Privacy Policy — Betablight

The TL;DR. Betablight only collects what it needs to sign you in and show a leaderboard: an account ID from Apple or Google, a public display name you choose, and the scores of your runs. No ads, no tracking SDKs, no location, no contacts, no advertising identifiers.

1. Who we are

Betablight is a mobile arcade game published by DILINX. This Privacy Policy describes how the Betablight mobile application ("the App") handles information.

If you only play offline without signing in, the App collects no personal information at all — local game state stays on your device.

2. Information we collect

When you sign in

Betablight uses Sign in with Apple and Google Sign-In to create your account. When you sign in, we receive and store:

A stable user identifier issued by Apple or Google. This identifier is how we know it's you on the next sign-in — it is not your Apple ID password or Google password.
A display name candidate that we derive from the "name" or email local-part your sign-in provider supplies. This is used only to seed your initial username.
Your chosen username, which you can edit from the main menu. Your username is visible to other players on the public leaderboard.

We do not store your email address in the App's own database. If your sign-in provider includes an email in the authentication payload, it is retained by our authentication infrastructure (Supabase Auth) solely to keep your account unique, and is not used for marketing or shared with anyone.

While you play

Run scores. Every completed run uploads a score (an integer) tied to your user ID and a timestamp. This is used to compute your best score and power the global leaderboard.
Best score. The App keeps your personal best to display on the menu and in the HUD.

On your device only

Local game settings — sound preference, last-session progress, and a cached copy of your profile. These live on your device and never leave it.
Auth session tokens — stored securely in the device keychain / secure storage so you don't need to sign in every launch.

3. Information we do NOT collect

No location, IP address history, or device identifier we can use to identify you across apps.
No contacts, photos, calendar, microphone, or camera access.
No advertising identifiers (IDFA / AAID). There is no advertising in the App.
No third-party analytics SDKs and no crash-reporting SDKs.
No cookies, tracking pixels, or cross-app fingerprinting.
No payment information — the App has no in-app purchases.

4. How we use your information

To sign you in and keep your account consistent across sessions and devices.
To show your best score in the App and your username + best score on the public leaderboard.
To prevent abuse (for example, rate-limiting impossible scores).
To respond to support emails you send us.

We do not sell your data. We do not share it with advertisers. We do not build profiles for marketing.

5. Where your data is stored

Account and score data is stored in Supabase, a managed PostgreSQL platform, on servers operated on our behalf. Supabase acts as a data processor under our instructions. Data is protected in transit (HTTPS / TLS) and at rest using Supabase's encryption.

Sign-in is handled by Apple (Sign in with Apple) and Google (Google Sign-In). Their use of your sign-in information is governed by their own privacy policies:

6. Third parties

The App does not include any third-party advertising networks, analytics SDKs, or social tracking pixels. The only third-party services used are the ones strictly required to run the App:

Supabase — authentication, profile storage, and leaderboard database.
Apple / Google — OAuth sign-in.

Apple's App Store and Google Play independently collect their own platform-level data when you download or update the App. That collection is governed by their policies, not ours.

7. Your choices and rights

Play without an account. You can use the App anonymously. You won't appear on the leaderboard, but nothing about you leaves your device.
Change your username. You can edit your public display name from the main menu at any time.
Sign out. Signing out removes the cached auth session from your device. Your server-side profile and scores remain associated with your Apple or Google user ID so you can sign back in later.
Delete your account and data. Email support@dilinx.com from an address associated with your Apple or Google sign-in and ask us to delete your account. We will remove your profile row and all linked score rows from our database within 30 days and reply to confirm.
Revoke Sign in with Apple. On your Apple device, go to Settings → your name → Sign-In & Security → Sign in with Apple, select Betablight, and tap Stop Using. This will prevent future sign-ins; to also remove the data from our servers, email us as above.
Access or export your data. Email us and we'll send you a JSON dump of your profile and scores.

8. Children's privacy

Betablight is rated for a general audience. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information through the sign-in flow, please email support@dilinx.com and we will delete the associated account.

9. International users

Betablight can be used worldwide. Your account and score data may be stored on servers outside your country of residence. By using the App and signing in, you consent to this transfer. Where applicable (GDPR, UK GDPR, CCPA, and similar regulations), you retain your rights to access, correct, export, or delete your data — see section 7.

10. Data security

Data in transit is protected with TLS. Authentication tokens are stored in the device's secure keychain. Database access is restricted by row-level security policies so that each account can only modify its own profile and scores. Public leaderboard data (username + best score) is intentionally readable by everyone.

No system is perfectly secure. If we learn of a breach that materially affects your data, we will notify affected users as required by law.

11. Data retention

We keep your profile and scores for as long as your account exists. Inactive accounts are retained so you can return later with the same best score. You can delete your data at any time — see section 7.

12. Changes to this policy

If we change how the App handles information, we will update this page and bump the "last updated" date above. Material changes will also be reflected in the App before they take effect.

13. Contact

Questions, data requests, or deletion requests can be sent to support@dilinx.com.