feats Privacy Policy
Effective: 16 October 2026 · Last updated: 17 October 2026
Who we are
feats (feats.world) is a free daily world record guessing game. It is run by Russell Rozenbaum, an individual based in Michigan, USA ("we", "us"). Questions about this policy go to rjrozenbaum@gmail.com.
The short version
- There are no accounts, no ads, and we set no cookies.
- Your progress is saved in your own browser, not on our servers.
- When you play today's puzzle, we log each guess anonymously. A play has no name, email, account or ID attached, and we don't link plays to each other or to you.
- We also record how the site is used during a visit (which screens you see, what you click, how far you scroll, how long the page is open) so we can improve the game. A visit is tagged with a random number that lives only in that open tab. It is never saved on your device, so we can't connect one visit to another or to you.
- If you send a record request or feedback, we keep what you write — and your email, only if you choose to give it.
- We do not sell or share your personal information.
Information we collect
| What | When | Where it's kept |
|---|---|---|
| Your progress — your guesses for each day, your stats and streak, and whether you prefer metric or imperial units | As you play | In your browser's local storage, on your device. It is not sent to us. |
| Plays — the puzzle date, which card and record, your guess, how far off it was and in which direction, how long you took, metric or imperial, your country, your device type (phone, tablet or desktop), and the website that sent you here (its domain name only) | When you submit a guess on today's puzzle, and when you finish the day | Our database (Supabase). |
| Site usage — the screens you reach, the buttons and links you click (by their label), how far you scroll, how long the page is in view, errors the page hits, plus once per visit the website that sent you (domain only), the link tag you arrived by, whether you've played before on this browser and how many days, your screen width, browser language, unit preference, country and device type. Each visit gets a random visit number that exists only in that open tab. | While you're on the site | Our database (Supabase). |
| Guess counts — how many players' guesses landed in each range, per record and per day | Added up from plays | Our database (Supabase). These are totals, not individual plays. |
| Requests and feedback — what you write, the puzzle date on screen, and contact details only if you choose to give them | When you use the "Request a record" or "Leave feedback" forms | Our database (Supabase). |
| Connection data — your IP address, your browser's user agent and the pages you request | Every visit, as with any website | Processed by our host, Cloudflare, to deliver the site and protect it from abuse. We use it only to work out your country and device type for plays and site usage, and to briefly limit how many requests one connection can send, so nobody can flood the game. We don't store your IP address. |
Your country comes from your connection, as a two-letter code (for example "US"). Your device type is worked out from your browser's user agent; we don't keep the user agent itself.
Content from other services
Some parts of the page load from other companies, which then receive your IP address and browser information under their own policies:
- Google Fonts. Your browser downloads the site's fonts from Google.
- YouTube. Some answers include a video. We embed it in YouTube's privacy-enhanced mode, which sets no cookies until you play the video; once you play it, YouTube may collect data as described in Google's policy.
- Source links. Each answer links to the page that proves it. Those sites have their own privacy policies.
Record photos are hosted by us. They come from Wikimedia Commons and are credited on the answer.
How we use information
| Purpose | Information | Lawful basis (GDPR) |
|---|---|---|
| Run the game and save your progress | Your progress, in your browser | Providing the service you asked for |
| Show "how everyone guessed", "closer than X% of players" and "Top X%" | Guess counts | Legitimate interests in running the game |
| Understand how the game is played and improve the puzzles — averages, time taken, where players stop, where they come from | Plays, site usage | Legitimate interests in improving a free game. Both are anonymous. |
| Read your request or feedback and reply | Requests and feedback | Legitimate interests; your consent for optional contact details, which you can withdraw at any time |
| Keep the site secure and working | Connection data | Legitimate interests |
We don't use your information for advertising, and we don't profile you or make automated decisions about you.
Who processes your information
| Company | What they do for us | Information involved | Where | Their policy |
|---|---|---|---|---|
| Cloudflare | Hosting, delivering the site, protecting it from abuse | Connection data | Global network; US company | cloudflare.com/privacypolicy |
| Supabase | Database | Plays, site usage, guess counts, requests and feedback | United States (Ohio) | supabase.com/privacy |
| Google (Google Fonts, YouTube) | Fonts; embedded videos | Connection data; video viewing data once you play a video | United States | policies.google.com/privacy |
How long we keep it
- Your progress stays in your browser until you clear your site data. You can also add
?resetto the address to clear it. - Plays and guess counts are kept for as long as the game runs, so past days' charts keep working. They are anonymous.
- Site usage is kept for as long as it's useful for improving the game. It is anonymous.
- Requests and feedback are kept as long as we need them to review and reply. We'll delete yours if you ask.
Your rights
Depending on where you live — including the EU, the UK and several US states — you may have the right to:
- access the personal information we hold about you;
- correct it;
- delete it;
- restrict or object to how we use it;
- receive a copy of it in a portable format;
- withdraw consent where we rely on it;
- complain to your local data protection authority.
To use any of these, email rjrozenbaum@gmail.com. We'll reply within 30 days.
Plays and site usage carry no identifier that outlives a visit, and we don't link them to you, so we have no reliable way to find a particular person's plays. The only information we hold that can identify you is a request or feedback message that includes your contact details. Your progress lives in your own browser, and you can delete it yourself by clearing your site data.
Your California privacy rights
We do not sell or share personal information, as those terms are defined in the California Consumer Privacy Act (as amended by the CPRA), and we have not done so in the past 12 months. We do not collect sensitive personal information. California residents have the right to know what we collect, to delete it, to correct it, and not to be treated differently for exercising these rights. Email us to use them.
Children
feats is a general-audience game. It is not directed at children under 13, and we don't knowingly collect personal information from them. If you think a child under 13 sent us contact details through the feedback form, email us and we'll delete them.
International transfers
We and our providers are based in the United States, so information about players outside the US is processed there. Where the law requires it, we rely on the safeguards our providers offer, such as the European Commission's Standard Contractual Clauses.
Security
The site is served over HTTPS. Our database can be written to only by our own server, and the public cannot read it. No system is perfectly secure, but we keep what we collect small, and most of it can't identify you.
Changes to this policy
If we change this policy, we'll update the date at the top. If a change is significant, we'll also note it on the site.
Contact
Russell Rozenbaum · Michigan, USA · rjrozenbaum@gmail.com
This document was drafted by synthesizing publicly available lawyer-vetted templates and adapting them to the project's specific stack. It is not a substitute for review by a qualified attorney in the operator's jurisdiction. Formal legal review is recommended once the project has meaningful revenue or material EU data subject volume.