Your data.
Your game.
01 Who We Are
Tier1 Options GL Inc develops and operates Orbaris under the Tier1 Interactive brand. Throughout this policy, "we," "us," and "our" refer to Tier1 Options GL Inc.
02 Information We Collect
2.1 Account Information
Collected at registration and used to create and manage your player profile:
| Field | Purpose | Visibility |
|---|---|---|
| Email address | Login, password recovery, service communications | Private |
| Password | Authentication - stored as bcrypt hash only, never plain text | Private |
| First & last name | Personalising your experience | Private |
| Username | Used to sign in. Not shown to other players | Private |
| Display name | The only name other players see: in games, on leaderboards, and in highlight reels | Public |
| Birth year | Age eligibility (must be born before ) and to place you on an age group leaderboard. The group is public; the birth year is not | Private |
| Country | Profile flag; auto-detected from IP at registration, editable anytime | Public |
| Tag Team name | Persistent public identity for Tag Team game mode | Public |
2.2 Game Data
Collected and synchronised to your account to maintain competitive records across all devices:
- Game results, scores, rankings, and points across Classic, Elimination, and Tag Team modes
- Win / loss / draw records, elimination tallies, win streaks, and four in a row totals
- Full game history: mode, player count, opponent types, bot difficulty levels
- Quality Score - a calculated integrity metric displayed publicly on the leaderboard
- Badges earned through gameplay and account completion
- Disc colour, emoji, and board theme preferences
2.3 Real-Time Multiplayer Data
The following is transmitted between players during live sessions via Supabase Realtime Broadcast. The live transmission itself is transient and is not retained. Your moves and their outcomes are separately written to a permanent game recording, described in 2.7 below.
- Your move selections (column choices) during gameplay
- Game state broadcast from our servers to all players in the session
- Connection presence (join and leave events)
- Pre-written messages you choose to send, which are shown to every player in the session alongside your display name and disc colour. These are recorded, see 2.9
- Tag Team partner move suggestions you choose to submit
2.4 Trusted Device Data
If you enable Remember this device at login (opt-in, off by default), we store a unique token in your browser's local storage and associate it with your account. The token contains a randomly generated identifier, your browser and OS type, and the registration date. A maximum of 10 trusted devices may be registered per account. You may view and remove any device from your Profile page at any time.
2.5 Technical Data
- IP address - used for country auto-detection at registration and security monitoring
- Browser type, version, and device type
- Pages visited and session duration
- On mobile, the app checks for updates when it starts. That check tells our update provider which app version and device platform you are running, so it can send the right update. It carries no account details and nothing about your gameplay
2.6 Guest and Anonymous Play
You can play Orbaris without creating an account. When you do, we issue a guest identity so the game can tell your seat apart from everyone else's:
- A randomly generated player identifier, held in a signed token stored on your own device and valid for up to 30 days
- A device identifier, so returning on the same device brings back the same guest
- A display name you choose for the session, shown to the other players in that game
We hold no email address, no real name, and no password for a guest. Games you play as a guest are recorded the same way as any other game (see 2.7), and count toward the same results, badges, and standings.
Guest identities that have never taken part in a recorded game are deleted automatically after 30 days of inactivity. Guest identities that do have game history are retained so those games remain attributable and verifiable. If you played as a guest and want that history removed, contact us at info@orbaris.com.
If you later create an account on the same device, your guest identity is linked to that account and your guest games carry across.
2.7 Game Recordings
Orbaris keeps a move-by-move recording of every recorded game: each disc placed, each four in a row formed, each elimination, and the seat and player each belongs to.
This exists for a specific reason. The result of a game is not taken on trust from the device that played it. It is calculated on our servers by replaying the recording. That is what makes points, placements, badges, and leaderboard standing verifiable and resistant to tampering, for every player.
Because the recording is the evidence behind every number on the leaderboard, it is kept indefinitely and is not edited after the fact. Corrections are made by re-running the calculation, never by rewriting the record of what happened.
What is not kept: the live realtime transmission between devices during play, and in-game taunt messages, both of which disappear when the session ends.
Friendly games played by two people on one device are not recorded at all. Nothing about them is written to our systems.
Deleting your account does not erase these recordings. Your identity is removed from them instead. See 14.1.
2.8 Invitations You Send and Receive
A registered player hosting a private game can invite people by email. This is the one place where Orbaris handles the personal data of someone who may not be a user at all, so it is set out in full.
If you send an invitation, we store the address you entered, the fact that you sent it, the game it relates to, the time it was sent, and whether it was accepted. Sending is rate limited.
Your first name appears in the invitation. It is sent from our own address with the sender name "{your first name} via Orbaris", so the person you invited recognises who it is from. Most people invite friends who know them by name rather than by their Orbaris display name, which is why we use it. Your first name is not shown anywhere else to anyone, and your surname and email address are never included.
If you tick the option to let replies reach you, your own email address is used as the Reply-To on that message, which discloses it to the person you invited. That option is off unless you choose it, and it is your choice to make about your own address.
If you receive an invitation, your address was given to us by the person who invited you. Specifically:
- We store it in order to deliver the invitation, avoid sending you the same invitation twice, and record whether you joined
- We do not add it to any mailing list, we do not use it for marketing, and we do not sell or share it
- It is not shown to other players and it is not visible on any leaderboard or profile
- The message is sent from our own verified sending address, never from the inviter's mailbox
- Each recipient is mailed individually, so no invitee can see any other invitee
How long we keep it. We delete the invitation record from our own systems within 24 hours of sending, whether or not you joined the game. Separately, the provider that delivers our email retains delivery records, including the recipient address, for up to 30 days under its own retention policy, after which they are removed. The do-not-contact list described below is the single deliberate exception to this.
Stopping invitations. Every invitation contains a link to stop Orbaris delivering invitations to that address. It takes effect immediately, it is permanent, and it applies to invitations from every Orbaris player, not just the one who invited you.
Honouring that request means keeping your address. To know never to contact an address again, we have to remember it. When you opt out we keep the address on a do-not-contact list indefinitely, together with the date and the reason. That list holds nothing else, is never used to send anything, and exists solely to stop mail reaching you.
If you were invited, never joined, and want the invitation record itself removed as well, email info@orbaris.com from that address and we will delete it.
2.9 In-Game Messages
During a game you can send short messages from a curated set we write. There is no free-text input, so we never collect written content from you. What is recorded is which pre-written message was sent, by whom, in which game, and at which moment in that game. The message text itself is not stored against you; only its identifier is.
Sending requires an account. Guests can see messages and hide them, but cannot send. This exists so that every message in the system belongs to an identity that can be held to the fair play rules.
Recording messages is what makes a harassment report possible to act on. If nothing were kept, a report would be one person's word with nothing to check it against, and the protections in our Terms of Service would be unenforceable.
Three different windows apply to the same record, and they are deliberately different:
- In your replays: 30 days. Messages appear on a game's replay for 30 days, then the overlay drops off. The replay and the moment itself are unaffected; only the messages age out.
- In our records: up to 1 year. Retained so a report made months later can still be investigated, then deleted automatically.
- Under legal hold: retained until released. If a message is connected to an active legal matter it is preserved beyond the year. Holds are applied to specific games or players with a recorded reason, never as a blanket switch.
A message pinned to a report that is still open is never deleted while that report remains open, whatever its age.
Messages never appear in public highlight reels. Reels and replays are published without them.
Your controls, all of which affect only what you see and never notify anyone:
- Hide all messages - available to everyone, including guests
- Mute a specific player - available to registered players; applies live and when re-watching a replay
- Dismiss a message from your own saved moments
Sending is rate limited. Muting or dismissing changes your view only; it does not delete the record, which would otherwise let someone erase the evidence of their own behaviour.
2.10 Harassment Reports
If you report another player for harassment, we record who you reported, the game, the specific messages your report concerns, and anything you tell us. That is used to investigate and to decide what action to take.
If you are not registered and report someone, we ask for an email address so we can tell you what came of it. A name is optional. We ask for this because a report leads to action against another player's account, and because there is otherwise no way to reach you with the outcome. That address is used for the investigation only: not for marketing, not for invitations, and it is not added to any list.
Reports are kept while open and for a period after they are resolved, so a pattern of behaviour across separate reports can be recognised. Messages attached to an open report are preserved regardless of the normal message retention window.
03 Country and Region
Your profile carries a country flag, shown next to your name on leaderboards. If you do not choose one at registration, we suggest one so the field is not left empty.
On both the website and in the mobile app, your device asks our own server which country your connection appears to come from. Your IP address is used to work that out and is not kept for this purpose. No separate geolocation company is involved.
Only the resulting country code is stored, never a precise location, and you can change it at any time from your Profile page. It is a display preference, so you are free to set it to whatever you like.
Your profile flag is not what determines your advertising. Because you can change it freely, it is not used to decide which advertising rules apply to you. Where advertising law depends on region, that is worked out separately on our servers from the connection itself, and it is not something you or we set by hand. Your IP address is not shared with advertising partners for this.
04 How We Use Your Data
We use the information we collect solely to operate and improve Orbaris. Specifically:
- Create and manage your player account and authenticate your identity
- Enable auto-login on trusted devices you have opted in to
- Display your profile, stats, and rankings on the global leaderboard
- Award points, badges, and track competitive records across all game modes
- Power real-time multiplayer sessions - broadcasting moves and game state between players
- Deliver in-game taunt messages between players during live sessions
- Synchronise your game history across devices when you sign in
- Auto-detect your country at registration to complete your profile
- Send service communications - account confirmation, password resets, game invitations, and security alerts
- Detect and prevent fraud, cheating, and abuse
- Analyse aggregate usage patterns to improve game balance and user experience
- Serve advertising to free-tier users via Google AdSense and AdMob
- Comply with applicable legal obligations
We do not use your data to build advertising profiles, make automated decisions that affect you outside of gameplay, or share your information with third parties for their own commercial purposes.
05 Public Leaderboard Data
The following fields are visible to all players on the public leaderboard. By registering and competing, you consent to this information being displayed publicly:
- Display name (your username is not shown to other players)
- Which age group leaderboard you appear on. The group is visible; your birth year and your exact age are not
- Country flag
- Game statistics - wins, losses, draws, points, eliminations, win streaks
- Quality Score and full game history breakdown (game types, opponent mix, bot difficulty)
- Badges earned
- Disc colour and emoji
- Tag Team name and team statistics
Your email address, password, first name, last name, birth year, IP address, and device information are never made public under any circumstances.
How these standings are calculated, and the different leaderboards we run, are described in section 10.1 of our Terms of Service.
06 Real-Time Multiplayer & In-Game Communications
Live multiplayer sessions use Supabase Realtime to carry game state, moves, and connection presence between our servers and the players in a session. Games are run on our servers rather than on any player's device, so what travels to your device is the resolved state of the board. The realtime transmission itself is not permanently stored once the session ends. The moves it carries are separately written to the permanent game recording described in section 2.7.
In-game messages are drawn from a curated set we write. There is no free-text input, so you cannot enter anything of your own and we never collect written content from you. A message you send is broadcast to every player in the session; there is no private or one-to-one messaging in Orbaris, and sending requires an account.
A record of which message was sent, by whom and when, is retained. Section 2.9 sets out why, for how long, and what controls you have.
You can turn in-game messages off for yourself at any time, which hides them from your screen without affecting your game. Registered players can also mute an individual player, live and in replays.
When you join a multiplayer session, other players in the same session can see your display name and disc colour. This is an inherent and expected part of real-time multiplayer functionality.
07 Trusted Devices & Session Management
The Remember this device feature stores a persistent session token so you can return to Orbaris without re-entering your credentials. This feature is opt-in and unchecked by default.
Do not enable this feature on shared or public devices. Anyone with access to that device may be able to access your account.
You can view and revoke any trusted device at any time from your Profile page. Removing a device immediately invalidates its session token. Trusted device tokens are stored only in that device's browser localStorage and are never transmitted to third parties.
08 Advertising
Orbaris is free to play and supported by advertising for non-premium users. We use Google AdSense (web) and Google AdMob (mobile apps). These services may use cookies and device identifiers, including an advertising identifier on mobile, to serve and measure ads. Google's practices are governed by the Google Privacy Policy, and you can review your ad personalisation settings at Google Ad Settings. On mobile you can also reset or limit your advertising identifier in your device settings.
Advertising is not switched on in every region or at every moment. Whether ads appear depends on our own settings and on what our advertising providers have available where you are, so you may see none at all.
If you are in the EEA, the UK or Switzerland, we ask for your consent before showing you personalised advertising, using a consent management platform certified by Google. You can change or withdraw that choice at any time from the privacy settings in the game. If you decline, you will still see advertising, but it will be non-personalised: chosen from the game's context rather than from anything about you. That request only ever applies to adults: nobody under 18 is asked for advertising consent anywhere, and nobody under 18 receives personalised advertising (see section 13).
- Interstitial ads - shown at breaks between games to free accounts. These are part of how the free tier is funded and are not optional.
- Rewarded ads - entirely opt-in. You may choose to watch one to double the points you earned in a game, and only when you actually earned points. Declining carries no penalty.
- Premium subscribers - no advertisements of any kind.
Orbaris products are ad-free for premium subscribers. Advertisers do not influence game content, rankings, or any competitive feature.
09 Data Storage & Security
Account and game data is stored using Supabase, with the following safeguards in place:
- Passwords hashed with bcrypt - never stored in plain text
- JWT session management with 7-day expiry
- HTTPS encryption for all data in transit
- Row-level security policies restricting data access at the database level
Game preferences and trusted device tokens are stored in your browser's localStorage on your own device.
While we implement industry-standard security practices, no online system can be guaranteed completely secure. If you suspect unauthorised access to your account, contact us immediately at info@orbaris.com and use the password reset feature.
10 Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Retained until you request deletion |
| Game history & statistics | Retained for the lifetime of your account to maintain competitive records |
| Game recordings | Retained indefinitely as the verifiable record behind every result. Your identity is removed from them if you delete your account (see 14.1) |
| Trusted device tokens | Until you remove them or your account is deleted |
| Guest identities | Deleted automatically after 30 days of inactivity if no games were played; retained if game history exists |
| Invitation records | Deleted within 24 hours of sending. Delivery records held by our email provider for up to 30 days under its own policy |
| Do-not-contact list | Retained indefinitely, by necessity - it is what stops us contacting an address again |
| Account deletion record | Retained indefinitely; holds no name, address, or contact details (see 14.1) |
| Real-time transmission | Transient - not retained after session ends |
| In-game messages | Shown in replays for 30 days. Retained in our records for up to 1 year, then deleted. Preserved beyond that only under a legal hold or while attached to an open report (see 2.9) |
| Harassment reports | Kept while open and for a period after resolution, so patterns across reports can be recognised |
| Reporter contact details (unregistered reporters) | Kept with the report. Used only to tell you the outcome of your report |
| Mute lists and message preferences | Until you change them or your account is deleted |
| Result notifications | Deleted 30 days after you read them. You can delete any notification yourself at any time. Unread notifications are kept until read, or until your account is deleted |
| Friendly (same-device) games | Not collected - never written to our systems |
| Technical logs | Up to 90 days |
11 Sharing Your Data
We do not sell your personal information. We share data only with the service providers needed to operate Orbaris, and only to the extent necessary:
We may also disclose data to legal authorities when required by law or to protect our rights, and to a business successor in connection with a merger or acquisition - with prior notice to users in either case.
12 Cookies & Local Storage
| Item | Purpose | Type |
|---|---|---|
| Authentication session | Keeps you signed in during your visit | Required |
| Trusted device token | Enables auto-login on remembered devices | Opt-in only |
| Game preferences | Stores disc colours, board themes, and settings locally | Functional |
| Advertising cookies | Set by Google for interest-based ads (free-tier users only) | Third-party |
13 Children's Privacy
Orbaris requires all users to have been born before January 1, - meaning players must be at least 13 years of age. This requirement exists to comply with the Children's Online Privacy Protection Act (COPPA) and equivalent regulations, which restrict the collection of personal data from children under 13 without verifiable parental consent.
Orbaris is rated E for Everyone with respect to game content - there is no violence, mature themes, or objectionable material in the gameplay itself. The 13+ account registration requirement is a data privacy compliance measure, not a content maturity restriction.
We do not knowingly collect personal information from anyone under 13. If you believe a child has registered without parental consent, please contact us at info@orbaris.com and we will delete the account promptly.
We never show personalised advertising to anyone under 18, anywhere in the world. This is one rule applied everywhere rather than a different age in each country, and it is deliberately stricter than any law that applies to us. Players under 18 see advertising chosen from the game itself, never from anything about them, and their advertising identifier is not shared with advertising partners.
The same applies to anyone whose age we do not know, including everyone playing as a guest and any account without a birth year. If we cannot tell, we treat you as under 18.
Nobody under 18 is asked for advertising consent, and nobody under 18 is included in consent-based processing. None of this limits play: the game itself works the same for everyone.
14 Your Rights
You have the following rights with respect to your personal data. We will respond to all requests within 30 days.
Request a copy of the personal data we hold about you.
Update inaccurate data at any time via your Profile page.
Delete your account yourself from your Profile page at any time. See 14.1.
Request your data in a machine-readable portable format.
Change your country flag at any time from your Profile page.
Revoke any or all trusted devices from your Profile page.
Reset your password at any time via the "Forgot password?" link.
Change or withdraw your advertising consent at any time, or upgrade to premium to remove advertising entirely.
Where we rely on your consent, withdraw it at any time. This does not affect anything done before you withdrew it.
Object to processing based on our legitimate interests, or ask us to restrict processing while a concern is resolved.
Complain to your data protection authority. You do not have to contact us first, though we would like the chance to help.
To exercise any right, contact us at info@orbaris.com. We do not charge for this and we will respond within 30 days.
If you are in the EEA or the UK you may also complain to your national supervisory authority. In the EEA, the list is published by the European Data Protection Board. In the UK it is the Information Commissioner's Office. In Canada it is the Office of the Privacy Commissioner of Canada.
If there is a data breach affecting your personal data and it is likely to result in a risk to your rights, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, and we will tell you directly where the risk to you is high.
14.1 Deleting Your Account
You can delete your account yourself, from your Profile page, without contacting us and without waiting for approval. Deletion happens immediately and cannot be undone.
What is removed:
- Your sign-in credentials and the ability to access the account
- Your profile and the personal details attached to it, including your email address, name, birth year, and country
- Your trusted devices
- Your entry from every leaderboard
- Your name from past games, which from that point show you only as "Deleted player"
What is kept, and why:
- The recordings of games you played, with your identity removed. Those games involved other players whose results, badges, and standings were calculated from the same recordings. Erasing them would corrupt other people's verified records, so they are de-identified rather than deleted (see 2.7)
- A deletion record containing the internal identifier of the closed account, the username it used, the date, and a one-way keyed fingerprint of the email address. This holds no readable address, no name, and no contact details. It exists so a closed account cannot be silently recreated to reclaim one-time bonuses or evade a restriction, and so we can confirm a deletion took place if you later ask
Deletion is permanent. Points, badges, streaks, rankings, and any premium entitlement are lost and cannot be restored, including by creating a new account with the same email address.
You can also start here: orbaris.com/delete-account. That page explains what is removed and what is kept, and takes you to the deletion control. If you have forgotten your password, reset it first and then return. If you can no longer sign in and no longer have access to the email address on the account, contact us at info@orbaris.com and we will confirm the account is yours before deleting it.
Played as a guest rather than with an account? Guest deletion works differently - see section 2.6.
15 International Users
Orbaris is operated from Canada by Tier1 Options GL Inc. If you access the service from outside Canada, your data is transferred to and processed in Canada, and by our service providers in the United States and elsewhere.
15.1 Legal Bases (EEA and UK)
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases:
| What we do | Legal basis |
|---|---|
| Run your account, match you into games, record results, and maintain leaderboards | Performance of our contract with you |
| Keep game recordings as the verifiable basis for every result | Legitimate interests: competitive integrity, resolving disputes, preventing cheating |
| Keep records of in-game messages and investigate reports | Legitimate interests: player safety and enforcing our Terms |
| Security monitoring, fraud and abuse prevention | Legitimate interests: protecting the service and its players |
| Personalised advertising | Your consent |
| Non-personalised advertising | Legitimate interests: funding a free service |
| Optional marketing email, and use of your name in shared highlight clips | Your consent |
| Keeping a minimal record that an account was deleted | Legitimate interests: preventing evasion of restrictions and repeated claiming of one-time bonuses |
| Retaining data connected to a legal claim | Establishing, exercising or defending legal claims |
Where we rely on consent you can withdraw it at any time, and withdrawing it does not affect anything we did before you withdrew it. Where we rely on legitimate interests you can object, and we will stop unless we have compelling grounds that override your rights.
15.2 International Transfers
Transfers to Canada are covered by an adequacy decision. The European Commission has recognised Canada as providing an adequate level of protection for personal data handled by commercial organisations subject to PIPEDA, and reaffirmed that decision in its most recent periodic review. Personal data can therefore be transferred from the EEA and the UK to us in Canada without additional safeguards.
Some of our service providers process data in the United States, which does not have a general adequacy decision. For those transfers we rely on the safeguards in our agreements with them, which are Standard Contractual Clauses approved by the European Commission, the UK addendum to those clauses, or the provider's certification under the EU-US Data Privacy Framework where it holds one.
15.3 Our Representatives in the EEA and UK
We are not established in the EEA or the UK. As required by Article 27 of the GDPR and of the UK GDPR, we have appointed representatives you can contact about how we handle your personal data. The EU representative acts for the whole European Economic Area, which includes Norway, Iceland and Liechtenstein as well as EU member states.
Unit 3D North Point House, North Point Business Park
New Mallow Road, Cork, T23 AT2P, Ireland
gdpr@euverify.com
3rd Floor, 86-90 Paul Street
London, EC2A 4NE, United Kingdom
gdpr@euverify.com
To make a data subject access request, a deletion request, or any other request under the GDPR or UK GDPR, you can use the secure portal our representative maintains: gdpr.euverify.com. The same link lets you verify the appointment. Requests submitted there are logged and tracked.
Using a representative is optional. You can always contact us directly at info@orbaris.com, and you can complain to your supervisory authority without contacting either of us first.
16 Policy Changes
We may update this policy as the service evolves. Material changes will be reflected in the "Last updated" date at the top of this page and, where appropriate, communicated directly to registered users by email. Continued use of Orbaris after a policy change is posted constitutes acceptance of the revised terms.
We encourage you to review this page periodically. The version history is reflected in the effective date above.
17 Contact Us
For privacy questions, data requests, or to report a concern, reach us at: