1. Data we process
When you register, we receive a username, email address and a salted password hash. We do not store the plaintext password. Email is used for verification, sign-in and password resets and is never displayed on the leaderboard.
Training settings, crosshair settings, personal training history and daily challenge results are stored in your browser by default. For eligible signed-in runs, we receive the drill, score, accuracy, reaction time, streak, duration, submission time and training events, and the server recalculates the result. The leaderboard publicly displays the username, country or region, and personal-best result. Country or region is estimated from network location and can be corrected by the account holder.
2. Abuse prevention
To limit spam and manipulation, the server may temporarily process network addresses and request information. A network address may be used to create a non-reversible summary and enforce rate limits; it is not displayed on the leaderboard.
3. Local storage and sign-in cookie
The site uses browser local storage for sensitivity, crosshair, training records and daily challenge state. You can clear this information through browser site-data settings or the delete controls in Training Records. Sign-in uses a secure server-only cookie; the current session is cleared when you sign out.
4. Analytics, advertising, cookies and consent
We use Google Analytics 4 (GA4) to understand page visits, traffic sources and basic interactions so we can improve content and features. The site may also use Google AdSense to display ads. Google and its partners may use cookies, local storage, IP addresses, device information and ad interaction data to provide analytics, deliver and measure ads, limit repetition and prevent fraud. Ads may be personalized or non-personalized depending on location and consent choices.
Where consent is legally required, we will provide a consent-management interface before loading the relevant advertising technology. See our Cookies & Advertising notice and How Google uses data from partner sites.
5. Retention and deletion
Local data remains under your browser's control. Account and leaderboard data is retained while needed to provide account and ranking features; expired verification, reset and sign-in credentials become invalid and may be removed. Contact us from the registered email address to request account or public-score deletion.
6. Children's privacy
The site is not directed to children under 13 and does not intentionally collect real names, precise locations or contact details from them. Minors should use the public leaderboard only with a parent or guardian's consent.
7. Service providers and international access
We use Cloudflare for hosting, database services, security and content delivery, an email provider for verification and password-reset messages, and Google for analytics and possible advertising. These providers may process information through global infrastructure under their own data-protection practices.
8. Security and policy changes
We use reasonable safeguards for the leaderboard service, but internet transmission cannot be guaranteed as completely secure. Material updates to this policy will be shown with a new effective date.
9. Contact
Privacy questions and score-deletion requests can be sent to [email protected].