Legal

Privacy Policy

This policy describes what HumanRank collects, why it is used, what appears on leaderboards, and how you can exercise privacy rights.

Last updated: August 29, 2026

1. Controller and contact

HumanRank is responsible for the personal data it decides to collect and use through the app. For privacy requests, contact support@humanrank.app.

2. Data we collect

Account data: Email address, authentication identifiers, session information, login provider, account creation date, and password reset events. Passwords are handled by the authentication provider and are not displayed in the app.
Profile data: Player name, date of birth, country, and sex category. The date of birth is used to calculate age for rankings and filters.
Gameplay and ranking data: Game results, attempts, reaction times, levels reached, accuracy, errors, clicks, words seen, misses, platform, timestamps, ranks, and best score details.
Local device and browser data: Theme preference, sound and haptic settings, game settings, recent local attempts, unsynced scores, and password reset cooldown timestamps stored on your device through app storage, localStorage, or similar local storage.
Support and request data: Subject and message text sent through your email client when you contact support, plus any information you submit through the embedded Google Form on the request page.
Analytics data: Page views, referrers, approximate location, browser, operating system, device type, consent signals, and other website usage data processed through Umami and Google Analytics to understand site traffic and improve HumanRank.
Advertising data: Adsterra on the website and Google AdMob in the mobile app may process cookies or app storage, IP address, advertising identifiers, device and browser information, app interactions, ad impressions, ad interactions, approximate location, and visits to HumanRank or other services to serve, measure, limit, and personalize ads where permitted.
Subscription and payment data: RevenueCat customer identifiers, entitlement status, purchase status, subscription events, transaction metadata, receipts, donation or support payment metadata, and billing or payment information processed by RevenueCat, Ko-fi, and payment providers when paid features or support links are offered or used. Payment card details are handled by payment providers and are not stored by HumanRank.
Technical data: IP address, device, browser, security, diagnostic, and log data that may be processed by hosting, authentication, database, or form providers when the service is delivered.

The current hearing and color blindness test components run in the browser and do not save test results to your account or to the leaderboard database.

3. Why we use data

Provide accounts and sessions: Used to create accounts, log you in, keep you signed in, send confirmation or password reset emails, and secure your account. Legal basis: contract and legitimate interest in account security.
Operate profiles and leaderboards: Used to save your profile, store eligible scores, calculate ranks, filter rankings by country, age, and sex category, and display public leaderboard entries. Legal basis: contract.
Remember app preferences: Used to keep your theme, sound and haptic settings, game settings, recent local attempts, unsynced scores, and short reset cooldowns on your device. Legal basis: legitimate interest and storage strictly necessary for requested features.
Support and requested communications: Used to respond when you contact us, report a bug, suggest a game, or ask a privacy question. Legal basis: legitimate interest or steps taken at your request.
Measure website usage: Used to understand page views, traffic sources, and general usage patterns through Umami and Google Analytics. Legal basis: legitimate interest in improving the service or consent where required.
Show and measure advertising: Used to display ads, fund the service, prevent ad abuse, measure ad performance, and personalize ads where you have given consent or where local law allows. Legal basis: consent where required, otherwise legitimate interest or the applicable basis used by the advertising provider.
Provide paid features: Used to identify logged-in customers, process web purchases, manage subscriptions, grant or revoke premium entitlements, send receipts, and prevent payment abuse. Legal basis: contract and legal obligation where billing records are required.
Protect HumanRank: Used to prevent fraud, cheating, abuse, attacks, and technical misuse, and to enforce the Terms of Service. Legal basis: legitimate interest and, where applicable, legal obligation.

HumanRank does not sell personal data. HumanRank uses Umami and Google Analytics for website analytics, Adsterra for website advertising, Google AdMob for advertising in the mobile app, and RevenueCat for connected customer and entitlement management.

4. Public leaderboard information

If you are logged in with a complete profile and submit an eligible score, leaderboard pages may show your player name, country flag, age calculated from your date of birth, sex category, platform, rank, score metrics, attempt details, and record date.

Your email address and exact date of birth are not displayed on public leaderboard rows in the current app.

5. Third-party providers

Supabase is used for authentication, account sessions, profile storage, score storage, database calls, and account deletion.
Google and Discord can be used as OAuth login providers if you choose those sign-in methods.
Google Forms is embedded on the request page. Information submitted in that form is processed by Google and by HumanRank for the request workflow.
Umami is used for privacy-focused website analytics, including page views, traffic sources, device and browser information, and aggregated usage metrics.
Google Analytics is used for website analytics, including page views, traffic sources, approximate location, device and browser information, and usage events.
Adsterra is used to display and measure ads on the website, and Google AdMob is used to display and measure ads in the mobile app. These providers and their advertising partners may use advertising identifiers, cookies, app or browser storage, and similar technologies to serve ads, measure performance, limit repetition, prevent abuse, and personalize ads where permitted.
RevenueCat is used to identify logged-in customers, manage purchase status, subscriptions, entitlements, receipts, and related customer lifecycle events.
Stripe is used as a payment provider for web purchases where paid features are offered. Payment card details are processed by Stripe and are not stored by HumanRank.
Ko-fi is linked for optional support payments. If you use that link, Ko-fi and its payment providers, such as Stripe or PayPal, process the donation or support payment under their own terms and privacy policies.
Your own email provider or mail app processes the content you send when you use the contact page's mailto flow.
Hosting and infrastructure providers may process technical logs needed to serve, secure, and diagnose the app.

Some providers may process data outside your country or outside the European Economic Area depending on their configuration and infrastructure. Where required, transfers should rely on appropriate safeguards offered by those providers.

6. Retention

Account, profile, and saved score data are generally kept while your account remains active or until deletion is completed.
Unconfirmed accounts may be automatically deleted after a short period if the email address is not verified.
Leaderboard records may remain until replaced, corrected, moderated, or deleted with the related account.
Local app and browser data remains on your device until it is overwritten, expires, the app or site data is cleared, or the app is uninstalled. Scores waiting to be synchronized may be uploaded when you next sign in or reconnect.
Support emails, form responses, and technical logs are kept only as long as reasonably needed for support, security, legal, and operational purposes.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. You may also withdraw consent where processing is based on consent.

To exercise rights, email support@humanrank.app. We may need information to verify that the request relates to your account. In the European Union, privacy requests are generally answered within one month.

You can permanently delete your account and saved scores from the profile screen in the mobile app or from the profile page on the website after signing in. You may also contact us to request deletion or correction where privacy law gives you that right. Local data on a device may remain until you clear the app or browser data or uninstall the app.

If you are in the European Union, you can also lodge a complaint with the CNIL or with your local data protection authority.

8. Security

HumanRank relies on mobile operating system and browser security, authentication flows, database access controls, and service provider protections to keep data secure. No online service can guarantee perfect security, so you should use a strong password, keep your OAuth accounts protected, and log out on shared devices.

9. Children and minors

HumanRank is not designed for children who cannot legally consent to online services in their country. If you believe a child used HumanRank without required permission, contact us so we can review and delete the relevant account data where appropriate.

10. Updates

We may update this policy when HumanRank changes, when providers change, or when legal requirements change. The updated date at the top of this page shows the latest version.