Privacy Policy

Last updated September 9, 2026.

Link the Flick is a daily movie-chain puzzle. This page explains what we store if you sign in, what stays on your own device if you don't, how we count visitors, and what we never collect either way.

Playing without an account

You can play the whole puzzle without signing in. Your progress and the dates you solved are kept in your own browser's local storage and are never sent to us. Clearing your browser data deletes them, and we cannot recover them. We do keep an anonymous count of games played, described in how we count visitors below, and there is nothing in it that identifies you.

If you sign in later, the days you solved anonymously are copied to your new account so your streak survives the switch. That is the one moment anything from local storage reaches our database, and it only happens when you choose to sign in.

What we store if you sign in

We use Supabase to host our database and handle sign-in. Your session is kept in your browser's local storage so you stay signed in between visits.

How we count visitors

We keep a simple count of how the site is being used, so we can tell whether it works and whether anyone is playing. It comes in two halves, and we keep those halves apart on purpose.

Page visits. Each time a page here is opened, we write down that it happened, which page it was, whether you arrived by following a link from somewhere else, and whether you're on a phone, a tablet or a computer. When you do arrive from a link we keep only the name of the site it came from — a search engine, say, or a social network — never anything about you. That is the whole record. It has no name in it, no account, no address, and no code that follows you from one visit to the next. We could not pick out which visits were yours even if you asked us to.

What happens in a game. To count something like how many people finished today's puzzle, we have to be able to tell one player apart from another. If you're signed in, that's your account. If you're not, your browser makes up a random number for the day and throws it away at midnight when the next puzzle starts. Tomorrow you are a different random number, so these counts never add up into a picture of you over time. That's deliberate, and the price of it is that we cannot tell whether someone playing anonymously came back the next day.

The two halves never touch. A page visit cannot be matched to a game, so where you came from is never attached to what you played. That costs us something real — we can't tell which links bring us people who go on to play — and we would rather not know.

We also count how many people have found each distinct solution to a day's puzzle, but those counts carry no identity — there is no way to tell from them who found what.

When something goes wrong

When the site breaks, our server writes a short note about it so we can find the problem. Those notes can say which account or which day's random number was involved, because otherwise a fault nobody can reproduce is impossible to chase. They never contain your email address or your IP address, they are only ever read by us, and they are deleted automatically after a few weeks.

What we don't store

We don't use any outside analytics or advertising company. There is no Google Analytics here, no tracking pixels, no ad network, and nothing on this site reports to anyone but us. We don't record your IP address ourselves, and we make no attempt to work out where in the world you are. Our hosting provider does keep its own short-lived record of each request, including the address it came from — that is how any website on the internet works, and we can't turn it off — but it isn't ours and nothing we build reads it.

Puzzles older than 30 days are deleted, along with those solution counts. Your own puzzle history is kept for as long as your account exists, because your streak is counted from it.

Sign-in providers

If you sign in with Google or X, that provider handles your credentials directly — we never see your password. They share your email address and, if you choose, a profile picture with us. Their own privacy policies govern what they store about that sign-in.

Third parties

Movie and actor data comes from TMDB. Searching for a film or actor sends that search term to TMDB through our server; no account information is included in that request.

The site itself runs on Railway, and our database and sign-in are handled by Supabase. Both are hosting providers: they hold what the site needs to work, and neither is sent anything about you for any other purpose.

Deleting your account

You can delete your account at any time from your profile menu. Deleting your account removes your profile and your whole puzzle history immediately, including your streak, and cannot be undone. Deleting Your Data walks through the steps and says exactly what goes.

Questions

Reach us at [email protected].