Who we are

Kire Labs operates mainline. at mainline.build and is the data controller for the information described here. Questions or requests: support@mainline.build.

What we collect

• ·Sign-in (Google). When you sign in with Google we receive your name, profile picture, email address, and Google account identifier. We store your name, profile picture, a stable account identifier, and your preferences (such as coaching hints). We do not store your email address in our database.
• ·Gameplay & account. Game statistics, your daily and campaign streaks, your progress in The Line, your recent games, leaderboard entries, a public handle you choose, and friend codes or connections you create.
• ·Multiplayer. Chat messages and reactions you send in an online room. These live with the room and expire automatically a short time after the room goes idle.
• ·Technical. Standard server logs (such as IP address and browser type) processed by our hosting provider to keep the service secure and reliable.
• ·Analytics.Aggregate, cookieless usage events (for example, a page visit or a game finishing) with no cookies, no cross-site tracking, and no advertising identifiers. A first-seen day is kept in your browser’s local storage as a coarse return-visit signal; it never leaves your device except as an anonymised bucket.
• ·Advertising (Android app only).In our Android app you can choose to watch short rewarded ads to earn in-game Fare. These are served by Google AdMob, which may use your device’s advertising identifier and ad-request data to show, cap, and measure them. Our website shows no ads and uses no advertising identifiers. See Advertising below.
• ·Purchases (mobile app). If you buy something in the app, Google Play processes the payment and sends us a purchase record (the product, an order id, and a purchase token) so we can deliver what you bought and handle refunds. We never receive or store your card details.

What we don't do

Our website uses no advertising cookies, no ad networks, and no cross-site tracking, and because it sets no non-essential cookies it needs no cookie banner. We never sell your personal data. Our Android app does show ads through Google AdMob; to serve them, an advertising identifier is shared with Google, which some privacy laws treat as “sharing” for advertising. You can limit or reset it in your device settings, and we ask people in the EEA, UK, and Switzerland to consent before any personalized ads are shown. See Advertising below.

Advertising (Android app)

• ·What shows ads. Only our Android app, and only rewarded ads: short videos you can choose to watch to earn in-game Fare. The website shows no ads, and you are never required to watch one to play.
• ·Who serves them.Google AdMob. To show, frequency-cap, and measure ads, and to guard against invalid traffic, Google may process your device’s advertising identifier, your ad interactions, and coarse technical data. How Google uses data from apps that use its services is described in Google’s policy.
• ·Your choices. In the EEA, UK, and Switzerland we show a consent prompt before any personalized ads, and you can change your choice later in the app. Anywhere, you can reset or delete your advertising ID in your device settings (on Android: Settings, then Google, then Ads) to opt out of ad personalization.

Cookies & local storage

• ·One essential cookie keeps you signed in after you authenticate with Google. It is required for the account to work and sets no tracking data.
• ·Local storage on your device holds your on-device game and campaign progress and preferences. It stays in your browser and is not a cookie.

Why we can use it (legal bases)

• ·Contract: to give you an account, save your progress, and run multiplayer games.
• ·Legitimate interests: keeping the service secure, preventing abuse, and understanding usage in aggregate so we can improve the game.
• ·Legal obligation: keeping records required for tax and payments once purchases are available (handled by our payments provider; see Terms and Refunds).
• ·Consent: to show personalized ads in the Android app where the law requires it (for example in the EEA, UK, and Switzerland). You can withdraw consent at any time in the app, and non-personalized ads may still be shown.

Who processes data for us

We use a small set of providers who process data on our behalf under agreement: Google (sign-in, and AdMob advertising in the Android app), Vercel (hosting, served from a London region), Upstash (the database that stores your account and game data), Umami (privacy-friendly cookieless analytics), and Sentry (error monitoring, with personal data masked). In-app purchases in the mobile app are processed by Google Play (Google LLC), which sends us a purchase record but never your card details. Other than the advertising described above, we do not sell or share your data for anyone else’s marketing.

International transfers

Some of these providers may process data outside the UK/EEA. Where they do, the transfer is covered by an appropriate safeguard (such as an adequacy decision or Standard Contractual Clauses).

How long we keep it

• ·Account, profile, statistics, and campaign progress: while your account exists.
• ·A day’s daily-puzzle result: a few days, then it expires automatically.
• ·Leaderboard entries and rate-limit windows: a short period (days to weeks), then expire.
• ·On deletion (below), we remove your profile, statistics, and progress.

Your rights

You can ask us to access, correct, delete, restrict, or export your data, and object to certain processing. Sign out at any time; to delete your account and data, email support@mainline.build. You may also complain to a data-protection authority (the ICO in the UK, or your local supervisory authority in the EU).

Children

mainline. is a general-audience game and is not directed to children under 13 (or the minimum age of digital consent in your country, which is up to 16 in parts of the EU). We do not knowingly collect data from children below that age; if you believe we have, contact us and we will delete it. The ads in our Android app are general-audience and are not directed to children.

Changes

If we change how we handle data, we’ll update this page and the “last updated” date above. Material changes will be highlighted where practical.