This Privacy Policy explains how TempoLock handles personal information when you use tempolock.app, including guest play, accounts, Google/Facebook sign-in, scores and leaderboards, reports and advertising.
Creating an account is optional. You can use core TempoLock features as a guest. If you create an email/password account, an email address and password are required for authentication. If you choose Google or Facebook Login, the relevant provider supplies the sign-in identifier and any basic profile information made available through that login flow. A TempoLock display name is used for account/ranked features; country display is optional.
1. Information TempoLock processes
- Account/authentication data: email address for email accounts; authentication/session identifiers; and, when you choose Google or Facebook sign-in, the provider account identifier plus basic profile information the provider makes available for sign-in, such as email/name where supplied. This data comes from you, Supabase authentication, or the social-login provider you choose. TempoLock does not receive your Google or Facebook password.
- TempoLock profile data: chosen TempoLock name, TempoLock ID/account identifier and optional country code.
- Gameplay/progress data: modes, BPM, scores, timing/error measurements, tap offsets, progress, personal bests, streak/history information, timestamps, friend-challenge records and leaderboard source records.
- Guest data: generated guest identifiers, guest number/public identifier, optional country and guest scores/progress.
- Browser/device data: local/session storage, browser information, IP/network information received by hosting, authentication or advertising providers, and authentication/session state.
- Reports: category/message, current screen, app version, browser user-agent, viewport size, timestamp and, when available, player/account identifier.
- Advertising data: Google and participating advertising vendors may process IP address, browser/device information, cookies, web beacons or similar identifiers to serve, limit, personalise and measure ads, subject to your region and consent choices.
Required and optional information: information required to authenticate an account or submit a requested feature must be provided for that feature to work. Guest play does not require an email account. Country is optional. You can choose not to use Google/Facebook Login, public ranked features, the report form or advertising-personalisation choices that depend on consent.
2. Purposes and lawful bases
Where UK GDPR or similar law applies, TempoLock relies on the following bases:
| Purpose | Typical data | Lawful basis |
|---|---|---|
| Provide accounts, authentication, synced progress, ranked play and requested features | Account, profile, gameplay and session data | Performance of the service you request / contract |
| Operate public leaderboards, player profiles and optional country display | TempoLock name, optional country, scores/ranks, aggregated game run counts, best recorded results, game modes and dates played (day-level only) | Performance of the service and your deliberate choice to participate/display optional information |
| Security, abuse prevention, debugging, service reliability and responding to reports | Technical, account, gameplay and report data | Legitimate interests in protecting and improving TempoLock |
| Advertising personalisation or other non-essential storage where consent is required | Advertising/cookie identifiers | Consent |
| Comply with legal obligations or defend legal rights | Relevant records | Legal obligation and/or legitimate interests |
3. Google Sign-In
If you choose Google Sign-In, Google is the source of the provider account identifier and any basic profile information made available through that login flow. Google Sign-In is used only to authenticate you and link you to a TempoLock account. TempoLock uses Google user data only for the sign-in/account functionality described here, does not sell Google user data, and does not use Google Sign-In profile data to personalise TempoLock advertising. Google user data is accessed, used, stored and shared only as needed to provide and secure the account service and as disclosed in this policy.
4. Facebook Login
If you choose Facebook Login, Meta/Facebook is the source of the provider account identifier and any basic profile information made available through that login flow. Facebook Login is used only to authenticate you and link you to a TempoLock account. TempoLock processes the basic sign-in information made available through that flow and does not ask for or store your Facebook password. Removing TempoLock from Facebook's Apps and Websites settings revokes that connection; deleting TempoLock-held data is handled through the deletion process below.
5. Public information
Leaderboards are public. Your chosen TempoLock name, optional country, scores, ranks and related gameplay statistics may be visible to other users. Your email address, authentication token and social-provider credentials are not displayed publicly. Public player profiles may show a guest number or chosen username, broad game progress and day-level activity, but do not show exact submission times, private email addresses, tap histories, IP addresses or precise locations. Guest profiles use a public identifier distinct from the private guest progress identifier. You can hide the aggregated statistics and activity on your public player profile using Profile & Settings → Make my player profile public (turn it off). Your leaderboard name, scores and ranks remain public. A guest must use the same browser identity to change that setting.
6. Service providers and sharing
TempoLock does not sell personal information. Data may be processed by providers needed to run the service:
- Netlify: website hosting and delivery.
- Supabase: authentication, database, server functions and session services.
- Google: Google Sign-In and, separately, Google AdSense advertising. See Google Privacy Policy, How Google uses information from sites or apps that use its services and Google advertising technologies.
- Meta/Facebook: only when you choose Facebook Login. See Meta Privacy Policy.
- Google Fonts: delivery of web fonts used by the main TempoLock application.
- jsDelivr: delivery of frontend libraries and static assets used by TempoLock, including the Supabase browser library and country-flag assets.
- Buy Me a Coffee: only when you choose the external support link.
TempoLock may also disclose information where reasonably necessary to comply with law, protect security/users, investigate abuse or establish/exercise legal rights.
7. Google AdSense, cookies and similar technologies
TempoLock uses Google AdSense. Third-party vendors, including Google, use cookies or similar technologies to serve ads based on a user's previous visits to TempoLock and/or other websites where permitted. Google's use of advertising cookies enables Google and its partners to serve ads based on visits to TempoLock and/or other sites on the Internet. Users can manage personalised advertising in Google Ads Settings. Other advertising vendors may be identified through the consent interface and may provide their own opt-out controls.
Third parties may place/read cookies, use web beacons, IP addresses or other identifiers as a result of ad serving. In the EEA, UK and Switzerland, where required, TempoLock uses a Google-certified consent management platform. See the Cookie Policy.
8. Retention
Account-linked profile and gameplay records are generally kept while your account is active and while needed to provide ranking/history features. Reports are retained for as long as reasonably needed to investigate, maintain or protect the service. Guest records may be retained while needed for guest identity and leaderboard functionality. When data is deleted, limited security/infrastructure logs and backups may remain for a limited period until routine expiry or where law requires retention.
9. Deletion
Signed-in users can use Profile & Settings → Delete account & data. This removes the TempoLock authentication account and account-linked application data handled by TempoLock's deletion service. It does not delete your Google or Facebook account. If you cannot sign in, or want guest data deleted, use Report a problem → Privacy / data request. See Data Deletion Instructions.
10. Your privacy rights
Depending on your location, you may have rights to access, correct or delete personal data; restrict processing; obtain portable data; and withdraw consent where consent is the basis. Rights can be subject to legal exceptions. Contact support@tempolock.app or use the privacy request route above to make a request.
If you are in the UK and remain unhappy after contacting TempoLock, you may complain to the Information Commissioner's Office (ICO).
11. International processing
TempoLock uses providers that may process information outside the UK or your country. Where restricted-transfer rules apply, TempoLock relies on the relevant provider's lawful transfer mechanisms and contractual safeguards, such as adequacy arrangements or approved contractual protections where applicable. To ask for more information about the safeguards relevant to your data, contact support@tempolock.app.
12. Automated decision-making
TempoLock automatically calculates game scores, ranks and timing statistics as part of the game. These calculations do not produce legal effects or similarly significant effects about you. TempoLock does not currently use solely automated decision-making or profiling that produces legal or similarly significant effects.
13. Security
TempoLock uses HTTPS on the hosted service and relies on authentication, access-control and security features supplied by its infrastructure providers. No online service can guarantee absolute security. To report a suspected vulnerability, see the Security page.
14. Children
TempoLock is a general timing game/practice tool, not a service specifically directed at young children. If you believe a child's personal data has been provided inappropriately, use the privacy request route so it can be reviewed and deleted where appropriate.
15. Changes
This policy will be updated when TempoLock's data practices materially change. The date at the top shows the current version.
16. Contact
TempoLock is operated by Michael Eddy. Privacy, data-protection and general support enquiries can be sent to support@tempolock.app.