Privacy
Firmle separates essential game storage from optional analytics.
Essential game data
A private Supabase authentication session identifies your browser. The service stores submitted guesses, Daily results, archive progress and streak data so the answer can remain server-side and your game can resume. The anonymous session is created only when you submit your first guess. Local storage keeps interface preferences and the persisted session. Unlinked anonymous accounts without activity for 90 days are removed; short-lived abuse-prevention hashes are deleted within 48 hours.
Optional analytics
Vercel Analytics and Speed Insights load only after consent. Product events never include search text, guessed companies, target companies or email addresses.
Privacy requests
Firmle’s anonymous registration uses a daily rotating IP HMAC for rate limiting, never the raw IP address. Supabase Auth applies additional endpoint limits. Data controller: Florian Meyer, Lerchengasse 6A, 1080 Vienna, Austria. Contact f@xcz.at for access, correction or deletion requests.