Privacy Policy
How we collect, use and protect information when you play Gist Compound.
Effective date: 19 October 2026 · Operator: Ollyvon Nigeria Limited
Who we are
Gist Compound (gistcompound.com) is operated by Ollyvon Nigeria Limited (“we”, “us”). We decide how player information is used, and we are responsible for it. Privacy questions and requests: legal@gistcompound.com.
Where Gist Compound is available
Gist Compound is available internationally. Eligibility requirements, including minimum ages and parental or guardian permission rules, may vary by location, and we may limit some features in some places. Personal data may be processed in the United States through Supabase, our account and database provider, and in other locations by our other service providers, as described below.
Playing with an account or as a guest
Registered players create an account with an email address and password. Your game progress is saved to your account so you can sign in and continue on another device.
Guests do not need an account and we do not collect an email address from them. Guest progress is stored only in the browser on your device. It is temporary: it is cleared when you start a new guest visit and cannot be moved to another device. A guest can create an account during their visit to keep their current progress.
Information we collect
- Account details (registered players): your email address, a unique account ID, and the date your account was created and last signed in. Your password is handled by our authentication provider in protected (hashed) form; we cannot see it.
- Age group and Terms: before registration or guest play, players choose their age group (under 13, 13–17 or 18 and over) and accept our Terms and acknowledge this Privacy Policy. We do not ask for a date of birth. For registered players we keep an age record: the age group, the Terms and Privacy Policy versions accepted, and when this was recorded. Players under 13 cannot create an account; they may play as guests with a parent or guardian’s permission. For guests the answer is kept on the device and is not sent to us. If a player chooses “under 13”, the device remembers that for 24 hours so an account can’t simply be made by changing the answer. Ages are self-declared; we do not check identity documents, and we rely on the information provided.
- Game progress (registered players): coins, gems, hint vouchers, levels, stars, story chapters, Town Hall progress, unlocked items and outfits, daily streaks, the nickname you type in the game, interests and languages you choose, and game settings such as sound. Coins and gems are virtual and have no money value.
- Technical and security information: our hosting and account providers automatically process information such as IP address, browser and device type, and times of requests, to deliver the website, keep accounts secure and prevent abuse.
- Messages you send us: if you use our contact, feedback or partnership forms or email us, we receive what you submit, such as your name, email address, organisation, topic and message.
- Optional statistics: switched off unless you turn them on in Game tools. If you opt in, we receive approximate counts (for example, number of sessions and screens viewed). No nickname, answers or contact details are sent.
We do not ask for your phone number, home address, payment details or ID documents. Please do not send sensitive personal information through our forms.
Cookies and storage on your device
Gist Compound does not use advertising or tracking cookies, and we do not run third-party analytics. To know how many people play as guests, we keep an anonymous count: when a guest starts playing, the game adds one to that day’s total, at most once a day per device. The count is just a number per day. It does not include a name, email, age group, IP address or device ID, and it can’t be linked to any player. Score pictures for sharing are made on your own device and are not sent to us. If you choose to share one, the link you send includes the name you play under and your score. The game uses your browser’s storage to keep your game progress, settings and, if you sign in, your login session, so you stay signed in on that device until you sign out.
How we use information
- To create and manage your account, and to sign you in securely.
- To save your progress and restore it when you sign in, including on another device.
- To run, maintain, fix and protect the game, including preventing misuse and fraud.
- To respond to your messages and support requests.
- To send account emails you need, such as confirming your email address and resetting your password. We do not send marketing emails.
- To improve the game, using feedback you send us and optional statistics if you switch them on.
Depending on the activity, we rely on performing our agreement with you (providing your account and the game), your consent (for example, optional statistics), our legitimate interests in running a safe and working game, and our legal obligations.
Service providers and international transfers
We do not sell your personal information, and we do not share it with advertisers. We use trusted service providers who process information on our behalf, only to provide their service to us:
- Supabase provides our account sign-in (authentication) and the database where registered players’ progress is stored. Supabase staff and systems process account and progress data only to run that service.
- Netlify hosts the website and receives form submissions.
- Zoho provides our business email, used when you contact us.
Supabase provides authentication and database services for Gist Compound. Our Supabase project is hosted in the United States. Account information and registered-player progress are stored and processed using this service. Other service providers, including Netlify and Zoho, may process information in additional locations.
Where required by applicable law, Ollyvon Nigeria Limited will implement appropriate safeguards for international transfers of personal information. We may also disclose information if required by law or to protect players, the public or the service.
How long we keep information
- Account and progress data: kept while your account is open. When you delete your account in the game, your account and saved progress are deleted from our active database promptly. Copies in our providers’ routine backups may remain for a limited period (normally up to 30 days) before they are overwritten.
- Age record: kept while the account is open and deleted together with the account.
- Guest progress: stays only in your browser and is cleared when you start a new guest visit, or when you clear your browser data. We do not receive it.
- Messages and form submissions: kept as long as needed to deal with your request and keep reasonable business records, normally no longer than 24 months, then deleted.
- Security and technical logs: kept by our hosting and account providers for limited periods for security and troubleshooting, normally no longer than 90 days.
Your choices and rights
You can play as a guest without giving us any personal information. If you have an account, you can:
- Delete your account at any time in the game: Profile → Delete account. This deletes your account and saved progress.
- Change your password from Profile, or with “Forgot password” on the sign-in screen.
- Get a copy of your saved progress using “Export progress backup” in the game, or by emailing us.
- Ask us to access, correct or delete information we hold about you, to restrict or object to certain uses, or to withdraw consent you have given.
Email legal@gistcompound.com with “Privacy request” in the subject line. We may need to confirm your identity first, for example by replying to the email address on your account. Your rights depend on the laws that apply to you, including the Nigeria Data Protection Act 2023. If you are not satisfied with our response, you may complain to the Nigeria Data Protection Commission (NDPC) or the data protection authority where you live.
Security
We take reasonable steps to protect information: the website uses encrypted connections (HTTPS); passwords are stored by our authentication provider in hashed form; database rules allow each signed-in player to read and change only their own saved progress; and no secret administrator keys are placed in the website. No online service can be completely secure, so we cannot guarantee absolute security. Keep your password private and use one you don’t use elsewhere. Tell us at once if you think your account has been misused.
Children and Age Requirements
Gist Compound accounts are for players aged 13 and above. Players aged 13–17 may use Gist Compound where permitted by the law of their country; where a parent’s or guardian’s permission is required, they should have it before playing.
Children under 13 cannot create an account and we do not knowingly collect personal information from them. They may play the guest version with a parent or guardian’s permission; guest play keeps progress only on the device and does not send us personal information.
We collect only the information reasonably necessary to provide accounts, save game progress, maintain security and deliver requested support. We do not knowingly use children’s personal information for targeted advertising.
If we become aware that an account has been created by a child under 13, we will take appropriate steps to restrict access and delete the information, subject to legal requirements.
Parents and guardians may contact legal@gistcompound.com with questions or concerns about a minor’s information, or to ask us to remove an account. We may request reasonable verification before acting on a request.
Changes to this policy
We will update this policy if the game or our practices change, and post the new version here with a new effective date. If a change significantly affects registered players, we will also tell them by email or in the game.
Contact
Privacy questions and requests: legal@gistcompound.com. Help with the game or your account: support@gistcompound.com. Operator: Ollyvon Nigeria Limited.