Privacy Policy

Last updated: October 31, 2026

Pathstone, a series of Lemonberry Labs LLC, a Delaware series limited liability company, operates this game and is responsible for the information described here.

Information we collect and why

• Account information: your email, account identifier, display name, and profile image when supplied by your sign-in provider. We use these to sign you in, identify your player profile, and maintain your account. We also remember whether you finished or skipped the introductory rules. Sign-in uses email links or Google through Neon Auth.
• Game information: games, players, invitations, moves, results, and related timestamps. We store these to run games, show history, and support rematches. Short-lived active-game indicators help us avoid sending turn notifications while you are viewing that game.
• Optional notifications: if you enable turn notifications, we store your browser’s push subscription and delivery records. Your browser or device’s push provider delivers the notification. You can turn notifications off for that device in your profile or browser settings; logging out also detaches that device from your account.
• Usage information: how you use Pathstone, such as pages viewed, buttons clicked, games started, moves made and games finished, with your browser, device type, approximate location and the page that referred you. We use it to understand how people play and to improve the game; see the analytics section below.
• Technical information: our hosting and authentication providers process information such as IP addresses, browser details, request logs, and session information to deliver and secure the service and diagnose errors. When you start a game without an account, Cloudflare Turnstile checks that a person, not an automated script, is starting it, and we keep a keyed hash of your network address for up to a day to limit how often games are started from it.
• Messages: if you contact us, we use the information you send to respond and resolve your request.

Cookies, preferences, and analytics

We use cookies for sign-in, session security, and identifying a device you enable for notifications, and browser local storage to remember your theme, whether you dismissed the notification invitation, and games you play against a bot while offline. Those games stay on your device and are never sent to us. Your browser also keeps a copy of the site so it opens offline. You can clear or block these in your browser; blocking sign-in cookies may prevent you from playing.

We use Vercel Web Analytics to understand site usage. It collects page views, referring pages, approximate location, and browser and device information for aggregate statistics, without analytics cookies or tracking you across websites. See Vercel’s analytics privacy documentation.

We also use Amplitude for product analytics, to learn how people use Pathstone. Amplitude receives the usage information described above. If you sign in, this activity is linked to your account ID, but never to your email or display name. We do not send chat messages, emails, or game invitation links to Amplitude, and we do not use it for advertising. Amplitude processes this information for us as our service provider; see Amplitude’s privacy notice.

If you visit from the European Union, the European Economic Area, the United Kingdom or Switzerland, or we cannot tell where you are visiting from, Amplitude stores nothing on your device: each visit is counted separately unless you are signed in or playing as a guest, when the session you already have tells us it is you. Elsewhere, Amplitude keeps a random ID in a first-party cookie, so visits from the same browser are counted as one player.

You can turn off the analytics this browser sends to Amplitude here, and they stay off in that browser until you turn them back on or clear its site data. If your browser sends a Global Privacy Control signal, we turn them off automatically. Our servers still report a few events to Amplitude: account sign-ups, sign-ins, and finished games. To object to those too, or to have the analytics linked to you deleted, email us at the address below.

Our iOS app sends the same kind of usage information to Amplitude, and crash and error reports to Sentry, which are not linked to your account. You can turn both off in the app’s Settings.

We do not sell personal information or share it for cross-context behavioral advertising. We do not use advertising trackers. Pathstone honors Global Privacy Control as described above but does not change its behavior in response to browser Do Not Track signals. Our providers process information for the purposes described here; we do not authorize third parties to track your activity across unrelated sites for advertising.

Who receives information

Other players can see your display name and avatar in the lobby or games, and participants can see game activity. Your email is not displayed to other players. Profile images hosted by your sign-in provider may be loaded from that provider when displayed.

We use service providers including Vercel for hosting and analytics, Amplitude for product analytics, Sentry for iOS app crash and error reports, Neon for database storage and authentication, and Cloudflare for real-time game updates and for checking guest game starts. Google processes sign-in information if you choose Google sign-in. These providers receive information needed for their services. We may also disclose information when legally required, to protect people or the service, or as part of a business transfer, subject to applicable protections.

Retention and security

We retain account and game information while needed to operate the service, preserve game history, resolve disputes, and meet legal obligations. Retention depends on the type and purpose of the information; backups and security records may remain for a limited period after deletion. Guest games, started without an account, are not kept: they may be deleted any time after they end, or after a week without a move. Analytics events are kept in Amplitude to compare usage over time; we delete those linked to you on request. We use reasonable safeguards, but no system can guarantee absolute security.

Your choices and rights

You can edit your display name in your profile. To request access, correction, export, or deletion of your account and personal information, email website-inquiry@lemonberrylabs.com and mention Pathstone. We may need to verify your identity. We respond as required by applicable law, and may retain information where legally required or necessary to protect legitimate rights.

Depending on where you live, you may also have rights to object to or restrict processing and to complain to your local data protection authority. Where applicable, we process information to provide the service under our agreement, for legitimate interests such as security and service improvement, to comply with law, or with consent when required. Providers may process information in the United States or other countries; applicable transfer protections apply where required.

Children

Pathstone is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided information, contact us so we can investigate and delete it as appropriate.

Updates and contact

We will post policy updates and the revised date on this page. For material changes, we will provide a prominent notice in the service or by email. Contact Pathstone, a series of Lemonberry Labs LLC, at website-inquiry@lemonberrylabs.com with privacy questions.