Privacy policy

Rank5 (“Rank5”, “we”, “us”, or “our”) operates the daily ranking puzzle game at rank5.xyz (the “Service”). We are based in Vancouver, British Columbia, Canada. This policy explains what personal information we collect, why we collect it, how we use and share it, and the choices and rights you have. We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, for our email communications, Canada’s Anti-Spam Legislation (CASL).

By using the Service, you consent to the collection and use of your personal information as described in this policy.

We collect the following categories of personal information.

Information you provide directly:

• Account and sign-in. If you create an account, we collect your email address. You can sign in with a one-time email link (a magic link) or with Google. If you sign in with Google, Google shares your email address and basic profile information with us in accordance with your Google account settings.
• Contact form. If you contact us through the form on the Service, we collect your name, your email address, and the contents of your message.
• Communication preferences. If you opt in to daily reminder emails, we record your consent (including the date it was given and how), and your reminder settings.

Information collected automatically:

• Gameplay data. We record your puzzle submissions, scores, the dates you play, and your streak information, including your current streak, longest streak, and the date you last played.
• Device and session identifiers. For players who do not sign in, we store a randomly generated session identifier in your browser’s local storage so that your daily play and streak can be tracked on that device. This identifier is not connected to your name, email, or any other personal information unless you later sign in and we associate your play with your account.
• Technical and log data. As with most websites, our hosting provider automatically logs technical information such as your IP address, browser type, device information, and the pages you access, for the security and operation of the Service.

We use personal information to:

• operate the game, including tracking your daily play, scores, and streaks, and preventing you from replaying the same puzzle;
• create and manage your account and sign you in;
• send the daily reminder email if you have opted in, and process unsubscribe and resubscribe requests;
• respond to messages you send through the contact form;
• protect the Service against fraud, abuse, and security threats; and
• comply with our legal obligations.

We do not sell your personal information.

The Service uses the following:

• Essential cookies and storage. We use cookies and browser local storage that are necessary for the Service to function, including to keep you signed in and to record your daily play on your device. These cannot be turned off without breaking core functionality.
• Spam protection. Our contact form uses Cloudflare Turnstile to distinguish humans from automated abuse, which may set a cookie or a similar identifier.
• Advertising. When advertising is active on the Service, our advertising provider may use cookies and similar technologies to serve and measure ads. You can review and control ad personalization through Google’s ad settings at adssettings.google.com.

We only send daily reminder emails to people who have expressly opted in. Consistent with CASL:

• the reminder is off by default, and you turn it on yourself through an unchecked option at sign-up or in your account settings;
• we keep a record of your consent;
• every reminder email identifies us as the sender and includes a one-click unsubscribe link; and
• you can unsubscribe at any time, either from the link in any reminder email or from your account settings, and we will stop sending reminders promptly.

Service and account emails that are necessary to operate the Service, such as the sign-in link you request, are not marketing messages and are sent regardless of your reminder preference.

We share personal information only with service providers who process it on our behalf to run the Service, and who are bound by obligations to protect it. These include:

• Supabase, for our database and authentication;
• Vercel, for website hosting;
• Resend, for sending emails;
• Google, for Google sign-in and, when advertising is active, for serving ads; and
• Formspree, for processing contact form submissions, including its spam filtering.

We may also disclose personal information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users or the Service. We do not sell personal information, and we do not share it for third-party advertising beyond the ad serving described above.

Subject to applicable law, you may:

• access the personal information we hold about you;
• ask us to correct inaccurate information;
• withdraw your consent to reminder emails at any time, as described above; and
• ask us to delete your account and associated personal information.

To make a request, contact us using the details below. We may need to verify your identity before acting on a request.