Privacy

• Your email — only for signing in.
• Your settings.
• Your blacklist / disliked prompts.
• The avatar you choose.
• Anonymous play counts, kept in your browser.

• Passwordless magic links — we never store any password.
• Anonymous play data lives in your browser (localStorage).
• Account data lives in a Postgres database.
• Sign-in emails are sent via Resend (transactional email).

We use a single httpOnly session cookie to keep you signed in. No advertising or tracking cookies.

We do not sell or rent your personal data to anyone. Your information is used only to run Chispa for you.

We keep your account data while your account exists. Delete your account and the associated data is removed. Anonymous play counts stay in your browser until you clear them.

You can permanently delete your account and its data at any time. See the account deletion page.

Questions about privacy? Email [email protected].

Last updated: June 2026