PRIVACY
Us vs AI, LLC ("Us vs AI," "we," "us," or "our") owns and operates this daily game and experimental AI benchmark. Guest play is available without creating an account. Optional accounts can be used to save profile information, streaks, game history, player-character settings, friendships, and friend challenges.
Information processed
The service processes gameplay information such as puzzle responses, scores, round outcomes, and timing. Standard technical request information may also be processed by the service and its infrastructure providers, including IP address, browser and device information, request timestamps, error logs, and security telemetry.
For abuse prevention, Us vs AI may derive a one-way keyed identifier from a requester's network address for short-window rate limiting. The rate-limit table does not store the raw network address.
Guest play
Guest players receive a random browser identifier in an HTTP-only cookie so the service can enforce one official daily run and prevent a page refresh from creating a fresh attempt. The database stores a keyed hash of that identifier rather than the cookie value itself.
Accounts
If you choose Google, Apple, or email sign-in, authentication information such as your email address, account identifier, provider information, and session data is processed through Supabase Auth and, when applicable, Google or Apple. You may optionally provide a display name. Country is automatically estimated from trusted hosting-provider network headers for your profile and daily run; you cannot select it manually. VPNs and network routing can affect the estimate. Precise location is not collected for this feature.
Premium users may make one reattempt of the same five daily games and play one ten-round Atlas-only match each day. The original attempt, reattempt, and Atlas match are stored separately. The higher completed main match is used for the player’s daily standing, and every round from both completed main matches contributes to aggregate world scores. Atlas-mode responses and scores remain a separate game record. Premium users may also save choices for a classic 8-bit character, such as hair style, skin tone, clothing style, colors, unlocked items, and animated aura backgrounds. The character creator does not require or upload a photograph.
Signed-in players who complete an official first attempt are added automatically to public standings. A standing may show the player’s display name, score, detected country, permanent level, and rendered 8-bit character. The level is the longest consecutive-day play streak the account has achieved. Guest results can also appear, but only as PLAYER ANONYMOUS with a shadow character; the guest cookie value and its private keyed database identifier are never displayed.
Friends and challenges
Signed-in users receive a randomly generated friend code that can be shared to help another player find the correct account. Friend search can display a player's display name, friend code, detected country, and rendered character. Us vs AI does not expose a player's email address through friend search.
If you add or challenge another player, Us vs AI stores the friendship or request status, challenge participants, the locked challenge puzzle definitions, each participant's puzzle responses, timing, and scores. Friend-challenge results are separate from the official daily AI benchmark and public daily leaderboard. During an active asynchronous challenge, round scores are kept sealed until both participants finish their five-round runs.
AI benchmark calls
Before each game day opens, the service sends the same five canonical main-match puzzle images plus ten Atlas-mode images and instructions to the benchmark AI providers. Those official calls do not need player identity, player answers, email addresses, or account profile information. AI answers are locked before the public day is released and reused for all players that day.
Post-round character banter is generated locally by the site and does not create an additional official AI benchmark attempt.
Match sponsorships
The pre-match introduction and eligible Standard-account match placements may include a contextual sponsor supplied through BuySellAds. When a sponsored creative is requested, BuySellAds may receive the network address and browser user-agent needed to select, pace, measure, and protect the ad delivery. Us vs AI does not send your email address, account profile, puzzle answers, scores, friend list, or game history to BuySellAds for this request.
A sponsor creative can include BuySellAds impression and click measurement and, when supplied by the campaign, limited third-party measurement pixels. Sponsor links open through the advertiser or BuySellAds tracking URL. When no paid sponsor is available, Us vs AI shows its own house creative instead.
Service providers
Us vs AI uses service providers for hosting, database storage, authentication, security, advertising, and AI-model inference. These may include Vercel, Supabase, Google or Apple for users who choose those sign-in options, BuySellAds for contextual match sponsorships, and the AI providers identified in the benchmark. Stripe processes optional Premium payments through its hosted checkout and billing portal. Stripe receives billing contact and payment details you provide. Us vs AI stores Stripe customer and subscription identifiers, membership status, billing interval, and access dates; it does not store full card numbers or card security codes. Private sandbox payments use test data.
Referral rewards
When you use a friend’s referral link, we store the inviter relationship, qualifying payment identifiers, and reward usage to provide signup and renewal discounts. Inviters see their own reward counts and prices; the referral dashboard does not reveal your email or payment details.
Product analytics
The owner can view aggregate game completion, repeat play, and membership statistics from operational records. If you allow optional usage analytics, we also record visits, action counts, campaign labels, and a random browser-session identifier. Guest play may be associated with your account when you sign in. We do not put emails, puzzle answers, or full referring URLs in analytics events. You can change your optional analytics choice on the Cookie Notice page.
Cookies and similar technology
The service uses functional cookies for guest-run identity, authentication sessions, and private pre-launch access where applicable. Match sponsorships can also use impression, click, and campaign-measurement requests supplied by BuySellAds or the advertiser. Us vs AI does not use gameplay, friendship, or account-profile data to build a behavioral advertising profile. The Cookie Notice describes these technologies and browser controls in more detail.
Mobile apps
The iOS and Android apps use a locally installed interface and connect to the same Us vs AI service for daily puzzles and scoring. The apps may use the device network stack and a functional cookie to preserve a guest run, observe whether the device is online, provide haptic feedback, and copy a score only when you press the score-sharing control. The first mobile release does not request precise location, contacts, photos, camera, microphone, or advertising-tracking permission, and it does not offer account creation or purchases inside the app.
Test Scores benchmark data
Us vs AI continues to record de-identified human score observations and AI benchmark results for internal evaluation. Test Scores subscriptions and public downloads are unavailable; access to private CSV exports is restricted to the site owner. Human exports exclude names, usernames, emails, account IDs, IP addresses, location, payment details, and raw human answers. Current-day and future puzzle answers are excluded. Nonidentifying score observations may be retained after account deletion to preserve the historical dataset.
Contextual advertising
Match sponsorships are designed as contextual advertising tied to the Us vs AI experience rather than advertising selected from a profile built from your gameplay or account activity.
Retention and benchmark integrity
Account profile, friendship, challenge, and authentication records are retained while the account and related records exist. Operational records are retained as reasonably necessary for service operation, security, debugging, abuse prevention, and benchmark integrity. Official gameplay rounds may be retained after account deletion in de-identified form so historical aggregate benchmark results do not change retroactively.
Account deletion
Signed-in users can delete their account from the Account page. Account deletion first cancels the membership and deletes the app-specific Stripe customer, then removes the authentication account, profile, billing link, account entitlements, friendships, and friend-challenge records tied to that account. Stripe may retain transaction records under its own retention requirements. Historical official gameplay records are disassociated from the deleted user and may remain as de-identified benchmark observations.
Your choices and rights
You can play as a guest, decide whether to create an account, update available profile settings, manage subscriptions through Stripe, and delete your account through Account settings. You can also control cookies through your browser, although blocking necessary cookies may prevent sign-in, guest-run limits, or other core features from working. Depending on where you live, applicable law may provide additional rights to access, correct, delete, or restrict certain personal information; identity verification may be required before a request is completed.
Children
Us vs AI is a general-audience service intended for people age 13 and older. We do not knowingly collect personal information from children under 13.
Security
Us vs AI uses technical controls including restricted database access, row-level security, server-only credentials, private benchmark and challenge puzzle storage, signed gameplay state, request rate limiting, and locked benchmark records. No Internet service can guarantee absolute security.