Privacy Policy

Last updated 27 September 2026

This page explains what information InARow collects, why, who we share it with, and the choices you have. InARow is a small, independent website for playing 4-In-A-Row online, run by Luca Carraretto in the United Kingdom, who is responsible for your information. It’s currently an invite-only test version (a “closed alpha”). If you have any questions, email us at help@inarow.life.

What we collect

Your account: your email address and your password. Your password is stored only in scrambled (hashed) form by our log-in provider, and we never see it. If you sign in with Google, we receive your email address and your Google account ID from Google. Google also sends your name and picture; they’re stored with your account but never shown anywhere.
Your profile: your username, the first and last name if you choose to add them, your profile picture if you upload one, and the date you joined.
Your online games: every move, the clock times, the result, and your rating before and after, plus your ratings and rating history. Games against the computer or on one device are not stored.
In-game chat: chat messages are stored with the game they were sent in.
Reports: if you report a player, we store your report (who reported whom, the reason and any note) and email it to our moderators. If you report a player from a game you played together, that game’s chat is included.
Your invite code: which code you used to join.
Technical information: your IP address, used to stop abuse (for example by limiting failed log-ins and wrong invite codes), and routine logs that our providers keep for a limited time. While you play, your browser regularly tells our server that you’re still connected, so your opponent can see if you disconnect.

Cookies

We only use the cookies the site needs to work: cookies that keep you logged in, and a few short-lived ones that protect signing in with Google. There are no advertising or tracking cookies, and no analytics.

How we use it

To run your account, your games, matchmaking and ratings.
To show your profile, games and ratings to other players.
To keep InARow safe and fair: moderating usernames, pictures and chat, dealing with reports, and preventing cheating and abuse.
To send you emails about your account: confirming your email address, resetting your password, and messages about moderation of your account. We don’t send marketing emails.

We don’t sell your information, and we don’t use it for advertising.

Who can see what

Anyone, even without an account: your username, any first and last name you add, your profile picture, the date you joined, your games and your ratings.
Never shown to other players: your email address.
Chat: the two players in the game can see it. Our moderators can see it when needed, for example when a player is reported.
Our moderators (admins) can also see account email addresses, so they can contact you about your account.

Companies that help us run InARow

These companies process information on our behalf, only to provide their services to us:

Supabase: our database, log-ins and live game connections. Your data is stored in Frankfurt, Germany.
Vercel: hosts the website. Our servers run in Frankfurt, Germany.
Resend: sends our emails.
Sightengine: automatically checks uploaded profile pictures for inappropriate content. Your picture is sent to them to be checked before it’s saved.
Google: only if you choose to sign in with Google.
Cloudflare: runs our domain name and forwards emails sent to our inarow.life addresses.

Some of these companies are based outside the UK and EU, for example in the United States.

How long we keep it

We keep your information for as long as you have an account. You can delete your account at any time in Settings. When you do, your email address, password, profile (username, names and picture) and ratings are deleted. Your past games stay on the site so your opponents’ game histories stay complete, but they show you as “Deleted user” with no link to you, and chat messages stay with those games. Reports are kept for as long as our moderators need them. Copies may remain in backups for a short time.

Your rights

You can see and change your profile in Settings.
You can delete your account in Settings. This can’t be undone.
You can ask us for a copy of your information, ask us to correct or delete it, or object to how we use it, by emailing help@inarow.life.
If you’re unhappy with how we’ve handled your information, you can complain to the UK’s Information Commissioner’s Office (ico.org.uk), or to the data protection authority where you live.

Children

You must be at least 12 years old to use InARow. If you’re under 13, you need permission from a parent or guardian first. Parents and guardians can contact us at help@inarow.life about their child’s account, including to have it deleted.

Changes

If we change this policy, we’ll update this page and the date at the top. We’ll tell you on the site about any important changes.