16 COLORS - PRIVACY POLICY ========================== Effective: October 16, 2026 16 Colors (https://16colors.net) is a small collection of classic desktop puzzle games. It is run by FilmSchool.app. This policy explains what the site stores about you, why, and how to remove it. Questions go to hello@16colors.net. WHAT WE COLLECT --------------- You can play without logging on. If you do, nothing about you is sent to our server; your games and records stay in your browser's local storage on that device. If you choose "Log On" with Google, we receive and store: * Your Google account ID (a number Google assigns, used to recognize you next time) * Your email address, if Google has verified it * Your first name (or display name), shown in the taskbar While you are logged on, we also store what you do in the games: * Records: for each finished game, which game and size, whether you won, the time taken, the number of moves, and when you played * Saved state: the windows you have open on the 16 Colors desktop and where they are, each game in progress, your game options, and any text you type into Notepad's Notes.txt If you choose a handle in Profile, we also store: * Your handle and the picture you picked. These are the only things other players will see about you; they never see your Google name or email. When you change your handle or delete your account, we keep the old one reserved for 90 days so no one else can take it and pretend to be you, then forget it. If you're registered and use a picture of your own in Profile, your photo never leaves your device. Your browser shrinks it to a 64 by 64 pixel, 16-colour picture, and only that small picture is sent and stored (we never receive or keep the original). Before anyone else sees it, it is checked by automated moderation services (see below). If they all pass it, it is shown; if any of them flags it or can't check it, the site administrator looks at it first. The administrator may look at any picture. Other players can report a picture, which sends it back to the administrator. A rejected picture, or one you replace, is deleted after 30 days. The picture you're using is deleted with your account. If you use Friends, we also store: * Your friend list, friend requests you send and receive, and the players you block. People you are friends with, and people you send a request to, see your handle and picture. * Who can find you to send a friend request: anyone who knows your handle (the default), or only people with your friend link; and whether people who know your email address can find you by it (off unless you turn it on in Profile > Privacy). Finding you by email shows them only your handle and picture, never your email. * The nicknames and notes you type on friends' cards in Friends.crd. Only you see them. * Your best times and high scores are shown to your friends in Records > Leaderboard, unless you turn that off in Profile > Privacy. Friends see your bests per game and size, not each game you played. * Reports you make about another player, so we can review them. A report includes your last 50 instant messages with that player, if any, so we can see what happened. If you play a friend in Matches (Reversi, Chess or Tic Tac Drop), we store each match: the game, who played which side, every move and when it was made, and the result. You and your opponent can both see it. Finished matches are kept so you can see your record against each friend; deleting your account removes your name from them. If you use 16Colors Instant Messenger (1IM), we store the messages you send and receive (text only), when they were sent and whether they have been read. Only you and the friend you are chatting with can see them. Messages are deleted automatically after 30 days, and right away if either of you deletes your account. We do not read messages unless one of you reports the other. 1IM also shows your friends when you have 16 Colors open, and your away message if you set one, unless you turn that off (Show I'm Online in 1IM's Buddy List). Text formatting you choose (font, size, colour) is stored with each message. If you register, Stripe handles the payment and we store only what's needed to know you're registered: your registration type, when it ends, and the customer number Stripe gives us. We never see or store your card details. We remember which accounts sign in on the same browser, only to protect the leaderboards from cheating. We do not ask Google for your contacts, files, calendar, or anything beyond your basic profile and email. WHAT WE DO NOT DO ----------------- * No advertising and no ad networks * No analytics, tracking pixels, or third-party scripts * We never sell, rent, or share your information for marketing * We do not email you COOKIES AND LOCAL STORAGE ------------------------- * "sid": a signed session cookie that keeps you logged on for up to 30 days. It holds only an internal account number and the time you logged on. * "oauth": a short-lived cookie (10 minutes) used only while you are logging on with Google, to protect against forged sign-in requests. * "dev16": a random number for this browser, kept until 400 days after your last visit, used only to recognise accounts that sign in on the same browser (see above). * Local storage: your browser keeps a copy of your games, options and records so the site works offline and loads quickly. "Log Off" erases this copy from that device, except the list of accounts that have signed in there. WHO ELSE HANDLES YOUR DATA -------------------------- * Google, when you log on. Google's own privacy policy applies to your Google account: https://policies.google.com/privacy * Stripe, if you register. Stripe processes your payment as the seller of record and keeps the payment records the law requires. Stripe's privacy policy applies: https://stripe.com/privacy * Google (Cloud Vision SafeSearch and the Gemini API) and OpenAI (its moderation service), if you upload a picture of your own. Only the small 64 by 64 picture is sent, never your handle, email or anything else about you, and only to have it checked against our picture rules. Under these services' paid API terms, the pictures are not used to train their models. Their privacy policies apply: https://policies.google.com/privacy and https://openai.com/policies/privacy-policy * Fly.io, which hosts the site and its database in the United States. Like any web host, Fly.io processes network data such as IP addresses to deliver the site, and may keep short-lived request logs. We may disclose information if the law requires it. HOW LONG WE KEEP IT ------------------- We keep your account, profile, records and saved state until you delete your account. We also keep encrypted backups of the database so we can recover from a failure. Deleted data can remain in those backups for no more than 45 days, where it is not used or looked at, and is then permanently removed. Backups are only used to recover from a failure, by restoring the most recent state, so anything you deleted stays deleted. YOUR CHOICES ------------ * Play without logging on, and nothing is sent to us. * Delete everything: open Records, choose Account > Delete my account. This permanently removes your account, records and saved state from the server. * Ask us: email hello@16colors.net to get a copy of your data or ask any question about it. CHILDREN -------- 16 Colors is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has logged on, contact us and we will delete the account. CHANGES ------- If this policy changes, we will update the date at the top. Material changes will be noted on the site.