Privacy Policy — Protopilot
Last updated: 18 August 2026 Who runs this game: Principo Software Contact: adeptus.en@gmail.com
The short version
Protopilot is a game. You can play the whole game without an account. If you never sign in, nothing about you leaves your device. Signing in exists for one reason: a score cannot go on a shared leaderboard without something to attach it to.
If you never sign in
Everything stays in your browser's local storage on your own device:
| What | Why |
|---|---|
| Levels unlocked and your best score per level | So the game remembers where you got to |
| Whether you muted the sound | So it stays muted |
No account, no server, nothing transmitted. Clearing your browser data or uninstalling deletes all of it, permanently and immediately.
If you sign in with Google
Sign-in is handled by Google and by Supabase, our hosting provider. We never see your Google password.
What is stored about you:
| What | Where | Who can see it |
|---|---|---|
| A Google account identifier, the email address on that account, and whatever else Google passes over with a sign-in — usually the name and picture on your Google account | Supabase authentication | Only you and us |
Your chosen board name — one of the game's generated names, e.g. TURBO PIGEON | Our database | Anyone |
| Your best score for each level, and your total | Our database | Anyone |
| When you last played | Our database | Anyone |
| Which levels you have unlocked | Our database | Only you |
| A sign-in token, so you stay signed in | Your device | Only you |
Your real name is never on the leaderboard. Board names are generated by the game from a fixed word list. You cannot type one, so you cannot put your real name — or anyone else's — on the board, by accident or on purpose.
The game itself asks Google for nothing but an account identifier. Google sends the rest of your basic profile along with it anyway, and the authentication system keeps what it is sent, so your Google name and profile picture may sit on your account row. The game never reads them, never shows them to anyone, and they go when the account does.
Your email address is never shown to other players. It is held by the authentication system so you can sign back in, and nothing else reads it.
The leaderboard is public by design. Your board name, your total score, how many levels you have cleared and when you last played are visible to every player — the last of those because two players on the same score have to be put in some order, and first to get there keeps the higher place. That is the point of a leaderboard, and it is the only thing about you that is public.
Who else is involved
Supabase stores the data above and handles sign-in, acting on our instructions. Google provides sign-in, and knows you signed into this game in the same way it knows about any other site you use Google to sign into.
That is the whole list. Nothing else is contacted. The game's typeface, its music and every image are served from the same place as the game itself, so opening it does not tell anyone but us that you did.
Children
The game is suitable for all ages and collects nothing about anyone that it does not collect about everyone. It is not directed at children under 13, and we do not knowingly hold data from them. If you believe a child has signed in and you want that removed, use the contact address above and we will delete it.
Deleting your data
In the game: sign in, then press DELETE ACCOUNT on the title screen. It asks once, and then it is done — your account, your board name, your scores and your saved progress go immediately, on the server and on this device. Your row disappears from the leaderboard with them. Nothing is deactivated, archived or held back for a grace period. It cannot be undone, so it is worth being sure.
One thing about that is not instant. Our hosting provider takes routine backups of the whole database, and a copy of your data can sit in the most recent of those for a short time after it has gone from the game itself. Nothing reads them — they exist so the database can be rebuilt if it fails — and they are overwritten on a rolling schedule, so the copy goes when the backup holding it does.
By email: if you would rather ask, or you can no longer get into the game, use the contact address above and we will do the same thing.
You can also stop short of deleting anything: signing out removes the sign-in token from your device, and clearing the game's site data removes your local progress.
Changes
If this policy changes, the date at the top changes with it. Material changes will be noted in the game.
← BACK TO THE GAME