This page explains what the Gomoku site uses to run games and, if enabled, show advertising.
Game data
Computer and same-screen games run in your browser. For online play on the hosted site, Supabase stores the room code, board moves, last connection times, and hashed random seat tokens. Raw seat tokens remain in your browser. A seat token is saved in your browser's session storage so you can return to the same room after refreshing. No email or password is required. Random matchmaking uses a unique nickname. A random player token is saved in local storage to recover your record and active match on later visits from this browser; the database stores only its hash. Your nickname, total wins/losses/draws, and streaks are stored in Supabase. Nicknames and scores may appear publicly on the leaderboard. Do not use your real name or other personal information as your nickname. Rooms survive server restarts and expire after three hours without activity. Expired rooms are deleted by an hourly cleanup. Completed game moves and results are kept for up to 30 days and then deleted by the same cleanup.
Hosting and game services
Render serves the static website and Supabase provides game storage and live updates. These providers process requests to deliver the service. The public site currently does not load Google advertising or Google Analytics. The site includes a Google AdSense publisher verification tag and an ads.txt entry. These verification records do not by themselves request an advertisement.
Basic server records
The hosting provider may process connection information such as IP address, request time, and browser details to deliver the site, keep the service secure, and diagnose failures. The exact log retention period depends on the selected host and must be checked before launch.
Advertising and cookies
Advertising is disabled until the site operator configures approved Google AdSense identifiers. If enabled, Google and its partners may use cookies or similar technologies to deliver, measure, and personalize ads according to their policies and your consent choices where required. Learn more at Google's advertising technologies page and Google Ads Settings. Before enabling ads for visitors in regions that require consent, the operator must configure an appropriate certified consent platform and publish its choices to visitors.
Sharing and retention
Random matches are restricted to the two assigned players. Legacy private-room links can be used by anyone who receives them until both seats are occupied. Do not put personal information in a room link. The site does not sell game moves or seat tokens. Ranked matches are associated with your nickname profile. Aggregate records and the profile persist beyond individual game retention so your streak history remains available. Clearing browser data removes your local access token, not the stored profile or scores. Without that token, there is no email-based recovery. The optional local Python server uses temporary memory instead of Supabase.
Contact and updates
For privacy questions, use the contact page. The operator will update this notice when the hosting provider, advertising configuration, or data handling changes.
Last updated: 1 October 2026.