Privacy noticeWhat we keep, and why

Edge Cases, operated by to be announced, decides what is collected here and why.

Your email address and your public handle; your password, stored only as a bcrypt hash; your sign-in sessions; every answer you submit, with the time it was submitted; and the data the rate limiter needs (the IP address and browser string sent with each submission).

For winners only, the verification details described in section 6 of the Terms: identity, age, residence and the result of a sanctions screen.

When you open a case file we also record that you accepted the Terms and this notice, and whether you asked for email about future events, each with the time.

To run the race: your account, your progress, the live board and the result. To check fairness: every entrant’s exhibits are generated differently, and submissions are compared to catch shared answers and automation.

To email you about this and future Edge Cases events, but only if you ticked “Email me about future Edge Cases”. That box starts unticked.

Neon (the database, in the EU, Frankfurt), Vercel (hosting) and Resend (sign-in email, only when you ask for a sign-in link).

Account data until the account is deleted. Race records (progress and submissions) for 12 months after the race closes, which is 7 days after it opens.

You can ask to see, correct or delete your data by writing to an address to be announced.

Your handle is public: it appears on the live board while you play and in the results. Your email address never does.

Only what signing in needs: a session cookie that keeps you signed in, and the short-lived security cookies set while you sign in (a CSRF token and the page to return to). There are no analytics or advertising cookies, and no third-party trackers. Fonts are served from this site, so your browser makes no requests to font providers.