Privacy and Cookie Policy
Last updated: 19 October 2026
This policy describes what data the website https://minig.app ("Mini G"), a collection of online minigames to play with friends, processes. Mini G does not require an account: you play by choosing only a name.
1. Data controller and contact
The data controller is Filippo Bagatin, Verona, Italy.
For any privacy question or to exercise your rights: info@minig.app.
2. What data we process, why and on what basis
| Data | Purpose | Legal basis |
|---|---|---|
| Player name (chosen by you, max 24 characters) and content you enter while playing (answers, descriptions, drawings, lobby chat messages, votes) | To run the match and show this data to the other participants of the room. It is kept in the server's memory while the room is open and is not saved in the database (the exception is the names saved together with Frenzy mode scores, see the next item). It is not part of the statistics data. | Performance of the service you requested (Art. 6(1)(b) GDPR) |
| Frenzy mode scores (Aim Arena, Color Match, Flash Memory): name, score, game, period and the moment the score was reached. Saved only for games played on the Frenzy difficulty | To keep the best scores of each game for the week, the month and all time and to show them in the "Leaderboards" panel available from a room lobby; the same data is also returned by a public address of the game server (/leaderboards), readable by anyone without an account or a room. The panel shows the top 5 scores of each game and period (even several from the same name), with the name chosen by the player and the score; no time or other data is shown. A minimal automatic filter, applied only to what is displayed on the leaderboard, replaces names containing known offensive terms with "Anonymous player" and leaves the score where it is; the name saved in the database does not change and the filter does not promise to stop every inappropriate name. The filter does not apply to names in a room or to chat messages. | Performance of the service / legitimate interest (Art. 6(1)(b) and (f)) |
| Usage statistics (no names, no IP addresses, no game content): room code, room creation and closing dates, whether the room is public or private, mode, maximum number of players reached, game started, match start and end times, number of players at start, whether the match was completed; aggregated daily counters | To understand how many matches are played and which games work best; to show counters on the site. | Legitimate interest (Art. 6(1)(f)) |
| IP address and technical connection data | Security and anti-abuse: limiting room creation and excessive messages, applying a temporary block (15 minutes) to people who disrupt a room. The server uses the IP address (for IPv6 only the leading part) in memory; it does not store it in the database and, as far as the code shows, does not write it to the application logs. Hosting and network providers (section 4) may still record IP addresses under their own policies. | Legitimate interest (Art. 6(1)(f)) |
| Data processed by Google through the AdSense script (identifiers, cookies, device data) | To let Google verify the site with the Google AdSense script; no ad is shown at present. See section 5. | Consent, where required (Art. 6(1)(a)) |
We do not ask for email, phone number, date of birth or any other registration data, and we do not use traffic analytics. The site's fonts, images and libraries are served by the site itself; the only third-party code loaded is Google AdSense (section 5). The application's technical logs contain the room code, game, number of participants and moderation events, but not names, IP addresses or game content.
3. How long we keep data
- Name and game content: only in the server's memory while the room is open; they disappear when the room closes or the server restarts.
- Detailed statistics rows (rooms and matches, including the room code): saved in the database and automatically deleted after 60 days (default setting) from the room closing or the match ending; deletion runs periodically, so the deadline is approximate. Aggregated daily counters, which contain no personal data, are kept without an expiry date.
- Frenzy mode scores: for each game and period (week from Monday to Sunday, calendar month, all time; Europe/Rome calendar) only the 5 highest scores are kept, even if more than one belongs to the same name (a score that does not make the top 5 is not saved). Rows of weeks and months that have ended are deleted automatically (checked when the server starts, every hour and at every new save). "All time" scores stay indefinitely while they are in the top 5. The "Leaderboards" screen shows only the current week and month and "all time"; a name appears, even more than once, as long as its scores are in the top 5 of the period.
- Old Aim Arena leaderboard: the old Aim Arena names and scores saved before the Frenzy mode have been deleted from the database with an update in October 2026. The table was kept, empty, and is no longer written to; the public counters address (
/stats-summary) no longer returns any names or scores. - Removal requests: the app has no button to remove or report a name on a leaderboard; you can ask for one of your saved scores to be removed, or report a name, by writing to info@minig.app with the name used, the game and the period.
- IP address: in memory for as long as needed for the anti-abuse limits (inactive counters are discarded after about 10-30 minutes; a temporary room block lasts 15 minutes and is forgotten when the room closes).
- Application technical logs: retention depends on the settings of the game server's hosting provider (Railway).
- Data in your browser: see section 6.
4. Who we share data with (service providers)
- Railway — hosting of the game server.
- Supabase — database for statistics and scores (EU region, eu-west-1).
- Cloudflare — hosting of the website (the application's files and these pages), DNS, traffic routing (including to the game server) and forwarding of emails sent to info@minig.app; it sees visitors' IP addresses in order to deliver the service.
- Google (AdSense) — site verification and consent message, see section 5.
These providers process data on our behalf or as independent controllers, under their own terms and policies. We do not sell data. Some providers (for example Google and Cloudflare) may process data outside the European Economic Area; in that case the transfer relies on the safeguards provided by the GDPR (for example adequacy decisions or standard contractual clauses).
5. Google services (AdSense)
Mini G loads the global Google AdSense script, which lets Google verify the site. At present no ad unit is shown anywhere: not in lobbies, rooms, during matches, in chats, on reconnect screens or in results. If this changes, we will update this policy. Google's script (adsbygoogle.js) is loaded by the application in production on all devices (not on these information pages).
Google's script may use cookies and identifiers, including for ad personalisation and measurement. To learn how Google uses data from partner sites: policies.google.com/technologies/partner-sites. You can manage ad personalisation at adssettings.google.com.
Users in the European Economic Area, the United Kingdom and Switzerland are shown a Google consent message (consent management platform) before cookies and identifiers are used. You can change or withdraw your consent at any time from the "Cookie settings" link in the footer of the Mini G home page.
6. Cookies and local storage
The site does not set its own cookies. It does save some information in your browser (localStorage and sessionStorage), technical and needed for the site to work or to remember your preferences; the site does not use it for advertising. Google's cookies and storage (including remembering your consent choice) are set by Google. To change or withdraw consent use the "Cookie settings" link in the footer of the home page.
| Key | Purpose | Duration | Type |
|---|---|---|---|
mini-g-theme | Chosen theme (day/night) | Persistent (until you clear the site's data) | Technical, first party |
mini-g-language | Interface language | Persistent | Technical, first party |
mini-g-game-volume, mini-g-music-volume, mini-g-game-muted, mini-g-music-muted | Volume and mute settings for effects and music | Persistent | Technical, first party |
mini-g-music-theme | Music theme chosen for the background music; it stays on your device and is not sent to anyone | Persistent | Technical, first party |
mini-g-player-name | Last name used to join a room, to prefill the name field next time; it stays on your device and is sent to no one beyond the normal room join; cleared by clearing the site data | Persistent | Technical, first party |
mini-g:session | Room code, session identifiers, reconnection token and name, to rejoin the same room after a page refresh | Until the tab is closed or you leave the room | Technical, first party (sessionStorage) |
mini-g:telefono-votes | Votes already cast in the "Broken Telephone" game (Telefono senza fili) | Until the tab is closed | Technical, first party (sessionStorage) |
mini-g:preload-reload-at | Prevents repeated reloads after a site update | Until the tab is closed | Technical, first party (sessionStorage) |
mini-g-theme-draft-* | Drafts of the internal color preview page (not linked from the site), only if you open it | Persistent | Technical, first party |
| Google AdSense cookies, identifiers and storage data, including its consent message | Advertising and remembering your consent choice (see section 5) | Set by Google | Third party |
You can delete this data at any time from your browser settings.
7. Your rights
You have the right to request access to your data, rectification, erasure, restriction of processing, to object to processing and, where applicable, data portability. Where processing is based on consent, you can withdraw it at any time (for advertising, from the "Cookie settings" link in the home page footer). To exercise your rights write to info@minig.app: since there are no accounts, we may ask you for the name you used and the approximate date to locate the data (for example a saved score). You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with your local supervisory authority.
8. Children
Mini G is not directed at children under 14 and does not knowingly collect personal data from children under 14. If you believe a child has provided us with data, write to info@minig.app and we will delete it.
9. Changes to this policy
We may update this policy, for example when the site's features or providers change. The version in force is always the one at this address, with the last-updated date at the top; for significant changes we will say so on the site.