A Note on Privacy

What we write down in your pocket

Two small notes, stored in your own browser's localStorage. These never leave your device unless you choose to submit a score.

• autoq.sessionStats.v1 — the running tally for your AutoQ tab (hands played, best single hand, total score across all games in this browser). Wiped when you click “Flip the table” on the AutoQ page, clear your browser's site data, or open an incognito window.
• autoq.playerName.v1 — the last name you entered when submitting a score, remembered so we can pre-fill it next time. Wiped the same way.

What we write down in the big ledger

When you finish an AutoQ game and click Submit on the name prompt, the following is sent to our own backend (AWS DynamoDB, in the US-East-1 region) and associated with the name you typed:

• The name you entered (1–20 letters / digits / spaces)
• Your final score
• The longest word your game produced, if any
• The timestamp of submission

If you click Skip instead, none of that is sent. An anonymous game-played counter increments either way — it holds no identifier of any kind, just a number that tells us how much AutoQ has been played in total.

When you sign in

Signing in (via Google, for now) rigs a fixed identity for the Tavern's Ledger and lets your AutoQ tally follow you across devices. If you never sign in, this section doesn't apply to you.

At sign-in, Google shares these with us and nothing else:

• A Google subject ID (a stable internal identifier; not your email and not usable elsewhere)
• Your Google display name
• Your Google account email address
• The URL of your Google profile picture

We do not see your Google password, any other Google service data, your contacts, or anything outside these four fields.

While signed in we store, keyed on your Google subject ID:

• A per-game tally for each game you play (hands played, best single-hand score, total score), plus the timestamp of its last update. Kept separately for AutoQ and Power Words.
• Your character — the class you chose, an optional pseudonym, your gold, your inventory, any levels and faction standings you've picked up, and when the character was created and last changed.
• Your franchisee application, if you submit one — every field on it: name, class and level, the alignment you pick on the grid, honorific, the felony question and its explanation, your chosen region, moniker, how you heard about it, and the four money answers (liquid worth, net worth, pocket money, and what you'll invest).

The last two are in-character. The felony question and the money figures are part of a joke application to run a fictional tavern — we have no interest in your real criminal record or your real finances, and nothing on that form is checked against anything. But you type it and we store it, so it belongs on this list.

These live in the same DynamoDB table as the public leaderboard, under a USER# key prefix that isolates them from the game's public records. Your session is held in a signed cookie that expires after 30 days or when you click Sign out.

What we do not do

• No third-party analytics. No Google Analytics, no Meta Pixel, no heatmaps.
• No advertising cookies. No retargeting.
• No tracking of which pages you visit beyond standard server access logs.
• No selling, renting, or sharing any data we collect with third parties. The tavern keeps its own book.
• No password of ours to forget — sign-in is Google's, and we never see or store a credential.

Who we talk to on your behalf

A few unavoidable outside houses make this tavern work. Each one sees only what it needs to do its job.

• Vercel hosts the site. Standard server logs (request path, user agent, IP) are retained per Vercel's privacy policy. We do not operate Vercel Analytics.
• AWS stores the leaderboard (DynamoDB) and runs the score-submission and stats endpoints (Lambda + API Gateway). Same data as listed above and nothing more.
• Merriam-Webster validates words you type during a hand. The validation call goes from our server (not your browser) so the dictionary never sees your identity — just the words to check.
• Google Fonts serves the typefaces the AutoQ gameboard uses. Your browser fetches them from Google's CDN, which means Google sees the request (IP, user agent). This happens only on pages that load the game surface.
• Google OAuth handles sign-in, if you choose to sign in. You're redirected to Google, consent to share the four fields listed above, and are sent back. We don't route any other traffic through Google on your behalf.

How to burn your entry

To clear the local notes: open the AutoQ page and click “Flip the table”, or clear this site's data in your browser settings (Application / Storage in dev tools works too).

To remove a leaderboard entry: send a note to sipnstrut@gmail.com with the name you used and the approximate date of the score. We will strike it from the record.

To delete your character yourself: go to your profile and use Delete my character at the bottom. That removes your character record and your franchisee application, and signs you out. It keeps your game stats, so your scores stay on the leaderboards. It cannot be undone.

To delete everything, stats included: email sipnstrut@gmail.com from the Google account you signed in with (or say which account) and we'll wipe all USER#<subject-ID> items. The button is the quick path; the email is the complete one.

To sign out or revoke the OAuth app: click your name in the header and choose Sign out to end the session on this device. To revoke Sip n Strut's access to your Google account entirely, visit myaccount.google.com/permissions and remove “Sip n Strut” from the list. (Revoking there doesn't delete any stats we've already stored — use the email path above for that.)

Changes

If we ever add analytics, accounts, or any form of tracking, this page will be updated and the date at the top will change. If the update is substantive (new categories of data, new recipients), that change will be called out in plain view.

Questions

Mail the tavern at sipnstrut@gmail.com.