Privacy Notice

Who we are

Then & There is a historical guessing game where players study reconstructed historical scenes and guess the time and place. For privacy questions or data requests, use the Contact Us button on the homepage or contact contact@thenandthere.co.uk.

Information we collect

We only aim to collect information needed to run, improve and protect Then & There. Depending on how you use the game, this may include:

• your email address for account sign-in, authentication and account access;
• your display name or username if you choose to set one;
• Daily Challenge scores, round results, streaks, highscores, account rank and My Chronicle information;
• public leaderboard or highscore entries linked to your display name or username;
• game event data, such as challenge starts, round submissions, challenge completion and score information, used to understand bugs, gameplay flow and product improvement;
• messages sent through Contact Us, Report Issues or Report Inaccuracy forms;
• an optional email address if you provide one when sending feedback;
• basic technical information, such as logs generated by our hosting, authentication, database or email providers.

How we use your information

We use information to:

• create, authenticate and manage accounts;
• send secure sign-in links and account-related messages;
• save Daily Challenge scores, streaks and account records;
• operate leaderboards, highscores and My Chronicle;
• operate, test, debug, secure and improve the game;
• understand which parts of the game are working well;
• respond to contact messages, bug reports and inaccuracy reports;
• prevent abuse, cheating, security issues or misuse.

We do not currently send promotional marketing emails. If daily reminder emails are introduced in the future, they will be optional and based on a clear opt-in, with a way to stop receiving them.

Lawful basis for using information

We rely on different lawful bases depending on the purpose:

• Contract: where information is needed to provide account features, save scores, operate Daily Challenges, show your chronicle and run features you choose to use.
• Legitimate interests: where information is used to operate, secure, debug, improve and protect the game, respond to feedback, and maintain fair leaderboards.
• Consent: where we ask for optional consent, such as any future optional daily reminder emails or non-essential cookies/tracking.
• Legal obligation: where we need to keep or use information to comply with the law.

Public information

If you save an official Daily Challenge score, your display name or username, score, rank/title and related leaderboard or highscore information may appear publicly in the game. Your email address is not shown publicly.

Please avoid using a display name that reveals personal information you do not want to be public.

Feedback and reports

If you send feedback, contact us, report an issue or report a historical inaccuracy, we use your message to investigate, respond where appropriate and improve Then & There. If you provide an optional email address, we use it only to respond to your message or follow up on the issue you reported.

Analytics and game events

We use basic in-product game event data to understand whether the game is working properly, which features are used, where players may encounter bugs, and how to improve the experience. This is not currently used for personalised advertising.

We do not currently use advertising cookies, personalised ad tracking, TikTok Pixel, Meta Pixel, Google Analytics or similar third-party advertising trackers. If we introduce advertising or non-essential tracking technologies in the future, we will update this notice and the Cookie Notice and request consent where required.

Advertising and Google AdSense

If advertising is enabled, Then & There may use Google AdSense or a similar advertising partner to display ads. Google and other third-party advertising providers may place or read cookies, use web beacons, process IP addresses and collect information as a result of ad serving.

Ads may be contextual, or personalised where the user's consent and settings permit. Advertising data may also be used for measurement, frequency capping, reporting, fraud prevention and service security.

Users can manage cookies through their browser and, where available, through the site's consent controls or the advertising provider's settings. For visitors in the UK, EEA and other regions with consent requirements, non-essential advertising storage and personalised advertising will be subject to the applicable consent choices before use.

Live AdSense advertising is not currently active. This section explains the data use that may apply if advertising is enabled in the future.

Services we use

We use third-party service providers to run the game, including hosting, authentication, database, email delivery, domain/DNS and infrastructure providers. These currently may include Supabase, Vercel, Resend and domain or DNS providers.

These providers process information on our behalf where needed to provide the service. Their systems may process or store data in the UK, EEA, United States or other locations, subject to their own security and data transfer arrangements.

Reddit and Discord

The homepage links to the Then & There Reddit and Discord communities. If you choose to use those services, your activity is also subject to Reddit’s or Discord’s own privacy terms and account settings.

How long we keep information

We keep personal information only for as long as we reasonably need it for the purposes described in this notice.

• Account information is normally kept while your account remains active, unless deletion is requested.
• Scores, streaks, leaderboard entries and My Chronicle information are normally kept while the feature exists and your account remains active, unless deletion or anonymisation is requested and we can reasonably apply it.
• Game event analytics are normally kept for up to 12 months unless we need them for security, debugging or abuse prevention.
• Feedback messages and optional feedback email addresses are normally kept for up to 12 months, unless we need them for a longer period to resolve a specific issue.
• Server, security and provider logs are kept according to the relevant provider settings and our operational needs.

In some cases, leaderboard or highscore information may be anonymised rather than fully deleted where needed to preserve game integrity.

Your rights

Depending on your location and the circumstances, you may have rights to access, correct, delete, restrict or object to certain uses of your personal information. You may also have the right to data portability where it applies.

To make a request, use the Contact Us button on the homepage or email contact@thenandthere.co.uk. We may need to verify that the request is from the account holder before changing or deleting account data.

If you are in the UK and are unhappy with how your data is handled, you can complain to the Information Commissioner’s Office.

Account deletion

If you want your account or personal data deleted, contact us at contact@thenandthere.co.uk or use the Contact Us button. We will review the request and delete or anonymise personal data where required and technically possible.

Children

Then & There is a general-audience history game and is not designed for children under 13. We do not knowingly collect account information from children under 13.

Changes to this notice

We may update this Privacy Notice as Then & There develops, especially if we introduce new account features, reminders, analytics, advertising or monetisation features.