Privacy Policy

You can play without an account

A Sentacle game runs on a link. When you start or join a game, your seat is identified by a secret token embedded in that URL. Possession of the link is what gives you control of the seat. We do not need your email, your name, or any account to run a game, and if you never create one, we never have them. Because the link is the credential, anyone you forward it to can play your seat. Treat a game link like a key.

If you create an account

An optional account lets you claim your games onto one identity, see them in one list, and get turn notifications at a single address. You create an account with your email address, and we send a one-time numeric code to it. There is no password to choose, forget, or leak. Sign-in codes are handled by Supabase, our authentication and database provider, which stores your email address on our behalf.

What we store

• Your email address. We have this only if you created an account or asked for turn reminders on a specific game.
• A display name. Optional free text you choose for a seat, shown to the other players in that game. It does not have to be your real name.
• Your gameplay. The sentences and words you play, where you placed them, your score, and the order of moves.
• Rejected plays. When a sentence is rejected, we keep it along with the board and your tiles at that moment, so we can improve the checks.
• Notification preferences. Whether you want reminder emails for a given game and whether you want them by default for all your games.
• Reports and blocks. If you report a play or block a player, we keep a record of the report or block, the play involved, and any action we took, so we can review reports and enforce blocks and bans.
• Links between your games. To enforce blocks, games played from the same browser are linked to each other using the seat records we already keep, with no device identifier, and a block made without an account applies in that browser.
• iOS device tokens. Stored only if you use the iOS app and turn on push notifications. A device token identifies a device to Apple's push service. It is not a name, an email, or a location.

Your sentences are visible to the people you are playing with. That is the point of the game, but it is worth saying plainly: anything you play onto a board is shown to your opponents and to anyone watching the game through its link.

Email we send

If you have opted in, we email you when it is your turn, once when a game has been idle long enough that it is about to end, when a game finishes, when someone offers you a rematch, and if we remove a game you were in. Game email is delivered through Resend, our email provider. Every one of those emails carries an unsubscribe link that stops reminders for that game, and you can turn off the all-games default from your account.

Where your sentences go

When you submit a sentence, we check that it is well-formed English. Two outside services help with that:

• LanguageTool, which we run ourselves on our own infrastructure, for grammar and spelling checks.
• The Anthropic API, which evaluates whether the text reads as a grammatical, meaningful sentence.

Both receive the sentence text and nothing else: no email address, no display name, no account identifier, no game link. Neither service is told who wrote the words or which game they came from. We cache the verdicts so a repeated phrase does not have to be sent again.

Error monitoring

We use Sentry to find out when something breaks. Reports carry the error, where in the code it happened, and coarse context like a game id. Secret seat tokens are stripped out before anything is sent, and we never attach player email addresses.

What we don't do

• No advertising, and no ad networks.
• No analytics or tracking pixels, first- or third-party. A game records only which shared link it was started from.
• No selling, renting, or trading your data.
• No building a profile of you across other sites or apps.

The companies named above are Supabase, Resend, Anthropic, Sentry, and Apple for push notifications, plus Vercel, which hosts Sentacle, Fly.io, which hosts our LanguageTool server, and Cloudflare, which runs our domain and forwards mail sent to our addresses. Each of them processes data to provide those specific functions to us. They are not permitted to use it for their own purposes.

Children

Anyone can play Sentacle with a game link. No account is needed. Accounts and email reminders are for players 13 and older, and we don't knowingly collect personal information from children under 13. If you believe a child under 13 has given us an email address, write to privacy@sentacle.app and we'll delete it.

Your rights, and how to use them

You can delete your account yourself, on sentacle.app or in the iPhone app: open your Profile (on the home page, Your account) and choose Delete account. It happens immediately, with no email to us and no waiting.

You can also ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Email privacy@sentacle.app from the address on your account and we will take care of it.

Deleting your account removes your email address, your notification settings, and any device tokens. Games you played in may remain on your opponents' boards, because a shared board is not solely yours to erase. They will no longer be connected to you or your email address: your seat there is shown as “Former player”.

Depending on where you live, you may have additional rights under local law. To exercise any of them, email privacy@sentacle.app.

Changes to this policy

If we change how any of this works, we will change this page and move the effective date at the top. This version is effective October 5, 2026.

Contact

Privacy questions and deletion requests: privacy@sentacle.app.

Sentacle is operated by Granite Spire Holdings LLC.