VersusEcho is a knowledge game that asks three comparison questions a day, times you and scores you. This policy explains what data is collected, why, and how it can be deleted. Data controller: VersusEcho.
Data collected
An account is required to play the daily game. Your game results (your answers, your time, your score and the date) are stored with your account. Practice mode in the archive can be used without an account and records nothing.
When you create an account, the username you choose and a one-way hash of your password are stored. No phone number or real name is requested.
An email address is OPTIONAL. If you provide one, it is used only to send you a password reset link when you forget your password; only you can see it, and you can change or delete it from the Profile screen in the app. It is never shown on the leaderboard or anywhere else.
If you choose a username, that name is stored alongside your game results and shown on the leaderboard.
Your password is never stored in plain text and nobody, including us, can see it. A forgotten password is reset with a single-use link sent to your email address (valid for 60 minutes) or with the recovery code shown once at sign-up; only one-way hashes of the link and the code are stored.
Location data is NOT collected
Your device's GPS is not used, browser location permission is never requested, and no location data is written to the database — including the country resolved from your IP address.
An earlier version of this product stored country and region codes. That practice has been removed entirely; the relevant columns and data have been deleted.
How data is used
Your username and password are used only to identify your account and to enforce the one-game-per-day rule.
Your email address is used only for the password reset links you request.
Your game results are used to build the leaderboards, your streak and your personal statistics.
Your data is not sold, is not shared with third parties for ad targeting, and you will not receive marketing email.
What is public
The leaderboard shows only your username, score, time and number of correct answers.
Choosing a username is optional; without one you appear unnamed on the leaderboard. You do not have to use your real name.
Which user a game belongs to is restricted at the database level; you cannot see the owner of any game other than your own.
Cookies and third parties
The website is only an introduction page and stores no account or game data. Its only cookie is your language preference (NEXT_LOCALE); it is not linked to your identity.
The app stores the session that keeps you signed in and your language, sound and "remember me" (username only) preferences on your device. Your password is not stored on the device; you may choose to save it in your device's password manager.
Advertising: ads may be shown in the app and on the website in the future (Google AdMob / AdSense). In that case Google may use advertising identifiers; you can turn off ad personalisation in your device or Google ad settings.
Infrastructure providers: Supabase (database and authentication), Cloudflare (hosting and network), Resend (sending password reset emails only), Google (advertising, if used). These providers' servers may be located outside your country.
Retention and deletion
Your data is kept for as long as your account exists. You can delete your account at any time in the app under Profile → Delete account. Deletion is immediate: your username, email address, password hash, recovery code, profile record and all game results are deleted together, and your games also drop off past leaderboards. This cannot be undone.
Old game records that were never linked to an account are deleted automatically after two days, and unused password reset links after one day.
If you cannot access the app, you can send a deletion request to the address at the bottom of this page; requests are handled within 30 days at the latest.
Your rights
Under GDPR and Turkish data protection law (KVKK) you have the right to access your data, request its correction or deletion, and object to its processing.
You can exercise these rights by writing to the contact address at the bottom of this page.
Children
The service is not directed at users under 13 and data is not knowingly collected from this age group.
Changes
When this policy changes, the update date at the top of the page is refreshed. Significant changes affecting its scope are announced in the application.
For requests and questions about this page: agosmartware@gmail.com