Privacy Policy

Last updated: June 22, 2026

Overview

Batchly is a free hobby website of browser games and small tools, available at https://batch-ly.com. It is run by an individual as a personal, non-commercial project. This policy explains, in plain language, exactly what information Batchly collects, why, where it is stored, who it is shared with, and the choices you have.

Batchly is intentionally light on data collection. There is no advertising, no analytics or tracking SDK (no Google Analytics, Facebook Pixel, Mixpanel, Sentry, or similar), and nothing is sold. You can browse and play most games without an account at all. You only create an account if you want cloud saves, leaderboard scores, achievements, and a public profile.

“We”, “us”, and “Batchly” refer to the individual operator of this site. By using Batchly you agree to this policy.

What we collect

What we collect depends on what you do. Most data is tied to an account; some is collected from anyone who loads the site.

• Account details (if you sign up): your email address and a password, or — if you use “Continue with Google” — your Google account’s name, email address, and (handled by Google/our auth provider) your Google account ID. We also store a display name and a system-generated account ID.
• Profile content you choose to add: a display name, an avatar (an emoji emblem or a photo you upload), and an optional bio. None of this is required, and your avatar is never imported from Google — it is only what you set yourself.
• Game data (signed-in users): leaderboard scores you achieve, cloud saves of your game progress, and achievement unlocks. Cloud saves work by snapshotting the data a game stores in your browser for that game (such as progress, high scores, and settings).
• Things you submit voluntarily: bug reports and feedback (free-text, plus an optional contact and — for signed-in users — your email, the page you were on, and basic device/browser info you provide), feature suggestions, and your email if you join the announcements/waitlist list.
• Basic technical data: like any website, our hosting and content-delivery providers automatically receive standard request information (your IP address, browser/User-Agent, and the pages and files you load) so the site can be served to you. A handful of third-party services that deliver fonts, the 3D homepage animation, and the Python game runtime also see your IP and User-Agent when their assets load (listed under “Sharing and third parties” below).

Google user data (Sign in with Google)

If you choose “Continue with Google”, Batchly uses Google Sign-In purely to authenticate you. We request only the basic, non-sensitive sign-in scopes: openid, email, and profile. We do NOT request access to Gmail, Drive, Calendar, Contacts, or any other Google service.

From those scopes, Google provides: your name, your email address, your profile picture URL, and your Google account ID. We use this information for one thing — to create and sign you into your Batchly account, and to pre-fill your display name (so Google users see their real name instead of an email prefix). Your account email is kept private; your display name (and any avatar you later set) is shown publicly on leaderboards and your profile.

Batchly’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In keeping with Limited Use, Google user data is used only to provide and improve the sign-in/account features above. We do NOT sell or transfer Google user data to third parties such as advertising platforms, data brokers, or information resellers; we do NOT use it for serving ads (including personalized, retargeting, or interest-based ads); we do NOT use it to determine credit-worthiness or for any lending purpose; and we do NOT use it to train generalized AI/ML models. No human reads your Google data except where you ask for support, where it is necessary for security or to prevent abuse, or where required by law.

How we use your information

We use information only to run the features you actually see on the site.

• To create your account, sign you in, keep you signed in, and verify your email on sign-up.
• To show your public profile and to display your name (and avatar) next to your scores on leaderboards.
• To save your game progress to your account so you can resume on another device.
• To award and display your achievements and basic profile stats.
• To read and act on the bug reports, feedback, and feature suggestions you send.
• To email you announcements only if you opted into the announcements/waitlist list, and to send essential account emails such as the sign-up verification link.
• To provide AI features you trigger yourself (the optional AI chat assistant — see “Sharing and third parties”).

Public vs. private — what other people can see

It matters which parts of your data are visible to others, so here is the exact split based on how the site is built.

• PUBLIC (visible to anyone, including signed-out visitors): your chosen display name, your avatar (emoji or uploaded photo), your optional bio, your account ID, your leaderboard scores with their per-game details, your unlocked achievements, and your level/rank. These appear on leaderboards and on your public profile page (at /u/<your-account-id>), which anyone can view. Uploaded avatar images are stored in a publicly readable location.
• PRIVATE (only you, via your account): your account email and your cloud game saves.
• ADMIN-ONLY (only the site operator can read; not public, and not visible to you again after you submit): feedback and bug reports you submit (including your email, account ID, and the page you were on), and emails on the announcements/waitlist list.
• Your email address is never shown on public leaderboards or public profiles.

Sharing and third parties (sub-processors)

We do not sell your personal information and we do not share it for advertising. Batchly relies on a small set of service providers to function. Each receives only what it needs:

• Supabase (our backend): the primary store for accounts and data — email, hashed password and/or sign-in identity, display name, avatar image, bio, leaderboard scores, cloud saves, achievements, feedback, and subscriber emails. Sessions are managed by Supabase.
• Google: as the identity provider when you choose “Sign in with Google” (see the Google section above), and as a font provider — Google’s font CDN receives your IP and User-Agent when page fonts load. Note: the operator also has an optional admin-only export that can push account/leaderboard/feedback data to the operator’s own private Google Spreadsheet; per our setup this export is not active, but we disclose it for transparency.
• Amazon Web Services (AWS): hosts and delivers the website (so AWS receives standard request data such as your IP, User-Agent, and requested URLs); runs the server-side Python used by certain “Server” Python games (which receives files you upload to those games plus your sign-in token); and runs the separate high-score board for the standalone OVERCLOCKED game (which stores the score and the name you type, with no account required).
• Self-hosted “Spark” AI server: if you (a signed-in user) use the AI chat assistant, the messages you type plus context about which games you have recently played are relayed to a self-hosted, OpenAI-compatible language model running on a relative’s machine. No email, name, or score values are sent — only the game titles/categories you played. Conversations are not stored by the app.
• Anthropic (Claude API): used only by the site operator (an admin-only feature) to auto-generate game descriptions from game code. No end-user personal data is sent.
• Email delivery service: delivers transactional and announcement emails; it receives the recipient email address and the message content at send time.
• Spline and jsDelivr (asset CDNs): when the homepage 3D animation or an in-browser Python game loads, your IP and User-Agent are seen by these CDNs as part of serving those assets. No account data is sent to them.
• Legal/safety: we may disclose information if required by law, or to protect the security and integrity of the site and its users.

Storage and security

Your account data lives in our Supabase backend; the website and certain compute run on AWS. These providers encrypt data in transit (HTTPS/TLS) and at rest as part of their managed infrastructure.

Passwords are never stored or logged in readable form by Batchly — they are passed straight to our authentication provider, which stores only a secure hash. Access to private data is enforced at the database level: you can read your own account row, your private cloud saves, and your email; your display name, avatar, scores, and unlocked achievements are public (shown on your profile and leaderboards); and only the site operator (admin) can read admin-only data such as feedback and subscriber emails.

No online service can be guaranteed 100% secure, but because Batchly collects so little and uses managed, access-controlled infrastructure, the exposure is intentionally small.

Data retention

We keep account data for as long as your account exists, so your profile, saves, scores, and achievements remain available to you. Feedback and bug reports are kept while they are useful for fixing issues. Announcement/waitlist emails are kept until you unsubscribe or ask for removal.

Standard web-request logs held by our hosting and CDN providers are retained according to those providers’ own policies.

If you delete your account, the associated data is removed as described below.

Your rights and choices

You are in control of your account data.

• Access and edit: view and change your display name, avatar, and bio anytime on your Profile page.
• Delete your account and data: because account data is keyed to your account, deleting your account removes your profile, cloud saves, scores, and achievements (deletions cascade in our database). To request account deletion, email the contact below from your account email and we will delete it.
• Unsubscribe: announcement emails include an unsubscribe option, or you can ask us to remove your email.
• Sign-in choice: you can use email/password instead of Google, or vice versa. (Batchly does not offer magic-link, OTP, password-reset, or Apple sign-in.)
• Disconnect Google: you can also revoke Batchly’s access from your Google Account security settings at https://myaccount.google.com/permissions.

Cookies and local storage

Batchly does not use tracking or advertising cookies. In practice the site sets no cookies for ordinary use.

It does use your browser’s local storage for a few practical things: keeping you signed in (your session token), remembering which announcements you have dismissed and whether you closed the subscribe popup, and holding each game’s own saved progress in your browser. These stay on your device; the session token is sent only to our own backend to authenticate your requests.

Children’s privacy

Batchly is a general-audience hobby site and is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account or submitted personal information, contact us and we will delete it.

Changes to this policy

We may update this policy as the site changes. When we do, we will revise the “Last updated” date at the top and post the new version at this same URL. Significant changes may also be announced on the site.

Contact

Questions, data requests, or account-deletion requests: email us at support@batch-ly.com.

Batchly is operated by an individual as a personal project.