Privacy Policy
Last updated: October 12, 2026
Rainbow Splicer ("the game", "we") is a small online pixel-art game at https://rainbowsplicer.com. Players scan the barcodes on everyday products to hatch colorful creatures called Chromies, then train them, battle and breed them. This page explains what information the game collects, why, who can see it, and what you can ask us to do with it.
1. What we collect
- When you sign in with Google. Google tells the game your Google account ID (a number that identifies your account to the game and to Google), your email address, and your name. The game keeps your account ID, your email address and your first name (the first name only labels your account and is visible to the game's administrators). The game does not receive your Google password, your contacts, your photos, or any other Google data.
- Older password accounts. A few accounts sign in with a password instead of Google. For those we store only a scrambled one-way form of the password (a hash), never the password itself.
- Your game data. Your ranch name, your Chromies (their names, colors, attributes, hats and wings), coins, Chroma-shards, items, battle and tournament results, which barcode numbers you have scanned, and small interface settings such as which panels you have minimized. It also keeps short notices for you, such as an hourly update about coins your Chromies earned or a tournament result.
- Barcode numbers. The number of each barcode you scan, type in or photograph. The game remembers the numbers (and who found each one first), because a barcode always hatches the same Chromie.
- Your camera. The camera video and any photo you take are used only on your own device to read the barcode. They are never uploaded to our server or stored.
- Technical information. To keep the game safe we briefly record your IP address when someone makes repeated failed sign-in attempts (kept for up to a day). When something breaks, the server records technical details of the error, such as which page was requested and which account was using it (kept for up to 90 days) so we can fix it. Our web server may also keep standard technical logs (IP address, time and page requested).
2. How we use it
- To sign you in and keep you signed in.
- To run the game: your ranch, battles, rankings, tournaments, shop and prizes.
- To keep the game secure and to find and fix problems.
We do not send you email, we do not show advertising, and we do not use analytics or tracking tools.
3. What other players can see
Other players can see your ranch name and your Chromies: their names, colors, attributes, hats and wings, win and loss records, and any rankings, thrones, tournament results and flags they have earned. When you first sign in, the game asks you to choose your own ranch name, and you can change it at any time. Your first name is not shown to other players unless you leave your ranch name blank, which makes the game use the default "<first name>'s Ranch". Other players cannot see your email address or your Google account ID.
4. Who we share it with
We do not sell or rent your information. We use these services to run the game:
- Google for sign-in, and Google Cloud, where the game's server runs (in the United States). Google also supplies the game's pixel font. Google receives your IP address when your browser loads its sign-in button or font, as described in Google's Privacy Policy.
- jsDelivr, a public code host. Only if the game's main barcode reader cannot start on your device, a backup reader may be loaded from it, and jsDelivr sees your IP address when that happens.
We may also disclose information if the law requires it.
5. Cookies and storage
The game sets one cookie, bm_session. It keeps you signed in for up to 30 days and is removed when you log out. It is not used for advertising or tracking. Google's sign-in button and font may set or read their own cookies under Google's policies.
6. How long we keep it
- Your account and game data are kept while your account exists.
- Sign-in sessions last up to 30 days. Failed sign-in records last up to a day. Error records last up to 90 days. Notices to you are deleted after 7 days.
- The server's database is backed up each night, and each backup is deleted after 14 days.
7. Your choices
- You can ask us what we hold about you, ask us to correct it, or ask us to delete your account. Deleting removes your player, your Chromies and items, and your email address and Google account ID. Backups containing the old data disappear within 14 days.
- You can stop the game using your Google account at any time at myaccount.google.com/permissions.
- You can log out at any time, which ends your session on that device.
8. Security
The game is served over HTTPS. Sign-in session codes and passwords are stored only in scrambled form. No system is perfectly secure, but we limit what we collect so there is little to lose.
9. Children
The game is not directed to children under 13, and we do not knowingly collect information from them.
10. Changes
If this policy changes, we will update the date at the top of this page. Please check back from time to time.
11. Contact
To ask a question, or to make a request about your account or information, email help@rainbowsplicer.com.