Privacy Policy

Last updated: October 2026

This policy explains what data The Click collects, why, and your choices. We keep it minimal. The data controller is Novologia Ltd, a company registered in Israel, which operates The Click.

1. What we collect

  • Your email — only if you create an account, buy a pass (the email you give at checkout, for which an account is created if you don’t have one), or ask us to email you when your next room opens; used to sign you in, attach your purchases and save your progress.
  • Your game results — which rooms you solved, your times, and hints used, so we can save your progress and records across your devices. If you play without an account, they are stored against a random identifier kept in your browser, and moved to your account if you later sign in.
  • Play Together sessions — when you play a together game we store the session: its invite code, the game, each player’s progress in the shared rooms and the time each step took, the rating each player gives at the end, the language, and for each of the two seats a coarse device type, operating system, browser and country. Each seat is linked to the player’s account if signed in, otherwise to a random identifier kept in their browser. To decide whether a paid together game may be played, we check whether either seated player holds a pass.
  • Your purchases — if you buy a pass, we store which pass, when you bought it, the price paid, a transaction identifier, and an end date only if your pass has one. Card details go to our payment provider (see section 5) and never reach our servers.
  • Usage and advertising data — how the games are played, and whether an ad brought you here. This is not anonymous: it includes identifiers such as your IP address, device and browser information, and cookie identifiers. Section 6 sets out exactly what is shared and with whom.

2. How we use it

To run your account, save and sync your streak and solved rooms, keep the Service secure, improve the games, and measure whether our advertising works. If you opted in, we may occasionally email you about new games and updates.

3. Marketing emails

We only send marketing/update emails if you explicitly opted in — at sign-up, at checkout, or by asking us to email you when your next room opens. These include a note when your next free room opens and a few reminders if you stop playing. You can unsubscribe at any time using the link in any such email, or by emailing us. Sign-in code emails are transactional and always sent when you request to sign in.

4. Where your data lives

We use trusted providers to run the Service: our database and authentication are hosted on Supabase, our website on Vercel, some static game files on Amazon Web Services, and emails are sent through our email provider. Your data may be processed by these providers solely to deliver the Service. Novologia Ltd is based in Israel — a jurisdiction the European Commission recognizes as providing an adequate level of data protection.

5. Payments

Paid purchases are processed by Paddle (Paddle.com Market Ltd), our merchant of record. Your payment details — such as card numbers — are collected and processed by Paddle and never touch our servers. We receive a record of the purchase (product, price, currency, transaction identifier) so we can unlock it on your account and handle refunds. Paddle’s own privacy policy applies to the data it collects at checkout.

6. Analytics and advertising

To understand how the games are played and whether our advertising works, we share data with three companies:

  • Google (Google Analytics) — the pages you visit and in-game events, together with your IP address, device and browser information, and a cookie identifier.
  • Meta (Facebook and Instagram) — the same kind of event data, sent both from your browser and from our own servers, together with your IP address, browser information, and Meta’s advertising cookies (_fbp, _fbc). If you are signed in, we also send your email address and account ID in hashed form — scrambled so it cannot be read back — so that Meta can tell whether one of its ads led to a sign-up. We never send your email address in readable form. When you start a Play Together game, the same advertising context from your browser is stored with the session so that later steps of that game can be reported from our servers; nothing about the other player is ever sent.
  • OpenAI (the ChatGPT Ads measurement pixel) — the same kind of event data, such as the moment you share a Play Together invite link, sent from your browser together with your IP address, browser information, and OpenAI’s measurement cookies (__obref, __oppref), so that OpenAI can tell whether one of its ads led to that step.

We do not sell your data, and we do not share it with anyone beyond the providers named in this policy.

If you are in the EU/EEA, the UK or Switzerland, none of this happens unless you accept. Nothing in this section is loaded or sent until you press Accept on the cookie notice, and you can change your mind at any time — see section 8.

7. Your rights

You can access, correct, or delete your data at any time. To delete your account and associated records, email feedback@playtheclick.com and we’ll remove them.

8. Local storage & cookies

We use your browser’s local storage to keep you signed in and to remember your gameplay progress. That is needed for the Service to work and is not optional. We also use the analytics and advertising cookies described in section 6.

If you are in the EU/EEA, the UK or Switzerland, we ask before any analytics or advertising cookie is set, and none of those scripts load until you accept. Withdrawing is as easy as accepting — use the button at the end of this page to clear your choice and decide again, or clear cookies in your browser settings.

9. Children

The Service is not directed to children under 13, and we don’t knowingly collect their data.

10. Changes & contact

We may update this policy; material changes will be posted here. Questions? Email feedback@playtheclick.com.