PRIVACY POLICY
Last updated: June 2026. This policy explains what data Run Little Man! collects, how it is used, and your rights under applicable privacy law (including GDPR).
WHO WE ARE

Run Little Man! is operated by an individual developer. You can contact us via the social media handles listed on the About page. For data-related requests, please send a direct message on Instagram @Kona.sidequests.

DATA WE COLLECT
Account email addressRequired to create and secure your account. Not shown publicly.
Display nameShown on the leaderboard and associated with your scores.
Instagram & TikTok handlesOptional. Collected during competition sign-up for eligibility verification.
Game scoresSaved to the leaderboard when you submit a run.
Competition entry countsTracked automatically when eligible runs are submitted during a competition period.
Server access logsStandard web server logs (IP address, browser, request path) retained briefly for security.
HOW WE USE YOUR DATA
Email addressAuthentication, password resets, email verification. Never used for marketing.
Display namePublic leaderboard display.
Social handlesCompetition eligibility verification only. Not sold or shared with third parties.
ScoresLeaderboard, personal score history, competition entry tracking.
Server logsSecurity and abuse prevention. Automatically purged on a rolling basis.

Legal basis for processing (GDPR): performance of the service you requested (account features, leaderboard, competition), and our legitimate interest in preventing abuse and maintaining fair competition.

COOKIES

This site uses only strictly necessary cookies — specifically, authentication session cookies set by Supabase (our authentication provider) so that your login persists between page loads.

These cookies are essential to the service and are exempt from consent requirements under the ePrivacy Directive. We do not use analytics cookies, advertising cookies, or any third-party tracking.

Fonts are self-hosted via Next.js — no requests are made to Google or any other CDN at runtime. Audio files are served from our own servers.

THIRD-PARTY SERVICES
SupabaseAuthentication and database hosting. Data stored in Supabase cloud infrastructure. See supabase.com/privacy.
Upstash RedisServer-side rate limiting only. No personal data stored. See upstash.com/privacy.
VercelHosting and edge delivery. Standard access logs. See vercel.com/legal/privacy-policy.

We do not share personal data with advertising networks, data brokers, or marketing platforms.

DATA RETENTION

Account data is retained for as long as your account is active. Scores are retained indefinitely as part of the historical leaderboard. If you delete your account, your email and profile data are removed; scores may be anonymised rather than deleted to preserve leaderboard integrity.

Competition entry records are cleared between competition periods.

YOUR RIGHTS

Under GDPR (where applicable), you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Request a copy of your data in a portable format
  • Object to processing based on legitimate interest

To exercise any of these rights, contact us via Instagram @Kona.sidequests. We will respond within 30 days.

CHILDREN

This service is intended for users aged 18 and over. We do not knowingly collect data from children under 18. If you believe a child has created an account, please contact us and we will remove the account promptly.

CHANGES TO THIS POLICY

We may update this policy from time to time. Material changes will be announced on our social media channels. Continued use of the service after an update constitutes acceptance of the revised policy.

♪ MUSIC