Your data.
Your game.

01 Who We Are

Tier1 Options GL Inc develops and operates Orbaris under the Tier1 Interactive brand. Throughout this policy, "we," "us," and "our" refer to Tier1 Options GL Inc.

02 Information We Collect

2.1 Account Information

Collected at registration and used to create and manage your player profile:

2.2 Game Data

Collected and synchronised to your account to maintain competitive records across all devices:

• Game results, scores, rankings, and points across Classic, Elimination, and Tag Team modes
• Win / loss / draw records, elimination tallies, win streaks, and connect-four totals
• Full game history: mode, player count, opponent types, bot difficulty levels
• Quality Score, a calculated integrity metric displayed publicly on the leaderboard
• Bot Integrity Score, average bot difficulty faced in Tag Team, displayed on the Tag Team leaderboard
• Badges earned through gameplay and account completion
• Disc colour, emoji, and board theme preferences

2.3 Real-Time Multiplayer Data

The following is transmitted between players during live sessions via Supabase Realtime Broadcast. This data is transient, it is not stored in our database once the game session ends.

• Your move selections (column choices) during gameplay
• Full game state snapshots broadcast from the session host to all connected players
• Connection presence (join and leave events)
• Pre-written taunt messages you actively choose to send, including your display name and disc colour
• Tag Team partner move suggestions you choose to submit

2.4 Trusted Device Data

If you enable Remember this device at login (opt-in, off by default), we store a unique token in your browser's local storage and associate it with your account. The token contains a randomly generated identifier, your browser and OS type, and the registration date. A maximum of 10 trusted devices may be registered per account. You may view and remove any device from your Profile page at any time.

2.5 Technical Data

• IP address, used for country auto-detection at registration and security monitoring
• Browser type, version, and device type
• Pages visited and session duration

2.6 Gameplay Recordings & Replays

For each game you play, we record a move-by-move log, the columns played, the resulting board states, timing, and the outcome. We use these recordings to:

• Show you replays and highlight moments of your own games
• Verify scores and rankings on our servers, which keeps competitive results fair and tamper-resistant
• Calculate your statistics and game history

Your recordings are associated with your account and visible to you in the app. Our administrators may access recordings where needed for moderation, support, and investigating cheating or abuse. Recordings are retained as described in Section 10.

2.7 Guest Play

You may play Orbaris without registering. When you play as a guest we create a temporary guest identity tied to your device, so that a game can be played and its result recorded. We do not collect your email address, name, or birth year as a guest.

Guest play generates the same gameplay recordings described in Section 2.6. Because we hold no birth year for a guest, we cannot establish a guest's age, and games including a guest player are never used in promotional material (see Section 4.1).

If you later register and sign in on the same device, your guest play history may be linked to your new account. Guest identities that are inactive and have no game history are deleted automatically.

2.8 Email Addresses You Provide for Invitations

When you invite someone to a private game, you supply their email address so we can deliver that invitation. Please only invite people you know personally and who would welcome the invitation.

• What we do with it. We store the address, who invited them, the game or lobby it relates to, and whether the invitation was accepted, so the invitation can be delivered and the recipient can join.
• We deliver invitations on a player's behalf. Each invitation relates to a specific game and is sent only when a player chooses to send it, so you may receive an invitation for each game you are invited to. Orbaris does not send its own email to an invited address: we do not add invited addresses to any marketing or product mailing list, and we send no follow-up, reminder, or promotional email to an address obtained this way.
• Opting out. Every invitation identifies who invited you and why, and offers a way to decline further invitations. If a recipient asks not to be contacted, we add their address to a permanent suppression list and no further Orbaris invitation will be delivered to it, from any player.
• Retention. Invitation records for addresses that never join are deleted or anonymised after a limited period. Suppression list entries are retained for as long as necessary to honour the request not to be contacted, which is the purpose they serve.

If you receive an invitation and have no Orbaris account, you may ask us to delete your address entirely by contacting us at the address in Section 17. We will remove it, and if you also ask never to be contacted again we will retain only the minimum needed to enforce that.

03 IP Geolocation

At registration, if you have not manually selected a country, we make a single request to ipapi.co to determine your country from your IP address. Only the country code is stored, no additional data from this service is retained. We do not use your IP address for advertising targeting and we do not share it with advertising partners.

You may update your country at any time from your Profile page. ipapi.co's privacy policy is at ipapi.co/privacy.

04 How We Use Your Data

We use the information we collect solely to operate and improve Orbaris. Specifically:

• Create and manage your player account and authenticate your identity
• Enable auto-login on trusted devices you have opted in to
• Display your profile, stats, and rankings on the global leaderboard
• Award points, badges, and track competitive records across all game modes
• Generate written moment stories about notable gameplay using artificial intelligence, from the recorded facts of the game
• Power real-time multiplayer sessions, broadcasting moves and game state between players
• Deliver in-game taunt messages between players during live sessions
• Synchronise your game history across devices when you sign in
• Auto-detect your country at registration to complete your profile
• Send service communications, account confirmation, password resets, game invitations, and security alerts
• Detect and prevent fraud, cheating, and abuse
• Analyse aggregate usage patterns to improve game balance and user experience
• In future, serve advertising to free-tier users via Google AdSense and AdMob (not currently active)
• Comply with applicable legal obligations

4.1 Highlight Clips, Moment Stories & Promotional Use

Orbaris creates highlights from gameplay. These take two forms:

• Clips. Short replays of notable gameplay, for example a deep cascade or a game-winning move.
• Moment stories. Short written narratives describing what happened in a notable moment, including which players took which actions. These narratives are generated automatically using artificial intelligence from the recorded facts of the game, such as the sequence of eliminations, the depth of a cascade, and the outcome. They are not written by a person, and they describe gameplay only.

Whether your public display name appears in a clip or story that is shared publicly or used to promote Orbaris is governed by a single setting you control:

• Off by default. Your name is never shown in a shared or promotional clip or story unless you turn on Highlight Clips in Settings.
• Inside the app, your name always appears. Replays, moment stories, and leaderboards shown to you and to other Orbaris players always include your display name, in the same way it already appears during live games and on the public leaderboard. The Highlight Clips setting governs only clips and stories shared outside the product or used for marketing.
• Withdrawal. You may withdraw this consent at any time in Settings. From that point on, your name is removed or replaced with a neutral label such as "Player 3" in any clip or story we render going forward. Clips or stories already shared or published outside the product cannot be recalled or altered.
• Players who may be under 18 are excluded from promotional use. Orbaris collects birth year, not full date of birth. Where your birth year does not establish that you are at least 18 for the whole of the current year, your games are not used in promotional material at all, and your name will not appear in any externally shared clip or story, regardless of whether the Highlight Clips setting is enabled. This exclusion is not a judgement about you or your play. It exists because a person under 18 cannot meaningfully consent to commercial use of their name, and we choose to exclude rather than ask. Where a player's age cannot be determined from the information we hold, we treat that player as excluded.
• Games including guest players are excluded from promotional use. Guests do not provide a birth year, so their age cannot be established.
• AI opponents are not people. Bot names may appear in any clip or story.
• First-party only. This is promotion of Orbaris by Tier1 Options GL Inc. We do not provide your name, clips, or stories to third parties for their own marketing.

We record the date and time you grant or change this consent.

4.2 Communications & Email Preferences

We use the email address you provide to send:

• Service messages, such as account confirmation, password resets, and security alerts. These are essential to your account and cannot be opted out of while your account is active.
• Game-event notifications, including invitations or "calls to join" sent when another player invites you to a private game or event (see Section 4 of our Terms of Service).
• Informational and product emails, occasional news about Orbaris and new products. These are optional: every such email includes an unsubscribe link, and you may opt out at any time without affecting your ability to play.

On mobile, game-event notifications are delivered as push notifications governed by your device's notification permission, which you grant when you install the app and can change at any time in your device settings.

05 Public Leaderboard Data

The following fields are visible to all players on the public leaderboard. By registering and competing, you consent to this information being displayed publicly:

• Username and display name
• Country flag
• Game statistics, wins, losses, draws, points, eliminations, win streaks
• Quality Score and full game history breakdown (game types, opponent mix, bot difficulty)
• Badges earned
• Disc colour and emoji
• Tag Team name and team statistics including bot integrity score

06 Real-Time Multiplayer & In-Game Communications

Live multiplayer sessions use Supabase Realtime to transmit game state, moves, and connection presence between players. This data flows through Supabase's infrastructure and is not permanently stored once the game session ends.

In-game taunts are drawn from a curated set of pre-written messages, there is no free-text input. Messages are transmitted to other players in the same active session and displayed temporarily on their screens. They are not stored, not associated with your account history, and disappear when the game ends.

When you join a multiplayer session, other players in the same session can see your display name and disc colour. This is an inherent and expected part of real-time multiplayer functionality.

07 Trusted Devices & Session Management

The Remember this device feature stores a persistent session token so you can return to Orbaris without re-entering your credentials. This feature is opt-in and unchecked by default.

You can view and revoke any trusted device at any time from your Profile page. Removing a device immediately invalidates its session token. Trusted device tokens are stored only in that device's browser localStorage and are never transmitted to third parties.

08 Advertising

Orbaris is currently free to play and does not display advertising. We plan to introduce advertising for non-premium users in future, using Google AdSense (web) and Google AdMob (mobile apps). When introduced, these services may use cookies and device identifiers to serve interest-based ads. Google's practices are governed by the Google Privacy Policy, and you will be able to review your ad personalisation settings at Google Ad Settings. This policy will be updated to reflect any change before advertising goes live.

• Rewarded ads: if introduced, these will be entirely opt-in, shown after a connect-four in web and app play. Declining will carry no penalty.
• Premium subscribers: should a premium tier launch, no advertisements would be shown to those subscribers at any time.

09 Data Storage & Security

Account and game data is stored using Supabase, with the following safeguards in place:

• Passwords hashed with bcrypt, never stored in plain text
• JWT session management with 7-day expiry
• HTTPS encryption for all data in transit
• Row-level security policies restricting data access at the database level

Game preferences and trusted device tokens are stored in your browser's localStorage on your own device.

While we implement industry-standard security practices, no online system can be guaranteed completely secure. If you suspect unauthorised access to your account, contact us immediately at [email protected] and use the password reset feature.

10 Data Retention

11 Sharing Your Data

We do not sell your personal information. We share data only with the service providers needed to operate Orbaris, and only to the extent necessary:

We may also disclose data to legal authorities when required by law or to protect our rights, and to a business successor in connection with a merger or acquisition, with prior notice to users in either case.

12 Cookies & Local Storage

13 Children's Privacy

Orbaris requires all users to have been born before January 1, , meaning players must be at least 13 years of age. This requirement exists to comply with the Children's Online Privacy Protection Act (COPPA) and equivalent regulations, which restrict the collection of personal data from children under 13 without verifiable parental consent.

Orbaris is rated E for Everyone with respect to game content, there is no violence, mature themes, or objectionable material in the gameplay itself. The 13+ account registration requirement is a data privacy compliance measure, not a content maturity restriction.

We do not knowingly collect personal information from anyone under 13. If you believe a child has registered without parental consent, please contact us at [email protected] and we will delete the account promptly.

In addition to the registration age floor described above, players whose birth year does not establish that they are at least 18 for the whole of the current year are excluded from all promotional use of gameplay, including externally shared clips and moment stories, regardless of any setting they enable. See Section 4.1.

14 Your Rights

You have the following rights with respect to your personal data. We will respond to all requests within 30 days.

To exercise any right, contact us at [email protected].

15 International Users

Orbaris is operated from Canada. If you access the service from outside Canada, your data may be transferred to and processed in jurisdictions with different data protection laws, including Canada and the United States (where Supabase infrastructure operates).

For users in the European Economic Area (EEA) and United Kingdom, we process personal data on the bases of: (a) performance of the contract between you and us, and (b) legitimate interests in operating and securing the service, provided those interests are not overridden by your rights. You may contact us to understand the specific legal basis applicable to any particular processing activity.

16 Policy Changes

We may update this policy as the service evolves. Material changes will be reflected in the "Last updated" date at the top of this page and, where appropriate, communicated directly to registered users by email. Continued use of Orbaris after a policy change is posted constitutes acceptance of the revised terms.

We encourage you to review this page periodically. The version history is reflected in the effective date above.

17 Contact Us

For privacy questions, data requests, or to report a concern, reach us at: