This Privacy Policy explains how Tier1 Options GL Inc, operating as Tier1 Interactive, collects, uses, and protects your information when you play Orbaris at orbaris.com or play.orbaris.com. By using Orbaris, you agree to the practices described here.
1. Who We Are
Tier1 Options GL Inc operates the Orbaris game under the Tier1 Interactive brand. References to “we,” “us,” or “our” mean Tier1 Options GL Inc.
2. Information We Collect
2.1 Account Information
When you register, we collect:
- Email address — your primary account identifier, used for login, password recovery, and service communications
- Password — stored as a secure hash via Supabase Auth; never stored in plain text
- First name and last name — used to personalise your experience
- Username — your unique public identifier on the leaderboard
- Display name — the name shown to other players during games
- Birth year — used to verify age eligibility (must be born before 2013)
- Country — self-selected or automatically detected from your IP address at the time of registration using a geolocation service (ipapi.co). You may update or change your country at any time from your Profile page.
- Tag Team name — a persistent public team identity used in Tag Team game modes, if set
2.2 Trusted Device Data
If you enable “Remember this device” at login, we store a unique device token in your browser’s local storage and associate it with your account. This token contains a randomly generated device identifier, your browser and operating system type, and the date the device was registered. Device tokens are stored locally on each device and in your account profile. You may view and remove trusted devices at any time from your Profile page. A maximum of 10 trusted devices may be registered per account.
2.3 Game Data
- Game results, rankings, scores, and points across all game modes (Classic, Elimination, Tag Team)
- Win/loss/draw records, eliminations, streaks, and connect-four totals
- Game history including mode, player count, opponent types, and bot difficulty levels — synchronised to Supabase so your records are available on any device you sign in to
- Quality Score — calculated from your game history and displayed publicly on the leaderboard
- Bot integrity score — the average difficulty level of bots you have faced in Tag Team games, displayed on the Tag Team leaderboard
- Badges earned through gameplay and account completion
- Disc colour, emoji, and board theme preferences
- Tag Team name and associated team statistics
2.4 Real-Time Multiplayer Data
When you play in a real-time multiplayer session, the following is transmitted between players via Supabase Realtime Broadcast channels:
- Your moves (column selections) during gameplay
- Full game state snapshots broadcast from the session host to all connected players
- Your connection status (join and leave events) via Supabase Presence
- In-game taunt messages you choose to send — including your display name and disc colour
- Tag Team partner move suggestions you choose to submit
Realtime channel data is transient — it is not stored in our database beyond the game session. Taunt messages are not retained after the game ends.
2.5 Technical Data
- IP address — used for country auto-detection at registration and security monitoring
- Browser type, version, and device type
- Pages visited and session duration
3. IP Geolocation
When you register, if you have not selected a country, we make a single request to ipapi.co to determine your country from your IP address. Only the country code is used — no additional data from this service is stored. We do not sell or share your IP address with any advertising partner. You may change your country at any time from your Profile page.
ipapi.co’s own privacy policy is available at ipapi.co/privacy.
4. How We Use Your Information
- Create and manage your player account
- Authenticate your identity, including auto-login on trusted devices
- Display your profile, stats, and rankings on the global leaderboard
- Award points, badges, and track competitive records across all game modes
- Enable real-time multiplayer game sessions, including broadcasting moves and game state between players
- Deliver in-game taunt messages between players during live sessions
- Synchronise your game history across devices when you sign in
- Auto-detect your country at registration to complete your profile
- Send service communications — account confirmation, password resets, game invitations, security alerts
- Detect and prevent fraud, cheating, and abuse
- Analyse usage patterns to improve game balance and user experience
- Serve advertising to free-tier users
- Comply with legal obligations
5. Public Information on the Leaderboard
The following information is publicly visible to all players on the leaderboard:
- Username and display name
- Country flag
- Game statistics — wins, losses, draws, points, eliminations, win streaks
- Quality Score and full game history breakdown (game types, opponent mix, bot difficulty)
- Badges earned
- Disc colour and emoji
- Tag Team name and team statistics including bot integrity score
Your email address, password, first name, last name, birth year, and device information are never made public.
6. Real-Time Multiplayer and In-Game Communications
Multiplayer sessions use Supabase Realtime to transmit game state, moves, and connection status between players in real time. This data flows through Supabase’s infrastructure and is not permanently stored beyond the session.
In-game taunt messages are pre-written messages you actively choose to send. They are transmitted to other players in the same session and displayed temporarily on their screens. Messages are not stored, are not associated with your account history, and disappear when the game ends.
When you join a multiplayer session, other players in the same session can see that you are connected (your display name and disc colour). This is inherent to real-time multiplayer functionality.
7. Trusted Devices and Session Management
The “Remember this device” feature stores a persistent session token so you can return to Orbaris without re-entering your credentials. This is an opt-in feature.
We strongly recommend not enabling this feature on shared or public devices.
You can manage trusted devices from your Profile page at any time. Removing a device immediately revokes its session. Trusted device tokens are stored in your browser’s localStorage and are not transmitted to third parties.
8. Advertising
Orbaris is free to play and supported by advertising for non-premium users. We use Google AdSense (web) and Google AdMob (mobile apps) to display advertisements. These services may use cookies and device identifiers to serve personalised ads. Google’s practices are governed by the Google Privacy Policy. You may opt out at Google Ad Settings.
Rewarded ads are entirely opt-in. Premium subscribers are not shown advertisements.
9. Data Storage and Security
Account and game data is stored securely using Supabase, providing bcrypt password hashing, JWT session management with 7-day expiry, HTTPS encryption for all data in transit, and row-level security policies restricting data access. Game preferences and trusted device tokens are stored in your browser’s localStorage.
10. Data Retention
- Account data — retained until you request deletion
- Game history — retained for the lifetime of your account to maintain competitive records
- Trusted device tokens — retained until you remove them or delete your account
- Real-time session data — not retained after the game session ends
- In-game taunt messages — not retained; transient only
- Technical logs — up to 90 days
11. Sharing Your Information
We do not sell your personal information. We may share data with:
- Supabase — database, authentication, and real-time hosting
- ipapi.co — country detection at registration (IP address only, one-time)
- Google — advertising (AdSense/AdMob) and analytics
- Netlify — website hosting
- Legal authorities — when required by law or to protect our rights
- Business transfers — in connection with a merger or acquisition, with notice to users
12. Cookies and Local Storage
- Authentication session — keeps you signed in
- Trusted device token — enables auto-login on remembered devices (opt-in only)
- Game preferences — disc colours, themes, and settings stored locally
- Advertising cookies — set by Google for free-tier users
13. Children’s Privacy
Orbaris requires users to be born before 2013 (age 13 or older). We do not knowingly collect personal information from children under 13. If you believe a child has registered without parental consent, contact us at info@orbaris.com and we will delete the account promptly.
14. Your Rights
- Access — request a copy of your personal data
- Correction — update inaccurate data via your Profile page at any time
- Deletion — request account and data deletion by contacting us
- Country update — change your country flag at any time from your Profile page
- Trusted device removal — remove any or all trusted devices from your Profile page
- Password reset — reset your password at any time via the “Forgot password?” link
- Portability — request your data in a portable format
We will respond to requests within 30 days. To exercise any right, contact us at info@orbaris.com.
15. International Users
Orbaris is operated from Canada. If you access the service from outside Canada, your data may be transferred to and processed in countries with different data protection laws. For EEA and UK users, we process data on the basis of contract performance and legitimate interests.
16. Changes to This Policy
We may update this policy as the service evolves. Material changes will be reflected in the “Last updated” date and communicated to registered users where appropriate. Continued use of Orbaris after changes constitutes acceptance.