What we process
To run the game, we process a guest or account identifier, your chosen nickname and avatar, room membership, clues, card choices, votes and scores. If you sign in with Google or an email link, Supabase Authentication also processes the account details needed for sign-in, such as your email address and Google-provided basic profile information. Luminaria does not ask for your Google password.
Messages you send in a room chat are delivered to that room’s participants. Your browser keeps up to 50 recent chat messages for that room. Room and game data are stored in Supabase; a finished game’s generated epilogue may also be stored there.
How we use it
We use this information to sign you in or recognize your guest session, keep rooms and game rounds in sync, show your profile to other players, calculate results, and let you return to a room. Nicknames, avatars, chat messages and relevant gameplay are visible to people in the same room. If a room is public, its lobby can be listed to site visitors.
At the end of a game, round clues are sent to Cloudflare’s AI service to create a short shared story. The request contains the clues, not players’ email addresses. Do not include private information in clues or chat messages.
Feedback and technical information
If you use the feedback form, the text you submit is sent to the developer through Telegram. The form does not request your email address. The service temporarily uses your IP address in memory to limit spam; it is not included in the Telegram message. Cloudflare and Supabase may process technical request and security information needed to operate the site.
Your browser and service providers
The game uses browser storage for your language preference, guest display profile, sign-in session, room-return information, recent room chat and game state. Clearing site data can remove these local copies and may prevent automatic return to a guest seat. The site does not currently include advertising or third-party analytics code. Core service providers are Cloudflare (hosting and AI), Supabase (authentication, database and realtime), Google (if you choose Google sign-in), and Telegram (only if you submit feedback).
Retention and your choices
Browser data remains until you clear it or the game removes a particular item. Room and account records may remain in Supabase while needed to run the service; closing a room or leaving it does not necessarily delete every related account record. You can avoid Google sign-in by playing as a guest, leave a room, clear local site data, or request access to or deletion of your account-related information. Send requests and privacy questions through the feedback form on the home page (choose “Help improve the game”). If you need a reply, include a contact address in your message. We may need enough information to verify that an account is yours before acting on it.
Changes
We may update this policy when the game or its data practices change. The date above shows the latest version. This policy describes Luminaria’s own processing; the linked providers publish their own privacy notices.