Your data.
Your game.
01 Who We Are
Tier1 Options GL Inc develops and operates Orbaris under the Tier1 Interactive brand. Throughout this policy, "we," "us," and "our" refer to Tier1 Options GL Inc.
02 Information We Collect
2.1 Account Information
Collected at registration and used to create and manage your player profile:
| Field | Purpose | Visibility |
|---|---|---|
| Email address | Login, password recovery, service communications | Private |
| Password | Authentication — stored as bcrypt hash only, never plain text | Private |
| First & last name | Personalising your experience | Private |
| Username | Your unique public identifier on the leaderboard | Public |
| Display name | Shown to other players during live games | Public |
| Birth year | Age eligibility verification (must be born before ) | Private |
| Country | Profile flag; auto-detected from IP at registration, editable anytime | Public |
| Tag Team name | Persistent public identity for Tag Team game mode | Public |
2.2 Game Data
Collected and synchronised to your account to maintain competitive records across all devices:
- Game results, scores, rankings, and points across Classic, Elimination, and Tag Team modes
- Win / loss / draw records, elimination tallies, win streaks, and connect-four totals
- Full game history: mode, player count, opponent types, bot difficulty levels
- Quality Score — a calculated integrity metric displayed publicly on the leaderboard
- Bot Integrity Score — average bot difficulty faced in Tag Team, displayed on the Tag Team leaderboard
- Badges earned through gameplay and account completion
- Disc colour, emoji, and board theme preferences
2.3 Real-Time Multiplayer Data
The following is transmitted between players during live sessions via Supabase Realtime Broadcast. This data is transient — it is not stored in our database once the game session ends.
- Your move selections (column choices) during gameplay
- Full game state snapshots broadcast from the session host to all connected players
- Connection presence (join and leave events)
- Pre-written taunt messages you actively choose to send, including your display name and disc colour
- Tag Team partner move suggestions you choose to submit
2.4 Trusted Device Data
If you enable Remember this device at login (opt-in, off by default), we store a unique token in your browser's local storage and associate it with your account. The token contains a randomly generated identifier, your browser and OS type, and the registration date. A maximum of 10 trusted devices may be registered per account. You may view and remove any device from your Profile page at any time.
2.5 Technical Data
- IP address — used for country auto-detection at registration and security monitoring
- Browser type, version, and device type
- Pages visited and session duration
03 IP Geolocation
At registration, if you have not manually selected a country, we make a single request to ipapi.co to determine your country from your IP address. Only the country code is stored — no additional data from this service is retained. We do not use your IP address for advertising targeting and we do not share it with advertising partners.
You may update your country at any time from your Profile page. ipapi.co's privacy policy is at ipapi.co/privacy.
04 How We Use Your Data
We use the information we collect solely to operate and improve Orbaris. Specifically:
- Create and manage your player account and authenticate your identity
- Enable auto-login on trusted devices you have opted in to
- Display your profile, stats, and rankings on the global leaderboard
- Award points, badges, and track competitive records across all game modes
- Power real-time multiplayer sessions — broadcasting moves and game state between players
- Deliver in-game taunt messages between players during live sessions
- Synchronise your game history across devices when you sign in
- Auto-detect your country at registration to complete your profile
- Send service communications — account confirmation, password resets, game invitations, and security alerts
- Detect and prevent fraud, cheating, and abuse
- Analyse aggregate usage patterns to improve game balance and user experience
- Serve advertising to free-tier users via Google AdSense and AdMob
- Comply with applicable legal obligations
We do not use your data to build advertising profiles, make automated decisions that affect you outside of gameplay, or share your information with third parties for their own commercial purposes.
05 Public Leaderboard Data
The following fields are visible to all players on the public leaderboard. By registering and competing, you consent to this information being displayed publicly:
- Username and display name
- Country flag
- Game statistics — wins, losses, draws, points, eliminations, win streaks
- Quality Score and full game history breakdown (game types, opponent mix, bot difficulty)
- Badges earned
- Disc colour and emoji
- Tag Team name and team statistics including bot integrity score
Your email address, password, first name, last name, birth year, IP address, and device information are never made public under any circumstances.
06 Real-Time Multiplayer & In-Game Communications
Live multiplayer sessions use Supabase Realtime to transmit game state, moves, and connection presence between players. This data flows through Supabase's infrastructure and is not permanently stored once the game session ends.
In-game taunts are drawn from a curated set of pre-written messages — there is no free-text input. Messages are transmitted to other players in the same active session and displayed temporarily on their screens. They are not stored, not associated with your account history, and disappear when the game ends.
When you join a multiplayer session, other players in the same session can see your display name and disc colour. This is an inherent and expected part of real-time multiplayer functionality.
07 Trusted Devices & Session Management
The Remember this device feature stores a persistent session token so you can return to Orbaris without re-entering your credentials. This feature is opt-in and unchecked by default.
Do not enable this feature on shared or public devices. Anyone with access to that device may be able to access your account.
You can view and revoke any trusted device at any time from your Profile page. Removing a device immediately invalidates its session token. Trusted device tokens are stored only in that device's browser localStorage and are never transmitted to third parties.
08 Advertising
Orbaris is free to play and supported by advertising for non-premium users. We use Google AdSense (web) and Google AdMob (mobile apps) to display advertisements. These services may use cookies and device identifiers to serve interest-based ads. Google's practices are governed by the Google Privacy Policy. You may review your ad personalisation settings at Google Ad Settings.
- Rewarded ads — entirely opt-in, shown after a connect-four in Elimination games. Declining carries no penalty.
- Premium subscribers — no advertisements are shown at any time.
Orbaris products are ad-free for premium subscribers. Anthropic does not allow third parties to pay to have Claude promote their products in conversations — this policy applies to Orbaris' own platform independently: advertisers do not influence game content, rankings, or any competitive feature.
09 Data Storage & Security
Account and game data is stored using Supabase, with the following safeguards in place:
- Passwords hashed with bcrypt — never stored in plain text
- JWT session management with 7-day expiry
- HTTPS encryption for all data in transit
- Row-level security policies restricting data access at the database level
Game preferences and trusted device tokens are stored in your browser's localStorage on your own device.
While we implement industry-standard security practices, no online system can be guaranteed completely secure. If you suspect unauthorised access to your account, contact us immediately at [email protected] and use the password reset feature.
10 Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Retained until you request deletion |
| Game history & statistics | Retained for the lifetime of your account to maintain competitive records |
| Trusted device tokens | Until you remove them or your account is deleted |
| Real-time session data | Transient — not retained after session ends |
| In-game taunt messages | Transient — not retained; disappear when game ends |
| Technical logs | Up to 90 days |
11 Sharing Your Data
We do not sell your personal information. We share data only with the service providers needed to operate Orbaris, and only to the extent necessary:
We may also disclose data to legal authorities when required by law or to protect our rights, and to a business successor in connection with a merger or acquisition — with prior notice to users in either case.
12 Cookies & Local Storage
| Item | Purpose | Type |
|---|---|---|
| Authentication session | Keeps you signed in during your visit | Required |
| Trusted device token | Enables auto-login on remembered devices | Opt-in only |
| Game preferences | Stores disc colours, board themes, and settings locally | Functional |
| Advertising cookies | Set by Google for interest-based ads (free-tier users only) | Third-party |
13 Children's Privacy
Orbaris requires all users to have been born before January 1, — meaning players must be at least 13 years of age. This requirement exists to comply with the Children's Online Privacy Protection Act (COPPA) and equivalent regulations, which restrict the collection of personal data from children under 13 without verifiable parental consent.
Orbaris is rated E for Everyone with respect to game content — there is no violence, mature themes, or objectionable material in the gameplay itself. The 13+ account registration requirement is a data privacy compliance measure, not a content maturity restriction.
We do not knowingly collect personal information from anyone under 13. If you believe a child has registered without parental consent, please contact us at [email protected] and we will delete the account promptly.
14 Your Rights
You have the following rights with respect to your personal data. We will respond to all requests within 30 days.
Request a copy of the personal data we hold about you.
Update inaccurate data at any time via your Profile page.
Request full account and data deletion by emailing us.
Request your data in a machine-readable portable format.
Change your country flag at any time from your Profile page.
Revoke any or all trusted devices from your Profile page.
Reset your password at any time via the "Forgot password?" link.
Upgrade to premium to remove all advertising entirely.
To exercise any right, contact us at [email protected].
15 International Users
Orbaris is operated from Canada. If you access the service from outside Canada, your data may be transferred to and processed in jurisdictions with different data protection laws, including Canada and the United States (where Supabase infrastructure operates).
For users in the European Economic Area (EEA) and United Kingdom, we process personal data on the bases of: (a) performance of the contract between you and us, and (b) legitimate interests in operating and securing the service, provided those interests are not overridden by your rights. You may contact us to understand the specific legal basis applicable to any particular processing activity.
16 Policy Changes
We may update this policy as the service evolves. Material changes will be reflected in the "Last updated" date at the top of this page and, where appropriate, communicated directly to registered users by email. Continued use of Orbaris after a policy change is posted constitutes acceptance of the revised terms.
We encourage you to review this page periodically. The version history is reflected in the effective date above.
17 Contact Us
For privacy questions, data requests, or to report a concern, reach us at: