Privacy Policy

Last updated: 5 November 2026

Team Mind Challenge ("the app") is a cooperative online brain game operated by Team Mind Challenge. This policy explains what data we collect, why, and the choices you have.

1. Data we collect

• Account data: username, email address, display name, avatar, country, preferred language, and your password (stored only as a salted scrypt hash, never in plain text). Your email is used only for account emails — confirming your address, password reset links, and security alerts — and is never shown to other players.
• Sign-in sessions: for each device you sign in on we store a session with a short device label (e.g. "Chrome · Android") and when it was last used, so you can see and sign out your devices. If you turn on two-step verification we store the authenticator secret and hashed backup codes.
• Game data: match results (time, mistakes, hints, stars), team names, achievements, statistics, and a history of which puzzles/words you have already played, so the game does not repeat them too soon.
• Social data: friends, teams, players you block, reports you submit, and in-app notifications.
• Feedback & ratings: messages you send through "Feedback" (with your device type and screen size, to help fix bugs) and the fun ratings you give after a match.
• Chat: text messages are delivered to your room in real time and kept only in server memory for that room (at most the last 100 messages). They are not saved to our database and disappear when the room closes.
• Voice chat (optional): if you tap "Join Voice", the app asks for microphone permission. Your audio is relayed live to your teammates through our server. It is not recorded or stored.
• Technical data: IP address, used only temporarily in server memory for security, rate limiting, and cheat detection (e.g. spotting several accounts from one network in a ranked match). It is not saved in our database.
• On your device: your login token, language, theme, sound settings, and practice history are stored in your device's local storage.

2. How we use data

• To run the game: accounts, matchmaking, rooms, chat, voice, and leaderboards.
• To keep accounts safe: email confirmation, password reset, security alerts, and two-step verification.
• To keep the game fair and safe: rate limits, cheat detection, reports, and moderation.
• To improve the game: puzzle variety (avoiding repeats), your feedback, and fun ratings.

We do not sell your data, show ads, or use third-party analytics or advertising SDKs.

3. Sharing

• Other players see your display name, avatar, country, and team results on leaderboards; your teammates see your chat messages and hear your voice when you enable it.
• Service providers: our hosting provider stores the server and database; our email provider delivers account emails.
• We may disclose data if required by law.

4. Retention & deletion

We keep your account data until you delete your account. You can delete it at any time in the app (Settings → Delete account) or on the web at /delete-account. Deletion is immediate and removes your profile, email, password, sessions, friends, team memberships, blocks, achievements, notifications, play history, and reports you made. Results of past matches stay on your teammates' leaderboards only as a team name and time, and feedback or fun ratings you sent are kept without any link to your account. Backup copies are overwritten within 30 days.

5. Security

Connections use HTTPS/WSS encryption. Passwords are hashed with scrypt. You can sign out any device, and changing or resetting your password signs out all other devices. Optional two-step verification protects your account even if your password leaks; it is mandatory for administrators. Login attempts are rate-limited per network and per account.

6. Children

The app is not directed to children under 13 and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

7. Your rights

You can view and edit your profile in the app, ask us for a copy of your data, or delete your account. Contact: halo@teammindchallenge.com.

8. Changes

We will update this page if this policy changes and show the new date above.