Privacy · Sip n Strut

The tavern is small. It does not sell your drink preference to other houses, does not follow you down the road, and does not keep a file on you in the back. What it does keep, it keeps in your own pocket — and here is the list of it, in plain language so the crier can read it aloud at the door.

What we write down in your pocket

Two small notes, stored in your own browser's localStorage. These never leave your device unless you choose to submit a score.

autoq.sessionStats.v1— the running tally for your AutoQ tab (hands played, best single hand, total score across all games in this browser). Wiped when you click “Flip the table” on the AutoQ page, clear your browser's site data, or open an incognito window.
autoq.playerName.v1— the last name you entered when submitting a score, remembered so we can pre-fill it next time. Wiped the same way.

What we write down in the big ledger

When you finish an AutoQ game and click Submit on the name prompt, the following is sent to our own backend (AWS DynamoDB, in the US-East-1 region) and associated with the name you typed:

The name you entered (1–20 letters / digits / spaces)
Your final score
The longest word your game produced, if any
The timestamp of submission

If you click Skipinstead, none of that is sent. An anonymous game-played counter increments either way — it holds no identifier of any kind, just a number that tells us how much AutoQ has been played in total.

When you sign in

Signing in (via Google, for now) rigs a fixed identity for the Tavern's Ledger and lets your AutoQ tally follow you across devices. If you never sign in, this section doesn't apply to you.

At sign-in, Google shares these with us and nothing else:

A Google subject ID (a stable internal identifier; not your email and not usable elsewhere)
Your Google display name
Your Google account email address
The URL of your Google profile picture

We do not see your Google password, any other Google service data, your contacts, or anything outside these four fields.

While signed in we store, keyed on your Google subject ID:

Your running AutoQ tally (hands played, best single-hand score, total score)
The timestamp of your last stat update

These live in the same DynamoDB table as the public leaderboard, under a USER#key prefix that isolates them from the game's public records. Your session is held in a signed cookie that expires after 30 days or when you click Sign out.

What we do not do

No third-party analytics. No Google Analytics, no Meta Pixel, no heatmaps.
No advertising cookies. No retargeting.
No tracking of which pages you visit beyond standard server access logs.
No selling, renting, or sharing any data we collect with third parties. The tavern keeps its own book.
No account system yet. If one arrives, this page will say so.

Who we talk to on your behalf

A few unavoidable outside houses make this tavern work. Each one sees only what it needs to do its job.

Vercel hosts the site. Standard server logs (request path, user agent, IP) are retained per Vercel's privacy policy. We do not operate Vercel Analytics.
AWS stores the leaderboard (DynamoDB) and runs the score-submission and stats endpoints (Lambda + API Gateway). Same data as listed above and nothing more.
Merriam-Webstervalidates words you type during a hand. The validation call goes from our server (not your browser) so the dictionary never sees your identity — just the words to check.
Google Fontsserves the typefaces the AutoQ gameboard uses. Your browser fetches them from Google's CDN, which means Google sees the request (IP, user agent). This happens only on pages that load the game surface.
Google OAuthhandles sign-in, if you choose to sign in. You're redirected to Google, consent to share the four fields listed above, and are sent back. We don't route any other traffic through Google on your behalf.

How to burn your entry

To clear the local notes:open the AutoQ page and click “Flip the table”, or clear this site's data in your browser settings (Application / Storage in dev tools works too).

To remove a leaderboard entry: send a note to sipnstrut@gmail.com with the name you used and the approximate date of the score. We will strike it from the record.

To delete your signed-in stats: email sipnstrut@gmail.comfrom the Google account you signed in with (or say which account) and we'll wipe all USER#<subject-ID> items. A self-service delete button is on the roadmap; for now the manual channel is the guarantee.

To sign out or revoke the OAuth app:click your name in the header and choose Sign out to end the session on this device. To revoke Sip n Strut's access to your Google account entirely, visit myaccount.google.com/permissions and remove “Sip n Strut” from the list. (Revoking there doesn't delete any stats we've already stored — use the email path above for that.)

Changes

If we ever add analytics, accounts, or any form of tracking, this page will be updated and the date at the top will change. If the update is substantive (new categories of data, new recipients), that change will be called out in plain view.

Questions

Mail the tavern at sipnstrut@gmail.com.