Privacy policy

Last updated: April 26, 2026

How camera processing works

When you tap start on the play page, your browser asks for camera access. If you allow it, your browser opens the camera and streams frames into a small pose-estimation neural network that runs entirely on your device. Each frame is analyzed locally and immediately discarded. No frame is ever transmitted to any server — not ours, not a third party, not a CDN.

We do not have any technical mechanism to record, save, or replay your video, and we do not want one. The camera stream is held only in the browser tab's memory and stops the moment you close the tab.

What we keep on our own servers

When (and only when) you submit a leaderboard entry we store:

• The display name you typed (≤ 20 characters).
• Your final score for that run.
• The rep timeline — millisecond timestamps of each counted rep, used by our anti-cheat checks.
• The challenge id and the date/time of submission.
• A short, one-way hash of your IP address (kept up to 30 days for abuse and rate-limit detection — we cannot reverse it back into an IP).

That is the entire list for our own servers. We do not collect biometric data, body measurements, photographs, or any information from the camera frames themselves. We do not collect your real name, address, phone number, email (unless you write to us), or precise location.

Analytics and tag management

We use Google Tag Manager (GTM) on every page of SixSeven to manage third-party measurement and advertising scripts. GTM is itself only a loader — by itself it does not collect personal data — but the tags it loads do. The tags we run, or may run, through GTM include:

• Google Analytics 4 — measures aggregate site usage: page views, sessions, traffic source, country, device and browser stats. Sets first-party cookies and processes a truncated version of your IP address.
• Google Ads / conversion tracking — measures the effectiveness of ad campaigns we may run, and may build a remarketing audience.
• Other measurement, attribution, or remarketing tags we may add as our marketing setup evolves. The current list of active tags is always discoverable in your browser's network panel undergoogletagmanager.com and the individual tag domains.

These services log standard request metadata (IP, user agent, referrer, timestamp), set their own cookies and storage, and are governed by their providers' privacy policies — most notably Google's at policies.google.com/privacy.

We do not push any leaderboard data — your display name, score, or rep timeline — to any analytics or advertising tag. The data on our own servers is never combined with third-party browsing data.

Cookies and similar storage

The tags above may set cookies in your browser. The ones you are most likely to see:

• _ga, _ga_* — Google Analytics 4 client/session IDs (~ 2 years).
• _gcl_au — Google Ads conversion linking (~ 90 days).
• Other Google cookies (IDE, NID, etc.) as set by ad and remarketing tags we add later.

We do not set our own tracking cookies for advertising. The only first-party storage we use is localStorage entries for your most recent display name and your personal best per challenge. Both live on your device and never reach our server.

To block the third-party tags entirely, use a tracking-blocker extension such as uBlock Origin or Privacy Badger, enable the Global Privacy Control signal in your browser, or install the official Google Analytics opt-out add-on. The site continues to work fully — only the analytics fall silent.

What we do not do

• No sale of personal data for money. We do not sell user data to brokers, partners, or anyone else.
• No video, audio, or biometric recording. Nothing your camera or microphone produces is ever transmitted off your device.
• No combining ads data with our leaderboard data. The display name and score we keep are never sent to Google or any other ad platform.
• No first-party advertising cookies of our own. Any ad-tech cookie you see came from a third-party tag described above.

Browser local storage

For your convenience we store two small values in your own browser using localStorage: your most recent display name (so you do not retype it) and your personal best per challenge (shown next to your final score). Both live only on your device and never reach our server. You can clear them at any time from your browser settings.

Third-party assets we load

The pose-estimation model and its WebAssembly runtime are downloaded once from public CDNs (Google Cloud Storage and jsDelivr) the first time you play. These are static asset requests; we do not pass any personal data to those CDNs and they receive only the standard request metadata your browser would send when fetching any public file.

Your rights and choices

• Delete your leaderboard entry. Email [email protected] with the display name and approximate submission date and we will remove the entry, typically within 7 days.
• Opt out of analytics and advertising tags. Use a tracking-blocker extension, enable Global Privacy Control, or install the Google Analytics opt-out add-on linked above.
• EU / UK (GDPR). You have rights of access, rectification, erasure, restriction, portability, and objection. Our legal basis for analytics is legitimate interest in improving the service; you can object at any time using the opt-out methods above or by emailing [email protected].
• California (CCPA / CPRA). You have rights to know, delete, and correct. We do not sell personal data for money. Some advertising tags may meet the CPRA definition of “sharing” for cross-context behavioral advertising — to opt out of that sharing, enable the Global Privacy Control signal in your browser (we honor it for the Google services we use) or block the tags with an extension.

Children

SixSeven is intended for users 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child has submitted a leaderboard entry, contact us and we will remove it.

Changes

We may update this policy from time to time — for example, if we add a new tag or feature that needs a new disclosure. The “last updated” date at the top of this page will reflect the most recent change. Material changes will not apply retroactively to data we have already collected.

Contact

Questions, deletion requests, or anything else: [email protected].