Legal

Privacy policy

Last updated: October 23, 2026

Super Cube ("the game", "we") is run by Schloob, a game studio. Contact: niftytreefrog@gmail.com. This policy explains what we collect when you play at supercube.dev and what we do with it.

What we store

• An anonymous account ID. The first time you play, our authentication provider creates an account with a random ID and no name, email or password. Your browser keeps a session token for it so you stay the same player.
• Your display name, if you set one (otherwise a random name like cube-K7QF). It is public on the leaderboard.
• Your runs. For each ranked run: the random seed, start and submit times, your survival time, whether it was verified (or why not), and the replay, which is the list of moves you made and when. Replays are used to verify scores and to investigate cheating.
• If you save your account with Google: the Google account identifier and email address Google shares with us, linked to your player account. We don't receive your Google password.
• On your device only (browser local storage): your personal best, whether sound is muted, whether we've already asked you to pick a name, and the session token mentioned above.
• Technical data our providers handle when you connect, such as IP addresses in server logs and abuse protection.

Why

To run the game and its leaderboard, verify scores, prevent cheating and abuse, keep your account working, and show ads that pay for the game. Legal bases (EEA/UK): performance of our agreement with you (the game and leaderboard), legitimate interests (anti-cheat, security, abuse prevention) and consent where required (personalised ads and the cookies they use).

Who processes it

• Supabase: accounts, database and game servers. Your data is stored in the Americas.
• Cloudflare: hosting (Cloudflare Pages) and Turnstile, which checks that a new anonymous account isn't created by a bot. Turnstile is subject to Cloudflare's privacy policy and Turnstile privacy addendum.
• Google: AdSense ads when they are enabled (see below), and Google sign-in if you choose to save your account.

Ads and cookies

The game is free and may be supported by ads from Google AdSense. When ads are enabled, an ad may play when you press Retry, never during a run. Google and its partners may use cookies and similar technologies to show ads, limit how often you see them, measure them and prevent fraud, and, where you allow it, to personalise them based on your activity on this and other sites. See How Google uses information from sites that use its services. You can manage personalised ads at Google Ad Settings.

When ads are enabled, visitors in the EEA, UK and Switzerland are asked for consent through Google's certified consent message, and can change their choice at any time through the link that message provides.

We don't use analytics. The game itself sets no tracking or analytics cookies, and its fonts are served from our own site.

What's public

Your display name, best verified time and rank are shown to everyone on the leaderboard. Replays and account details are not public.

How long we keep it

Account data and verified runs are kept while your account exists. Rejected and abandoned runs are kept for 90 days for anti-cheat purposes, then deleted. Anonymous accounts with no activity for 12 months are deleted, together with their name, runs and leaderboard entry. Both clean-ups run automatically every day.

Your choices and rights

You can change your display name at any time on the leaderboard page. The same page has a Delete my account button: it immediately and permanently deletes your account, name, runs and leaderboard entry from our servers and signs you out on that device. To get a copy of your data, or if you can't use the button (for example because you cleared your browser data), email niftytreefrog@gmail.com from the Google account you linked, or include your player name and the approximate times you played. Depending on where you live you may also have rights to object, restrict processing and complain to a data protection authority.

Children

Super Cube is not directed at children under 13. If you believe a child under 13 has created an account, contact us and we'll delete it.

Changes

We'll update this page when what we collect changes, and change the date at the top.