Privacy Policy

This Privacy Policy explains how Tomorrow Matrix ("we", "us", the "Service") collects, uses, and safeguards your information when you use our web application. Tomorrow Matrix is an educational climate-strategy game. We aim to collect as little personal data as possible and to be clear about what we do collect and why. By using the Service, you agree to the practices described below.

1. Information we collect

We collect the following categories of information:

• Account information. If you create an account, we collect your email address and a display name. If you sign in with Google, we receive your name, email address, and profile picture from Google in accordance with your Google account settings. We do not receive your Google password.
• Authentication data. We store the credentials and session tokens needed to keep you signed in. Passwords, where used, are hashed and never stored in plain text by our authentication provider.
• Gameplay data. Your in-game progress, chosen role, decisions, Climate Action Points, journal entries, and similar game state, so your progress can be saved and restored.
• Multiplayer data. When you create or join a multiplayer session, we store the session code, your chosen display name, your selected role, and the events and votes you contribute during that session so other players in the same session can see them.
• Guest data. If you play as a guest without an account, your progress is stored locally in your browser (local storage) and is not sent to our servers as an account record.
• Technical data. Basic technical information such as your browser type and IP address may be processed by our hosting and infrastructure providers to deliver and secure the Service.

2. How we use your information

• To create and manage your account and authenticate you.
• To save, sync, and restore your gameplay progress across devices and sessions.
• To operate real-time multiplayer sessions and share relevant state with players in your session.
• To maintain the security, integrity, and reliability of the Service.
• To respond to your requests and provide support.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Service providers

We rely on the following third-party providers to run the Service. Your data is processed by them only to provide functionality to us:

• Supabase, database, authentication, and real-time infrastructure that stores your account and gameplay data.
• Vercel, application hosting and content delivery.
• Google, optional "Sign in with Google" authentication, if you choose to use it.

4. Cookies and local storage

We use cookies and browser local storage for essential purposes only: to keep you signed in, to remember your preferences (such as audio settings), and to store guest progress on your device. We do not use advertising or cross-site tracking cookies.

5. Data retention

We retain account and gameplay data for as long as your account is active. Multiplayer session records are retained to support ongoing and recent sessions and may be removed periodically. Guest progress stored in your browser remains until you clear your browser storage. You may request deletion of your account and associated data at any time.

6. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent. To exercise these rights, contact us using the details below. You can also delete most guest data yourself by clearing your browser's local storage.

7. Children's privacy

Tomorrow Matrix may be used in educational settings. We do not knowingly collect more personal information than is necessary to provide the Service. If you believe a child has provided us personal data without appropriate consent, please contact us and we will take reasonable steps to delete it.

8. Security

We take reasonable technical and organizational measures to protect your data, including encrypted connections and access controls at the database level. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

10. Contact us

If you have questions about this Privacy Policy or how your data is handled, contact us at privacy@example.com.