Privacy

Summary

Probandle has no advertising and no cookies. Finished games are counted, with the date of the case, the result, the number of guesses, the day it was played and the time it was saved. Nothing in the count identifies you. If you play without an account, your games, your record and your settings stay in your browser. If you sign in with Google, your results are also stored with your account, so your streaks and statistics are the same on every device.

What is stored in your browser

The site keeps these items in your browser's local storage:

• the case you are playing (probandle: followed by the case id, or probandle:account: followed by the case id while you are signed in). Opening a new day's case clears the previous one, though a case started from the archive can sit beside it until you next open the day's case.
• your record from playing while signed out (probandle:results:device): your results by date, from which your streaks and guess distribution are calculated
• while you are signed in, a copy of your account's results (probandle:results:account), which signing out removes. If signing out cannot send your latest results, they are kept underprobandle:results:account: followed by your account's ID and sent the next time you sign in here.
• your theme (probandle:theme)
• whether you have seen the how-to-play note (probandle:howto-seen)

Signing in adds the session that keeps you signed in, under sb-…-auth-token, and a short-lived key beside it while the sign-in is in progress. Signing out removes both.

Clearing the site's data in your browser deletes all of these, and unless you have signed in there is no other copy of your record.

What is stored with an account

An account is optional. It stores your results so that your streaks and statistics are the same on every device, and because signing in uses Google, Probandle never receives or stores a password.

With an account, two things are stored on a server:

• your sign-in record: the provider you signed in with (Google), the ID it uses for you, your email address, the display name and picture it sends, the time the account was created and the time you last signed in
• your results, one row per case: the date of the case, whether you won or lost, the number of guesses, the day you played it, and the time the row was saved

The results you play while signed out stay in your browser when you sign in, and they are shown again when you sign out. If your account holds no results yet, you can move them into it once.

Both are stored with Supabase, on a project in Frankfurt, in the European Union, under Supabase's standard data processing addendum. Supabase publishes its own list of sub-processors.

Legal basis

Probandle relies on two legal bases under the GDPR:

• your sign-in record and your results are processed to provide the account you asked for when you signed in (performance of a contract, Article 6(1)(b))
• the count of finished games is kept because Probandle has a legitimate interest in knowing whether the game works (Article 6(1)(f)), and nothing in it identifies you

How long data is kept

• your sign-in record and your results: until you delete your account
• the count of finished games: indefinitely
• Netlify's logs: at least 24 hours, and up to 7 days depending on the plan
• Supabase's logs: one day, on the plan Probandle uses

Downloading and deleting your data

Both are done from the account dialog (the person icon in the masthead), with no email or waiting period. Download my results saves your record as a JSON file, and Delete my account removes the account, every result stored with it and the copy of them in your browser, immediately and permanently. The results you played while signed out stay in your browser. For anything else, write to privacy@probandle.com.

Your rights

Under the GDPR you have the right to:

• see the personal data held about you (access)
• have it corrected if it is wrong (rectification)
• have it deleted (erasure)
• have its use limited while a question about it is settled (restriction)
• receive it in a file you can take elsewhere (portability)
• object to its use where the legal basis is a legitimate interest (objection)

To use any of them, write to privacy@probandle.com. Because nothing in the count of finished games identifies you, Probandle cannot tell which games in it are yours.

You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

What the hosts see

Probandle is hosted on Netlify, and Supabase stores accounts and the count of finished games. Both see the IP address of each request and keep it in their server logs. Probandle itself adds no tracking pixels or third-party scripts, and even the fonts are served from probandle.com.

Netlify is a company in the United States, and its network, edge functions and logs can handle requests outside the European Union. Its data processing agreement bases those transfers on the EU-U.S. Data Privacy Framework, with the EU standard contractual clauses as the fallback.

The reveal card links to Orphanet, OMIM, MONDO, GeneReviews and PubMed, which have their own privacy policies.

Who is responsible

Probandle is run by Sander Lamballais, who is the data controller for the data described on this page; Netlify and Supabase process it on his behalf. Questions, including requests under the GDPR, go to privacy@probandle.com.

When what is stored changes, this page is updated first and the date below moves with it.