SheetHead
Privacy Policy
Last updated: September 27, 2026
This policy explains what personal data SheetHead ("we", "us") uses when you play at https://playsheethead.com, why we use it, who else handles it, and what you can do about it. SheetHead is operated by Yotam Aharon. Questions: sheethead14@gmail.com.
1. Data we use
Account and sign-in
You can sign in with an email address and password, with Google, or with Facebook. Sign-in is provided by Supabase Authentication. It stores:
- your email address (when the sign-in method provides one), a user ID, and the time you signed up and last signed in;
- your password, in hashed form only. SheetHead never sees or stores your password itself;
- if you use Google or Facebook, the account details that provider returns to Supabase. This is typically your name, email address, profile picture link and your account ID with that provider. SheetHead asks those providers only for basic profile and email access. It does not read your contacts, friends list or other content, and does not post on your behalf.
Your SheetHead profile
When you create an account we create a profile in our database containing your username, display name, avatar (one of the built-in avatars; we do not use your provider profile picture), your Trophy balance, and creation and update times. For social sign-in, your username and display name are initially derived from the name your provider supplies (never from your email address). You can change your display name and avatar in your profile.
Game records
Trophy changes and the results of games recorded by the SheetHead server are stored in our database and linked to your profile. Games you play against computer opponents and tournaments run in your browser are not sent to our server; see the next section.
Data on your device
SheetHead stores the following in your browser's local storage: your sign-in session, your settings, your local game statistics and history (kept separately for each account), and a marker if you used the offline practice option where available. SheetHead itself does not set cookies. This data stays on your device until you sign out, clear it, or the browser removes it.
What we do not collect
SheetHead does not use analytics, advertising or tracking tools, does not sell your data, and does not collect payment information, precise location, contacts or device sensor data.
2. Why we use it
- To create and secure your account, sign you in, keep you signed in, and let you reset a forgotten password (Supabase sends confirmation and reset emails to your address).
- To show your profile, save your Trophies and recorded game results, and run the game.
- To respond to your requests, including deletion requests.
3. Who else handles data
- Supabase hosts authentication and the database that hold the account, profile and game records described above.
- Vercel hosts the website. Like any web host, it processes technical request data such as IP address and browser type to deliver pages.
- Google and Meta (Facebook) process your sign-in when you choose those options, under their own privacy policies.
- The site loads fonts and code libraries from Google Fonts, Tailwind, unpkg and jsDelivr. Your browser contacts those services directly, so they receive your IP address and browser details.
We do not share your personal data with anyone else, except where the law requires it.
4. How long we keep it
Account, profile and Trophy data are kept while your account exists. When we delete your account on request (see Data Deletion), your profile and Trophy history are deleted. Recorded game results may remain in our database without any link to you. Data stored in your own browser is under your control.
5. Your choices and rights
You can edit your display name and avatar in your profile. You can ask us to access, correct or delete the data we hold about you, or to change your username, by emailing sheethead14@gmail.com. You can also stop using SheetHead's sign-in with Google or Facebook by revoking access in that provider's settings (see Data Deletion). Depending on where you live, you may have additional legal rights; contact us to exercise them.
6. Security
The site is served over HTTPS and the database restricts each user to the data they are allowed to see and change. We take reasonable care of your data, but no online service can guarantee absolute security.
7. Children
SheetHead is not directed at children under 13, and you must be at least 13 to create an account. If you believe a child has created an account, contact us and we will delete it.
8. Changes
We may update this policy as SheetHead changes. The date at the top shows when it was last revised.