Privacy notice

UmaPeek does not require an account and does not use advertising or analytics cookies.

Information used

Like other websites, UmaPeek receives your IP address when your device connects. For fair-play checks, the game immediately turns it into a private one-way code and stores the code instead of your address. This helps enforce Daily attempt limits, continue an active run, limit spam, and show only one best Roster Challenge entry on each board.

If you submit a trainer name, it is stored with your score and displayed publicly. Trainer names are informal display labels and are not verified identities. Game settings, guesses, reveals, scores, timestamps, moderation reports, and random session identifiers are also stored. Theme, motion, roster preferences, default trainer name, and active-session recovery are stored only in your browser.

UmaPeek records short, scrubbed error messages, request identifiers, response status, and timing so faults can be diagnosed. Client reports do not include trainer names, page contents, raw IP addresses, browser fingerprints, or full URLs; URL, email, and session-like values are removed before platform logging.

Vercel Web Analytics collects anonymized, aggregate page-view information such as the visited page, referring site, approximate country, browser, operating system, and device type. It does not use cookies or collect a persistent visitor identifier.

Providers

Vercel hosts the website and server functions and provides cookie-free Web Analytics. Neon hosts the production database. Google Fonts may receive normal web-request information when the interface font is downloaded. These providers may process information in other countries under their own terms.

Retention

Abandoned runs are removed after 7 days, ranked Roster Challenge runs after 180 days, and Daily runs after 400 days. Resolved moderation reports are removed after 90 days. A share link keeps a separate public summary containing the submitted trainer name and run statistics so the link can continue working after the original session is deleted.

Public information and removal

Trainer names and run statistics are public once submitted. Never use your legal name or other identifying information. To request review or removal of a leaderboard name, use the report flag beside that entry and state that it is a removal request. Reports use another private one-way network code to limit spam; that code is never displayed publicly.

Security

Answers and source artwork remain on the server. Requests are rate-limited and game actions are verified against server state. No internet service can promise absolute security or perfect anti-cheat protection.

Changes

This notice may change when hosting, retention, or game features change. The date above will be updated when it does.