Privacy Policy

LeaderBored
Effective Date: February 23, 2026
Last Updated: October 11, 2026

Pilat Digital (“we,” “us,” or “our”) operates the LeaderBored mobile application (the “App”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the App.

By using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address — used for authentication and account recovery
• Password — stored securely via our authentication provider (never stored in plaintext)
• First and last name — used to identify you within the App

1.2 Game Score Data

When you submit scores, we collect:

• The raw share text you paste from NYT games (Wordle, Connections, Strands, Mini Crossword, Crossword, Spelling Bee, Pips)
• Parsed score data including game name, score value, game date, and difficulty level

The share text you submit is sent to our servers, parsed there to extract the game, puzzle and score, and stored with your account.

1.3 Social and Group Data

• Groups (“squads”) you create or join
• Emoji reactions and comments you make on other users' scores
• Group membership information

1.4 Device and Technical Information

• Push notification tokens — used to deliver notifications to your device
• Device type — used to determine push notification eligibility

1.5 User-Generated Reports

If you report content or another user, we collect the report reason and associated context to review and moderate content.

1.6 User Preferences

We store your display preferences (e.g., list vs. card view) to personalize your experience.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Display your scores on group leaderboards
• Enable social features (groups, reactions, comments)
• Send push notifications about group activity (new scores, reactions)
• Moderate content and respond to reports
• Maintain and improve the App
• Communicate with you about your account or the App

2.1 Automated Moderation

To keep groups safe, every comment is automatically screened when it is posted or edited. The comment text (without your name or account details) is sent to TypeSafe, an AI classification service, which assesses whether it contains harassment, hate, threats, sexual content, spam, or other content that breaks our Terms of Use. Reported comments are screened the same way, together with the report reason.

Based on the result, a comment may be hidden automatically, sent to a person on our team for review, or left as is. Hidden comments remain visible to their author. Comments flagged for review, along with the author's name and group, are shown to our moderators in Slack, a workplace messaging tool, so they can decide what to do. Every automated decision can be reversed by a moderator. Accounts are only suspended by a person, never automatically.

3. Data Storage and Security

3.1 Where Data Is Stored

• Remote storage: Your account data, scores, groups, reactions, and settings are stored in a PostgreSQL database hosted by Supabase. Supabase infrastructure is hosted on AWS.
• Local storage: Authentication session tokens are stored locally on your device using secure storage mechanisms provided by the platform.

3.2 Security Measures

We implement industry-standard security measures including:

• Row-level security (RLS) policies ensuring users can only access data they are authorized to view
• Encrypted authentication sessions
• Secure password hashing via our authentication provider
• HTTPS for all data transmission

While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure.

4. Third-Party Services

We use the following third-party services to operate the App:

Each third-party service has its own privacy policy governing its use of your data:

• Supabase: https://supabase.com/privacy
• Expo: https://expo.dev/privacy
• Google/Firebase: https://firebase.google.com/support/privacy
• TypeSafe: https://docs.typesafe.ai/legal
• Slack: https://slack.com/trust/privacy/privacy-policy
• Resend: https://resend.com/legal/privacy-policy
• ImprovMX: https://improvmx.com/privacy/

We do not sell your personal information to third parties.

5. Analytics and Crash Reporting

We may introduce analytics and crash reporting tools in the future to improve the App's stability and user experience. If and when we do, this Privacy Policy will be updated to reflect the specific tools used and data collected. We will notify users of material changes.

6. Data Sharing and Disclosure

We may share your information in the following circumstances:

• With other users: Your name, scores, reactions, and comments are visible to members of your shared groups.
• With service providers: We share data with the third-party services listed in Section 4, solely for the purposes of operating the App.
• For legal compliance: We may disclose your information if required by law, regulation, legal process, or governmental request.
• To protect rights: We may disclose information to protect the rights, property, or safety of Pilat Digital, our users, or others.

7. Data Retention

• Account data: Retained for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.
• Scores and reactions: Retained for as long as your account is active and may persist in group leaderboards.
• Push notification tokens: Retained until you disable notifications, sign out, or delete your account.
• Reports: Retained as necessary for moderation and legal compliance.
• Moderation records: The result of each automated or manual moderation decision is kept while your account is active and deleted with your account.
• Deletion requests: Account deletions are processed 7 days after you request them. After deletion we keep only the request dates and a one-way hash of your account ID, as a record that the request was completed.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your personal data. You can request account deletion directly within the App by visiting the Account Deletion page, accessible from your profile. Once submitted, your data will be permanently deleted within 30 days.
• Portability: Request your data in a portable format.
• Withdraw consent: Withdraw consent for push notifications at any time through your device settings.
• Object: Object to certain processing of your personal data.

To exercise any of these rights, you can use the in-app Account Deletion page or contact us at privacy@leaderbored.app.

9. Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at privacy@leaderbored.app.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction. By using the App, you consent to the transfer of your information to such countries.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy within the App or by other reasonable means. The “Last Updated” date at the top of this policy indicates when it was last revised. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Pilat Digital
Email: privacy@leaderbored.app