How MindArc handles data.
MindArc is available for public play while development and improvements continue. This notice describes the data handled by the current web app and will be updated when material data practices change.
Gameplay and progress
MindArc stores server-backed information needed to run the product, including saved sessions, game results, scores, accuracy, duration, game levels, Daily activity and challenge records. This information is used to restore progress, adapt Practice, build progress views and reproduce friend challenges.
Guest and signed-in identity
Guest play uses a random browser cookie, whose hash links to a MindArc player record. Signed-in players authenticate through Supabase Auth, which supplies a verified identifier and email. MindArc associates that identifier with progress, preferences and eligible Premium entitlement state.
Preferences and cross-device sync
Browser storage is still used for fast local access. When you are signed in, MindArc also syncs Personal Goals, speed-adaptation and colour-accessibility choices, reduced-motion and high-contrast preferences, completed calibration summaries, MindArc Lab records, and Beat My Best personal records to your MindArc profile. Sound, haptics, the selected Progress tab, unfinished rounds and temporary challenge-series state stay on the current device.
Payments and Premium
When checkout is enabled, subscriptions and payment methods are processed by Stripe. Stripe may process billing name, email, payment details, invoices and subscriptions. MindArc stores Stripe customer, Checkout, price and subscription references, payment-event records and entitlement state needed to grant, restore, manage or revoke Premium access. The game database does not store full card numbers. Use Premium → Manage billing to access Stripe billing management.
Friend challenges and sharing
Challenge links are user-initiated. A challenge identifier can be used to load the shared challenge’s games, levels and target result so another player can attempt the same run. Do not share a challenge link somewhere you do not want others to access it.
Advertising, sensors and analytics
The current app code does not include an advertising SDK or a separate product-analytics event pipeline. MindArc’s game experience does not require precise location, camera or microphone access, and the main app response explicitly restricts those browser permissions.
Accounts
MindArc uses Supabase Auth for public accounts. You can sign in with email and password or, when enabled, continue with Google through Supabase OAuth. Supabase handles authentication tokens and login credentials; Google supplies the account identity you choose during OAuth. MindArc uses the resulting account identifier and email to associate server-backed progress, settings and purchase entitlement state, and does not store your Google password or MindArc password in its game database.
Data choices
Signed-in players can use Account & data to download their MindArc data, reset saved progress while keeping the login and any Premium entitlement, or delete the MindArc profile and related progress, challenges and purchase-entitlement references. Deleting MindArc data does not delete the separate Supabase login itself.
Privacy questions
For questions about data handling or account deletion, contact support@playmindarc.com. Your message is delivered to our dedicated support inbox.
Updated October 20, 2026