Privacy Policy

This Privacy Policy explains how Buddy Through Time (“we”, “us”, “our”) collects, uses, and protects information when you use the Buddy Through Time website at buddythroughtime.com and our companion mobile app (collectively, the “Service”).

By using the Service you agree to the practices described below. If you do not agree, please do not use the Service.

Information we collect

• Account information. If you sign in, our identity provider (Auth0) provides us with a unique user identifier and the profile information you have made available through the login method you chose (typically email address, display name, and avatar URL). We do not see or store your password.
• Gameplay data. When you play games, we store progress, scores, streaks, daily-challenge results, and similar records associated with your user identifier so we can show your history, leaderboards, and statistics.
• Generated game content. Some games use AI (Anthropic) to generate questions and prompts. The text of those prompts and your answers may be stored so we can avoid repeats and improve future rounds. We do not send your account email or other directly identifying profile data to the AI provider.
• Usage and device data. We collect standard request logs (IP address, user agent, timestamps, pages visited) and aggregate analytics via Google Analytics to understand how the Service is used.
• Cookies and similar storage. We use cookies and browser storage for authentication sessions, theme preferences, and analytics. See “Cookies” below.

How we use information

• To operate, maintain, and improve the Service.
• To authenticate you and keep your session secure.
• To save your gameplay history, preferences, and progress across devices.
• To generate new game content and prevent showing you the same AI-generated question twice.
• To monitor for abuse, debug issues, and analyze aggregate usage trends.
• To comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not show third-party advertising.

Third-party services we rely on

• Auth0 (Okta) — authentication and identity management. Subject to Okta's privacy policy.
• MongoDB Atlas — stores user profiles and game data. Subject to MongoDB's privacy policy.
• Anthropic — generates AI game content from prompts we send. We do not include your account profile in those requests. Subject to Anthropic's privacy policy.
• Microsoft Azure — hosts the Service. Subject to the Microsoft Privacy Statement.
• Google Analytics — aggregate, anonymized usage analytics. Subject to Google's privacy policy.

Cookies

We use cookies and similar browser storage for the following purposes:

• Authentication. Auth0 sets session and transaction cookies (for example, _btt_ax_*) so you can stay signed in and complete login flows securely.
• Preferences. We use localStorage to remember UI choices like your light/dark theme.
• Analytics. Google Analytics may set cookies to measure aggregate usage. You can block these with your browser or an extension.

Data retention

We keep account and gameplay data for as long as your account is active. Request logs are typically retained for a short period for security and debugging. If you delete your account, we will delete or anonymize the personal information associated with it within a reasonable timeframe, except where we are required to retain it (for example, to comply with legal obligations or resolve disputes).

Your choices

• Access & correction. You can view and update your basic profile through your identity provider.
• Deletion. To request deletion of your account and associated data, email privacy@buddythroughtime.com.
• Analytics opt-out. You can disable analytics cookies via your browser settings or a tracker-blocking extension.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

Security

We use industry-standard measures to protect information in transit (TLS) and at rest. No system is perfectly secure, however, and we cannot guarantee the absolute security of your information. To report a security issue, see our security.txt.

International users

The Service is operated from the United States. By using the Service you understand that your information may be processed in the United States and other countries, which may have different data-protection rules than your jurisdiction.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be highlighted on the Service.

Contact us

Questions or requests about this policy? Email privacy@buddythroughtime.com.