Privacy Policy

Service availability in this build

Cloud accounts

Not enabled in this preview. Local play stays on this browser.

Optional analytics

Google Analytics 4 uses regional privacy defaults: on where prior consent is not required, and off until you agree elsewhere. You can turn it off through Privacy choices. Recording providers are not enabled.

Purchases

PayPal checkout is not available in this preview. No purchase is offered or collected.

Display advertising

Google AdSense is not enabled in this preview.

Daily email reminders

Not connected in this preview. No reminder email is scheduled or delivered here.

Contact for privacy questions: support@twominuteclutch.com — this mailbox is not active yet. Email delivery and replies are unavailable; do not send personal or payment information.

All Access notification list

If you opt in, the notification service records your email, signup location on this site, consent version and time for All Access launch news. This is separate from an account or daily reminders. Emails are not sent to analytics. Use your private removal link to delete the entry.

Unnotified entries expire after 180 days. The service removes expired rows when processing requests; the operator also runs the documented cleanup before notifications and during maintenance. Collection does not mean that a message has already been sent or scheduled.

The form identifies online collection, local preview or an unavailable service. Local preview records stay only on the preview computer. Hosted collection uses Cloudflare D1; a keyed network identifier is temporarily used for abuse limits, without storing the raw IP address in the waitlist.

Local game storage

The game uses browser storage for guest progress, saved attempts, cards, daily play allowance and settings such as sound, motion and measurement choice. This storage stays in this browser unless you use an enabled sync or report action.

Clearing site data removes local records. Browser storage is not a backup, and private browsing may discard it when the session ends.

Accounts and cloud records

When cloud accounts are enabled, the account service processes your email and authentication session. The game stores the profile and settings you choose, accepted attempt records, collection grants and sync information needed to provide the account.

Authentication credentials are used to authorize requests. Private cloud progress uses account authorization; search-engine settings do not control access. Sign out on shared devices.

Optional measurement

When measurement is enabled under your regional default or saved choice, gameplay events describe actions such as starting or completing a drive, together with challenge and release identifiers. A random, pseudonymous measurement identifier is created only while measurement is allowed to connect game usage reports. It is separate from your account identity; measurement events exclude emails, sign-in links and access tokens.

Google Analytics, Google Tag Manager and Microsoft Clarity do not load on private account, purchase or administration pages. Before measurement starts, our hosting service supplies the visit’s country-level privacy policy; we do not use browser language or timezone to guess it. Prior consent is required in the EEA, UK, Switzerland, Brazil, Canada, China, South Korea and Türkiye under our configured policy. Unknown regions stay off. Elsewhere, measurement is on by default. A saved refusal or a Global Privacy Control or Do Not Track signal keeps measurement off. If server measurement is configured, a limited set of registration, guest-merge, purchase-restore, statistics and collection events can pass through our account service to Google Analytics after it checks your latest saved consent. This measurement remains disabled when the required provider configuration is absent. The preview has not verified reporting across those services.

You can reject optional measurement and still play the core game. Changing your choice in the site's privacy controls stops future optional measurement and removes the browser's measurement identifier. Previously received provider records follow the provider's retention and deletion policies.

Payments, ads and reports

When checkout is enabled, the payment provider handles payment details. The game stores the order reference, product, status and entitlement needed to deliver or restore the purchase. We do not need your full card number in a game record.

Google display ads are currently disabled. When enabled, ad providers may use cookies, local storage, IP addresses and other identifiers to deliver and measure ads under the choices shown to you. See how Google uses information from partner sites. Game attempts are never awarded for clicking an ad.

A support report includes what you submit. Review optional attachments and omit credentials or information you do not want support to receive.

Sharing and earned attempts

Copying a challenge link shares its starting situation, seed and simulation versions. The accompanying text can describe the drive result. It does not publish an account, private collection or complete attempt record.

Where an action offers an extra attempt, the service records its eligibility, UTC day and grant status to apply the daily cap and reject duplicate claims. A copy or share-sheet handoff does not itself prove a qualifying friend referral. The service checks the displayed referral requirement before confirming a grant. Do not include personal information in a shared link.

Optional reminders

If you choose an available notification or install option, your browser manages the permission. You can revoke it in browser settings. An exported calendar reminder is a file for you to review and import; it is not an email subscription or proof of delivery.

Daily email reminders are a separate, explicit choice for a verified account. When the service is configured and you opt in, we store your verified account email, preference, consent version and delivery status. Resend processes the recipient address and message to send the reminder. At most one reminder is attempted per scheduled UTC day; saving a preference or receiving a provider response does not prove inbox delivery.

Turn email reminders off in the available account controls or use the personal unsubscribe link in a reminder. Opting out removes the email from our reminder-recipient record and stops future sends. Your disabled preference can remain with the account so that signing in again does not opt you back in. Account deletion removes its reminder records. This preview has no connected email-reminder sender or delivery schedule.

Retention and your choices

The cloud-retention schedule below is the policy for activating cloud services. Its cleanup has not yet been verified, and cloud records are not collected by this unconfigured preview.

Local progress remains on your device until you delete it, your browser removes it or the saved format can no longer be used. Use the device data controls to export or erase it.

For enabled cloud accounts, profile, settings, gameplay and collection records are kept while the account remains active. Account deletion removes those live account records, support reports and ownership links. Routine deleted-data backups expire within 35 days and are used only for recovery; a restored backup is subject to the same deletion request.

Closed support records are kept for up to 12 months after closure. Security and administrator audit records are kept for up to 90 days, unless a specific unresolved incident requires a documented extension. Minimal transaction records are retained for seven years after the transaction for accounting and dispute handling. After account deletion their account link is removed and they contain no email or display name. A specific legal preservation duty can require longer retention of the relevant record; it does not justify keeping unrelated gameplay.

For optional GA4 measurement, the planned user/event retention setting is two months with activity-based resets disabled; standard aggregated reports follow Google's separate rules. Clarity's standard playback retention is 30 days, and heatmaps, click data or retained sessions can last nine months. GA4 is configured under the regional privacy defaults above. Clarity recording is not enabled. See their Analytics and Clarity retention descriptions.

Use account data controls or the contact route above to request access, correction or deletion when the service is available. The contact mailbox is not yet active in this preview. PayPal keeps its own payment records under its applicable privacy statement, independently of deleting a game account.

Do not submit children's personal information. This service is not designed to collect personal information from children under 13.

Third-party services and changes

Enabled providers may process data under their own policies: Supabase, Google, Microsoft, PayPal and Resend. A listed integration does not mean it is active in every preview.

Changes affecting data use are described in Updates. The service list above describes this build; optional integrations can remain unavailable in a preview.