Last updated October 18, 2026

Privacy Policy

This explains what Whole Board collects, why, and what you can do about it. Short version: we collect what we need to run tests, keep leaderboards fair and take payments. We don't sell your data.

What we collect

Account details: your email address and the sign-in method you used (Google, Discord or email link). If you sign in with Google or Discord, we receive your email and basic profile ID from them. We don't get your password.
Username: the name you pick. It's shown publicly on leaderboards.
Date of birth: you enter it when you sign up so we can sort age groups and keep ranked boards 18+. It's never shown publicly. If you get ranked, it's replaced by the date of birth confirmed by your ID check.
Home board: your country, and if you're in the US, your state, city and optional neighborhood. Shown on your profile and the boards. We never ask for your street address.
ID verification (ranked players only): Stripe Identity collects a photo of your government ID and a selfie to confirm you're a real person over 18. Those images and your ID number go to Stripe, not to us. Stripe sends us your verified first name, last name and date of birth, and the verification result. We also store a one-way fingerprint made from those details so the same person can't rank on two accounts; it can't be turned back into your name or birthday. Stripe keeps verification data under its own privacy policy.
Wish-list ideas: what you suggest and your username, sent by email to the Whole Board team so we can read it and reply.
Bonus games: Game of Zero runs (score and time). Golden Run scores stay on your own device.
Posts and reports: short updates you post on your profile, and reports you send about posts.
Private matches: which matches you join, your side, and your match scores.
Test results: each attempt's category, answers, scores, and start and finish times.
Integrity data: how long you spent on each question, whether the test tab lost focus and for how long, copy attempts, whether audio mode was on, and whether your browser reports being automated. This is how we keep the test human-only.
Purchases: what you bought, when, and the amount. Card details go straight to Stripe. We never see or store your card number.
Basic technical data: login session cookies needed to keep you signed in, and standard server logs (like IP address and browser type) kept by our hosting provider for security.

How we use it

To run tests, calculate scores and show your dashboard.
To build leaderboards and keep them fair, including reviewing attempts that look automated or assisted.
To calibrate scoring norms using first attempts across all players, in aggregate.
To process payments and handle refunds or credit restores.
To contact you about your account or important changes to these policies.
Season results: on January 1, if you're a verified player and your neighborhood, city or state was crowned, or you finished on a season podium, we send you one congratulation email. You can turn these off on your board or with the link in the email.
Invites, only if you opt in: if you're a verified player with an overall IQ of 125 or higher, we may email you a private invite to new Whole Board programs. You can turn invites off any time from your board settings.
Marketing emails, only if you opt in: Whole Board news, new tests, score updates, and offers or links to other tools and partner products we think you'll like. We send these ourselves; we don't hand your email to partners. Every email has an unsubscribe link, and you can turn them off any time from your dashboard.

What's public

Your username, leaderboard ranks, best scores, home board (neighborhood, city, state), posts, profile color, and your verified first and/or last name only if you turn them on. Your age group is used to sort age boards, but your date of birth is never shown. Profiles of players under 18 can only be seen by other logged-in players under 18, and never show a real name, location or posts. Your email, ID images and verification details are never shown.

Who we share it with

Only the services that run the site: Supabase (database and logins), Stripe (payments and ID verification), Vercel (hosting), Resend (sending emails), and Google or Discord if you use them to sign in. Each handles data under its own privacy terms. We don't sell or rent your personal information, and we don't share it with advertisers.

How long we keep it

We keep your account and test history while your account is open. If you delete your account, we delete your personal data within 30 days, except purchase records we must keep for tax and legal reasons.

Your choices

You can change your username, ask for a copy of your data, or ask us to delete your account at any time.
Depending on where you live, you may have extra rights (for example under California or EU law), like correcting your data or objecting to certain uses. Contact us and we'll help.

Children

Whole Board isn't for children under 13, and we don't knowingly collect their data. If you believe a child under 13 has an account, contact us and we'll delete it. Players 13–17 need a parent or guardian's permission, can't make purchases (a parent or guardian can gift Supporter), can't post, and have profiles that only other players under 18 can see, without names, locations or posts. If someone invites you with their link, they only see a count of friends who joined, never who.

Cookies

We only use the cookies needed to keep you signed in. No advertising cookies, no third-party trackers, and our fonts are served from our own site.

Place data

City and town names come from GeoNames (geonames.org), licensed under CC BY 4.0.

Security

Data is encrypted in transit, access to the database is restricted, and scores are calculated on our servers. No system is perfectly secure, but we take reasonable steps to protect your information.

Changes

If we change this policy in a meaningful way, we'll post the update here before it takes effect.

Contact

Privacy questions or requests: ecomwithsamuel@gmail.com. Whole Board is operated by Whole Board. See also our Terms.