Privacy policy

Last updated: 13 October 2026.

This policy explains how AtlasGenie uses personal data, browser storage and optional analytics, and how you can exercise your choices.

AM Ismail, based in Qatar, operates AtlasGenie and is the party responsible for personal data used to provide the game and accounts. Contact hello@atlasgenie.world for privacy questions or requests.

Lovable hosts AtlasGenie. Hosting and security services process technical information needed to deliver and protect the site, such as network requests and IP addresses. We do not use IP tracking or device fingerprinting to enforce the guest game limit.

Lovable Cloud provides accounts, sign-in and account data storage. You can sign in with Google or an email magic link, not an AtlasGenie password. Sign-in processes your email address, sign-in method, account identifier and session information. Google processes sign-in information under its own privacy policy when you choose Google.

Your profile records when the account was created, your age confirmation and the accepted terms version. We do not ask for your birth date. For active Premium accounts, we store completed games, scores, round results and personal bests so you can see history and use bests across devices. Saved history remains readable when Premium ends, but new games are not saved without an active plan.

Paddle is the merchant of record for Premium. Payment details are entered into Paddle’s checkout; AtlasGenie does not store full card numbers or card security codes. We retain subscription and payment references, plan and entitlement information needed to provide Premium. Paddle separately processes billing information, taxes and refunds under its privacy policy and buyer terms.

The following keys are used by the current site. Local storage remains until cleared, overwritten or removed; tab session storage normally ends when the tab session ends. Device storage can be unavailable or erased by your browser.

• ag:limits — current local date and number of regular guest games started, to apply the three-game daily allowance. The counter is replaced as a new local day begins.
• ag:bests — personal best scores, correct counts and dates by mode, region and difficulty, plus your best answer streak. Premium sign-in can sync higher bests to your account.
• ag:settings — your last region and difficulty for each mode.
• ag:daily:YYYY-MM-DD — a separate key for each daily challenge date, storing your completed result and preventing another attempt in this browser. Older results are not automatically removed on a fixed schedule.
• ag:sound — whether game sound is on or muted.
• ag:returnTo — tab session storage for the validated same-site page to return to after sign-in. Removed when read.
• ag:checkout-plan — tab session storage for the monthly or yearly plan selected before checkout. Removed when read on the checkout success page.
• ag:dev:today — development-only test-date override; not a normal player feature.
• ag:consent — your optional-service choices, time and notice version, plus up to ten recent choices to record acceptance and withdrawal in this browser. Choices are requested again after 180 days or a notice-version change. No email or account identifier is stored in this record.

Sign-in session information is stored separately by the account service using its own session-storage key, not an ag: key. It keeps you signed in and is cleared on sign-out. Lovable’s editor preview can share that session between trusted preview surfaces; this is not an analytics feature.

Google Analytics measures visits to public pages and game interactions, such as games started, completed or shared. It processes browser and device information, online identifiers and technical network information, including IP addresses used by Google to derive approximate location. Google Analytics does not log or store individual IP addresses in GA4. We do not send account emails, payment details, sign-in callback parameters or URL query strings to Analytics. Private account, sign-in and checkout pages are excluded. Google signals and advertising personalisation are disabled in our analytics settings. Google processes information under its privacy policy.

Visitors in the EEA, UK and Switzerland are asked before analytics loads. If location cannot be determined, the same consent requirement applies. Elsewhere analytics may run unless you refuse it in Privacy settings. You can reject optional services as easily as accepting analytics, and change or withdraw your choice at any time using Privacy settings in the footer or your account. Withdrawal stops new reporting and clears accessible Google Analytics cookies. Previously processed data is not automatically deleted by withdrawal; contact us about applicable deletion rights.

The events we measure are limited to page views (page path and page type), games started, completed or quit, daily challenges completed, the daily limit being reached, share, upgrade and other button clicks, checkout started and completed (plan only), sign-in method and Pin Drop distance ranges. Scores are recorded only in ranges of 1,000 points, and no email, user identifier or free text is sent.

We use Google Consent Mode: before any Google service loads, analytics and advertising storage are set to denied in the EEA, UK and Switzerland and to granted elsewhere, and your choice then updates them. Where Google’s certified consent message is shown, it records your choices and Privacy settings reopens it.

Advertising is currently disabled: Google AdSense does not load, and no advertising cookies are set by AtlasGenie. Premium players never load an ad script, and advertising is never shown during gameplay.

We use account and subscription information to perform the service contract you request, handle support and protect the service. Device preferences support your chosen settings. Billing records may be retained to meet legal obligations. Where applicable law requires consent for analytics, we rely on your consent; elsewhere permitted analytics supports our legitimate interest in understanding and improving the service, subject to your right to refuse it. Security and abuse prevention also support our legitimate interests, subject to applicable law.

Lovable, Lovable Cloud, Google for sign-in or analytics, and Paddle process relevant information as described above. Their services may process data outside Qatar or your country, where data-protection laws may differ. Where required, transfers must be supported by a lawful mechanism, such as an applicable adequacy decision or contractual safeguards. Contact us for information about transfers relevant to your account. We do not sell your game account data or use it for customer-matching advertising.

For accounts without an active subscription, saved games and personal bests are kept for 3 days and then deleted automatically by a daily cleanup. Games and bests saved while Premium was active are kept until you delete them or your account. Profile totals (level, XP, games played and day streak) are kept until you delete your account.

Choose Download my data in your account for a JSON file containing your profile, games and personal bests. Choose Delete account when you have no active subscription, then type DELETE to confirm. If Premium is active, first cancel through Manage subscription and wait for the paid period to end.

Deletion removes your games, personal bests, profile and sign-in account and signs you out. You can also choose to clear ag: local-storage data on that device. This does not automatically clear tab session storage, other browsers or downloaded exports. Browser settings can clear remaining device data. Account deletion does not erase billing information retained for payment, accounting or legal purposes, including Paddle’s records.

You can clear browser storage, change Privacy settings, sign out, download your data or request account deletion. Depending on applicable law, you may also have rights to access, correct, delete or restrict use of personal data, object to processing, withdraw consent or complain to a relevant data-protection authority, including where you live. Email hello@atlasgenie.world for help; we may need to verify your identity before acting. We respond within the time required by applicable law and explain any lawful reason we cannot fulfil a request. There is no solely automated decision-making that produces legal or similarly significant effects.

AtlasGenie is for people aged 13 or older and is not directed at children under 13. First sign-in requires confirmation that you are at least 13 and acceptance of the Terms and this policy. If you believe an under-13 child has provided account data, contact us.

We update this policy when our practices change and identify the latest revision above. Material changes will be communicated where required, and renewed consent will be requested when needed.