Your privacy at a glance
You can play without an account. Guest results are temporary. An account keeps your learning record; your email stays private, while your chosen player name, avatar and competitive results can be seen by other players. Public chat is public. Keep personal details out of your player name and messages. Use Profile Settings to manage messaging and analytics, or contact support for help with your information.
Guest samples and unrated Quick Play
Guest Mode uses a random signed, HttpOnly cookie that expires after seven days. Learn, Tables and Mental Arithmetic samples have separate trial allowances. Ordinary unrated Quick Play has no gameplay quota, although security rate limits still apply. Temporary questions, answer outcomes, response timing, scores, queue membership and a saved starting challenge are stored separately from official player progress. A Quick Play room expires after twenty minutes; Guest identity and its challenge preference expire with the seven-day identity. Expired Guest identities cannot continue play. An expired room stops accepting gameplay, but a finished result can remain available to its participants until cleanup. Expired records are removed in bounded cleanup during later activity, rather than by an immediate deletion timer.
Quick Play can match Guests and registered players. Your temporary Guest name or registered player name is shown to your opponent; bots are disclosed as Numter Bots. These matches do not create official ratings, progression, match history or achievements. Guest identity does not use your IP address or a device fingerprint, although request IP addresses may be processed separately for security and rate protection. Clearing Guest cookies after a confirmed start, or using another browser, starts a separate Guest identity. A pending request key can still recover an unconfirmed start.
Information Numter processes
Account information includes your email address, chosen display name, starting-placement choice, authentication provider, verification state, profile image and preferences, and secure session records. New uploaded profile images are decoded, resized, re-encoded as WebP, and stripped of unnecessary embedded metadata before an opaque object key and limited technical metadata are stored with the account; older data-URL avatars remain available during the backward-compatible migration period. Learning information includes answers, response times, curriculum levels, ratings, match results, daily usage, and moderation status. When billing is enabled, Numter stores subscription status, plan, renewal or expiration dates, and Paddle customer, subscription, transaction, checkout, notification, and event identifiers. Numter does not receive or store complete card numbers. If you use Numter messaging, the service stores public-chat posts and participant-only private-message text so the conversation can be delivered and preserved. Basic technical records may include IP address, browser information, timestamps, and security logs.
Why it is processed
Numter uses this information to authenticate accounts, preserve progress and preferences, adapt difficulty, enforce daily limits, operate live matches and messaging, prevent abuse, respond to support requests, and improve reliability. Numter does not sell personal information.
Messages and privacy
Global chat is public, is limited to text, and the user-facing feed resets each day. Staff can search and remove public chat when enforcing safety rules. Private messages are also text-only, and conversation retrieval is restricted to the two participants. If a participant submits a safety report, the report and exact message snapshot they chose to report become visible to authorized moderation staff; staff cannot browse the rest of that private conversation. Do not share passwords, payment information, identification documents, or other sensitive information in any Numter message.
Competitive fair play
After a Duel, Numter may evaluate server-authoritative answer timing, aggregate duplicate-request counts, repeated-opponent results, rating movement, and forfeit patterns for competitive-integrity signals. The fair-play system does not collect raw answers again, IP addresses, device fingerprints, browser identity, player credentials, or accessibility settings for this evaluation. Authorized staff see only minimized match aggregates, confidence and severity labels, and their review history.
A signal is not proof and does not automatically change account access, rating, or matchmaking. Staff must review context before escalating an indicator, and accessibility tools must not be treated as adverse evidence. Review records may be retained for integrity, appeals, dispute resolution, and legal obligations.
Product analytics
Numter uses minimized first-party product events to understand acquisition, navigation reliability, activation, retention, and competitive-product quality. These events may include a pseudonymous visitor identifier, a templated route without query parameters or room/event/club identifiers, campaign labels you arrived with, referrer hostname, broad device/browser/platform category, and coarse application timings. Authenticated events may be linked to your immutable internal player ID. Ordinary analytics do not contain your email address, public display name, answers or problem prompts, private-message text, passwords, player tokens, payment details, or moderation-report content. Training, match, queue, rematch, series, tournament, season, challenge, subscription, and safety totals shown internally are derived as aggregates from their existing server-authoritative records rather than copied into untrusted client events.
Global Privacy Control and browser Do Not Track signals stop new product-event collection, and registered players can stop new account-linked product events in Profile Settings. Turning analytics off does not remove existing records or disable training, competition, billing, messaging, or account access. Voluntary written feedback is stored separately and visible only to authorized internal reviewers. Contact support to request access or deletion. The current application does not automatically delete analytics records after a fixed number of days.
Service providers
Cloudflare provides application hosting, D1 database storage, private R2 object storage for normalized avatars, image processing, security, caching, and network delivery. Google may provide optional sign-in. Resend delivers verification, password-reset, and account-notice email. Paddle acts as Merchant of Record and processes subscription checkout, applicable consumption tax, payment, renewal, and self-service billing information when billing is enabled. These providers may process information in countries other than yours. Numter remains responsible for its own processing and service-provider arrangements; optional Google sign-in and Paddle purchases also have their own privacy notices.
Retention and your rights
Account, learning, billing, messaging and safety records do not currently have one automatic deletion schedule. Retention depends on the service purpose, security, disputes and applicable legal obligations. Expiring a session cookie does not delete your account. Account deletion and data requests are handled through support; there is no self-service account deletion button.
Subject to applicable law, you may request access, correction, deletion or blocking of your information, object to processing, withdraw consent where processing relies on consent, or request a portable copy. Contact support@numter.com or use the contact link above. We may need to verify that the request is yours without asking for unnecessary information. Some records may need to be retained for safety, fraud prevention, disputes or legal obligations. You may also raise a privacy concern with the Philippine National Privacy Commission or your local privacy authority.
Children and changes
Numter is a general-audience service intended for ages 13 and older. It does not currently verify your age or provide a parental-consent system. If your local law requires parent or guardian involvement, involve them before creating an account or subscribing. Parents and guardians may contact support if a younger child submitted information or if they need help with a young person's privacy. Material changes to this notice will be dated and displayed here.