Privacy
Last updated 27 September 2026
CMQuant has no analytics and no advertising. You can play every game without an account, and if you do, nothing you do here is sent to us. Accounts are optional and exist for one reason: saving your runs so they can appear on leaderboards. This page describes what each of those means concretely rather than in the usual language.
What is stored, and where
Your personal bests and your daily-challenge result are written to localStorage in your own browser. They stay on the device you played on. They are not uploaded, not backed up, and not readable by us or by anyone else. Clearing your browser data deletes them permanently and we cannot restore them.
The complete list of what gets written:
cmquant:<game>:best— your highest score in each game, as a number.cmquant:daily:<date>— the score, accuracy and streak from your daily attempt.
Without an account, that is everything. No name, no email, no device identifier, nothing that identifies you.
If you create an account
Signing in is done with a one-time code sent to your email. Accounts are stored with Supabase, the database service CMQuant uses, and hold:
- Your email address, used only to send you sign-in codes. It is never shown to other players and never used for anything else — no newsletters, no marketing.
- Your username, which you choose. It is public, because leaderboards show it.
- Your saved runs: which game, the seed, your score, how many you got right out of how many, your best streak, and when. These are public, because leaderboards are built from them. Assisted runs are never saved.
While you are signed in, your browser keeps a sign-in token in localStorage (a key starting sb-). Signing out removes it.
You can delete your account at any time from the account page. That removes your email, your username and every saved run at once, and it cannot be undone.
Cookies
CMQuant sets no cookies, with or without an account. It uses browser storage, which is a different mechanism with the same practical effect: data kept on your device. None of it is used for advertising or shared with anyone, so there is no consent banner. If that ever changes — most likely by adding advertising — a consent step will land at the same time, not after.
Third parties
The site loads no third-party scripts, no trackers and no external fonts. Fonts are downloaded at build time and served from the same domain. The one outside service your browser talks to is Supabase, and only for account actions: signing in, choosing a username, and saving a run while you are signed in. Signed out, your browser never contacts anyone else while you play.
The site is hosted on Vercel, which keeps standard server request logs. Those logs include IP addresses and are held by Vercel under their own privacy terms. We do not read them, query them, or connect them to anything you do in a game.
Children
CMQuant is built for university students and is not directed at children under 13. Please do not create an account if you are under 13. If we learn that an account belongs to someone under 13, we will delete it.
If any of this changes
The next change on the roadmap that would move more data off your device is a subscription. It does not exist yet. When it ships, this page changes before it does, and it will say plainly what is collected and why.
Standing
CMQuant is a student-built project and is not affiliated with or endorsed by Carnegie Mellon University. It is not a legal document drafted by a lawyer; it is an honest description of what the site collects, which without an account is nothing. Questions go to the project owners.