28-0 is run by an individual developer, not a company. This policy explains what information the game collects, why, and what choices you have. If anything here is unclear, email 280grandslam@gmail.com and ask.
Playing as a guest. No account is required. The game generates
a random identifier in your browser (kept in localStorage) so your progress and
leaderboard entries stay attached to you across visits. This identifier is not
linked to your name, email, or any other personal information, and it never leaves
your device except as an anonymous handle like guest31483483 attached
to a leaderboard row.
Signing in with Google. If you choose to sign in, Google shares your email address and account ID with us so we can create your profile. We ask Google only for your basic email and profile scope — nothing else. We use this to:
Gameplay data. Your draft picks, simulation results, personal best, and win streak are stored locally in your browser. If a run is submitted to the leaderboard, we store your display name, win-loss record, titles won, medal tier, the six-card Build ID, and a timestamp. We do not store individual match data or anything else about how you play.
Automatically collected information. Our hosting providers (Vercel for the site, Supabase for sign-in and the leaderboard) automatically log standard technical information — such as IP address, browser type, and request timestamps — for security, abuse prevention, and diagnosing outages. We do not access this beyond what's needed to keep the game running.
28-0 is free to play and shows a banner ad to stay free. Advertising is served by Adsterra, which may collect technical information — such as your IP address, device and browser type, and an advertising identifier — in order to deliver and measure ads. That collection happens under Adsterra's own privacy policy, which you can read at adsterra.com/privacy-policy.
We do not send Adsterra your email address, username, guest identifier, or any of your gameplay data. The ad is isolated in a sandboxed frame that cannot read your 28-0 account session or your locally stored progress.
If you use a content blocker, the ad simply does not load and the rest of the game works normally.
We use a small number of service providers to run the game, each acting only on our instructions:
We do not share your information with anyone else, except if required to by law, or to protect the safety of the game or its players.
Guest data lives only in your browser until you clear it. Account data and leaderboard entries are kept for as long as your account exists, or until you ask us to delete them.
If you are in the European Economic Area, UK, or a U.S. state with its own privacy law, you may have additional rights — including access, correction, deletion, portability, and objection to processing. We honor these requests for all players regardless of where you live, using the contact above.
28-0 is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it promptly. Contact us if you believe a child has provided us information.
We use industry-standard measures to protect your information, including encrypted connections (HTTPS) and database access controls that prevent the game's client code from writing directly to the leaderboard. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
If this policy changes, we'll update the effective date at the top of this page. Material changes will be reflected here before they take effect.
Questions, requests, or concerns about this policy or your data: 280grandslam@gmail.com