8-BIT RETRO DERBY — Privacy

Last updated October 26, 2026. Contact: theretroderby@gmail.com

8-BIT RETRO DERBY is a baseball game. You never need an account to play. There are no ad networks and no ad tracking, and the game never asks for a phone number, a contact list or a location. Signing in with Google is optional (see below).

What is stored, and where

On your device. Your club, your season, your daily record, the name you chose, your player code, your recovery code and the list of players you have blocked. Clearing the site data (or deleting the app) removes all of it.

Anonymous play stats. To see which parts of the game get played and for how long, the game sends us a random device number made up just for this (not your player code, not linked to your name), the game version, whether it is a phone, tablet or computer, and how many seconds were spent in each part of the game. Nothing else - no name, no location, no contacts. Only the developer can see these totals. You can turn this off any time in SETTINGS → PRIVACY → COOKIES; turning it off stops it and deletes the device number. See the Cookie Policy.

On our server (Supabase, in the EU/US region of that project):

• The player code your device made up — eight characters, random. It is not derived from anything about you or your phone.
• Your chosen name and daily score, if you play the Daily Derby. This is the public leaderboard: name, homers, distance, date.
• Your Daily Derby career stats: total homers and pitches, wins, losses and crowns, plus each home run you hit (park, distance, direction and date) for the record book and Hall of Fame.
• Your referral code, if you share the game: a random code for your share link, and the player codes of devices that opened it, so the extra life or locker reward can be counted.
• Your ranked record, if you play ranked online: name, rating, wins, losses and the results of those games.
• Your club (players, XP, kits) kept under your player code, so a new phone can get it back.
• Leagues you are in: club names, results and schedules, readable by anyone who has that league's five-letter code.
• Reports you send about another player: the name reported, the reason, and the player code of the device that sent it.
• If you sign in with Google (optional, from SETTINGS): see the next section.

That is the whole list. No IP-address logging beyond what our host keeps for ordinary security and abuse prevention, no third-party trackers, nothing sold or shared with anybody.

Optional Google sign-in

Signing in with Google only exists so a cleared browser or a new phone can get your club, leagues and name back. If you choose to sign in, Google shares your name, email address and profile picture with our sign-in service (Supabase Auth, the address ending in supabase.co). We use them for one thing: to recognize you when you sign in again, so we can give you back your player code. Your email and Google name are never shown to other players, never used to contact you about anything other than your account, and never sold or shared.

Alongside your Google account we keep your player code, the private keys that prove your saves are yours, and your in-game name. You can sign out at any time from SETTINGS. To remove the sign-in record completely, email us and we will delete it. You can also revoke access at any time from your Google Account under Security → Third-party apps & services.

Who helps us run the game

• Supabase - our database and sign-in service.
• Netlify - hosts the website (it keeps ordinary server logs for security).
• Google - only if you choose to sign in with Google.

Each only gets what it needs to do that job. There are no advertising, analytics or social-media SDKs in the game: the X and Facebook links on the title screen are plain links that only take you there if you tap them.

Why we use it (the legal bit)

We keep what is needed to run the game you asked to play (your save, scores, leagues, sign-in) to provide that service; the anonymous play stats to improve the game (you can switch them off at any time); and reports and blocks to keep the game safe for everyone.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct or delete it, or object to how it is used - email us with your player code and we will answer within 30 days. Depending on where you live (for example the EU/UK under the GDPR, or California under the CCPA) you may also complain to your local data protection authority. We do not sell or "share" personal information for advertising.

Children

The game is suitable for all ages and can be played fully without signing in, in which case it collects no personal information at all. Google sign-in is optional and subject to Google's own age requirements (13 or over, or the age of digital consent where you live). The only thing a player can publish is the short name they choose, which is filtered for offensive words before it is accepted.

Other players

The only thing other players can see about you is the name you chose and how you played. You can report or block any player from the leaderboard and from a league's club list. A blocked player's name is hidden from you everywhere. Reports are read by us and acted on — an offensive name is removed and the player can be barred.

Deleting everything

In the game: SETTINGS → PLAYER CODE → DELETE MY DATA. That wipes the device and asks the server to delete your club. If you signed in with Google, email us as well and we will delete the sign-in record too. Your name is released, and your device becomes a brand new player with a new code. Leagues you were in keep the club you left behind as a computer-run club, so other people's seasons still add up; ask the league's host to remove it if you would rather it went.

If you would prefer us to do it, email theretroderby@gmail.com with your player code (and the Google email you signed in with, if any) and we will delete it all within 30 days.

Changes

If this ever changes, the date at the top changes with it.