Privacy policy

In short

EUnicorn has no accounts, no cookies and no ads. Your game progress stays on your device. We count anonymously how often each game is played and how it went, without your IP address or any ID, and we use cookieless visitor statistics from our host to see how many people visit and where they come from. The only personal data that reaches a server is what every website needs to be delivered: your IP address and a few technical details, processed by our host.

Who is responsible

The operators of EUnicorn, reachable at eunicorn.guesser@gmail.com. More in About & data.

Hosting

The site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, Vercel's servers process your IP address, the date and time, the page requested, the referring page and your browser and operating system, so the page can be delivered and the service kept secure. Legal basis: Art. 6 (1) (f) GDPR (our legitimate interest in a working, secure website).

Vercel may process this data in the USA. Vercel is certified under the EU-US Data Privacy Framework, and we use Vercel under its data processing agreement, which includes the EU standard contractual clauses. See Vercel's privacy policy.

Visitor statistics

We use Vercel Web Analytics to count visits: which pages are opened, the referring website, the country, and the browser, operating system and device type. It sets no cookies and stores nothing on your device. To tell visits apart within a day, Vercel derives a short-lived identifier from the request that is discarded after 24 hours, so visitors can't be followed across days or other websites. We only see totals. Legal basis: Art. 6 (1) (f) GDPR (our legitimate interest in knowing how the site is used). See Vercel's analytics privacy notes.

What stays on your device

To remember your game for the day, your chosen difficulty, your results and your streak, EUnicorn stores them in your browser's local storage. This data stays on your device (only the anonymous count below reaches us). It is strictly necessary to provide the games you ask for (§ 25 (2) no. 2 TDDDG), so no consent is required. You can delete it at any time by clearing your browser's site data.

Anonymous game counter

When you start or finish a game, our server records the day, the game, the difficulty and, at the end, your result (for example "solved on guess 3", and your score as a share of the maximum). It stores no IP address, no device or user ID and no cookie, so the entries can't be linked to you or to each other. We use them to see how often the games are played and to show everyone today's results ("better than 62% of players"). The data is stored with our database provider Supabase; see Supabase's privacy policy.

Game ideas

If you send us a game idea, our server forwards the text to our mailbox by email, using the email service Resend. We don't ask for your name or email address; please don't put personal data in the text. We use the idea only to consider it for EUnicorn (Art. 6 (1) (f) GDPR) and delete it when we no longer need it. Resend processes the message in transit; see Resend's privacy policy.

Startup requests

If you ask us to add a startup, our server forwards the startup's name and website, and your email address if you choose to give one, to our mailbox by email, using Resend (see above). We use them only to check the request and, if you left an email, to tell you when the startup is in (Art. 6 (1) (f) GDPR; the email address only on the basis of your consent, Art. 6 (1) (a)). We delete the request once we have dealt with it. You can ask us to delete it earlier by writing to us.

Fonts, icons and flags

All fonts, icons and flags are served from our own domain. Your browser makes no requests to Google or any other third party when you use EUnicorn.

Sharing your result

The share button uses your device's own share menu or copies the text to your clipboard. We do not see what you share or where.

Instagram

The footer links to our Instagram profile. It is a plain link, not an embed: nothing is sent to Instagram until you click it. After that, Instagram's (Meta Platforms Ireland Ltd.) privacy policy applies.

Writing to us

If you email us, we use your address and message only to reply (Art. 6 (1) (b) and (f) GDPR) and delete them once your request is settled, unless we must keep them by law. Our mailbox is hosted by Gmail (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), so Google processes the emails you send us; see Google's privacy policy.

Your rights

You have the right to access, rectification, erasure and restriction of processing of your data, to data portability, and to object to processing based on Art. 6 (1) (f) GDPR (Art. 15–21 GDPR). Write to us at the address above.

You can also complain to a data protection authority, in particular the one in the EU country where you live or work (Art. 77 GDPR). A list of all authorities is kept by the European Data Protection Board.