeral. Because the device identifier lives only in your browser, an account becomes unreachable once that storage is cleared. Server-side guest records that have not been used for an extended period may be deleted as part of routine maintenance.

We use the following third-party services:

We do NOT sell your personal data to third parties.

We use cookies and similar technologies to:

• Authentication cookies: Keep you signed in to your account
• Preference cookies: Remember your settings and preferences
• Session cookies: Maintain your game session state

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of the Service.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your data
• Restriction: Request restriction of processing in certain circumstances

To exercise any of these rights, please contact us at the email address below. We will respond to your request within 30 days.

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

You may request deletion of your account and associated data at any time by contacting us. Upon receiving your request, we will:

• Delete your account and personal information within 30 days
• Remove your data from leaderboards and public displays
• Retain only anonymized gameplay data for analytical purposes

Guest sessions: You can effectively delete a guest session yourself by clearing your browser's local storage for this site. The orphaned server-side record carries no personal information and may be purged in routine maintenance.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Service after any modifications constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or our data practices, please contact us at: