Privacy Policy
Last updated: Sep 19, 2026
1. Scope
This policy explains how Debate.Games handles data generated while you browse, play, comment and manage your profile. Guests can browse public games and comments; playing, viewing results, commenting, creating, saving and personal features require sign-in.
2. The iobot.top / Debate Boundary
Debate uses iobot.top as its identity provider and never copies your passwords, SMS codes or third-party OAuth credentials into the Debate database. International email, Google and future Apple sign-ins are handled by iobot.top's international auth service; mainland-China phone numbers, codes, passwords and lockout records stay in iobot.top's domestic auth service. Debate stores only the iobot.top user ID, auth region (CN/INTL) and independent Debate sessions. Your Debate nickname is site-local and is never overwritten by iobot.top display names on later logins.
3. Data Debate Collects
Account mapping: iobot.top user ID, auth region, login email (international email sign-in only) and revocable session hashes. Profile: Debate nickname, avatar ID, privacy options, fuel (in-app currency) and level. Activity: game answers, comments, likes, saves, tips, creations and necessary transaction records. Technical & security: IP, request times, device/browser info and anti-abuse records. Uploads: images you voluntarily upload plus moderation records. Browsing while signed out does not create an anonymous Debate account; language, topic, played-state and some preferences may live only on your device.
4. Purposes
We use this data to provide games and comments, gate result reveals, sync personal data, maintain fuel balances and leaderboards, process reports, stop brigading and attacks, improve the service, and meet legal obligations.
5. Storage & Cross-Border
Debate business data is stored in a standalone Supabase database; the app is hosted on Vercel; uploads may use Cloudflare R2. These services may operate outside your country or region. Even with a mainland-China phone login, Debate game and profile data may currently be processed on overseas Supabase; the phone-auth data itself stays in iobot.top's domestic service. If a separate CN-region version launches later, we will explain before any migration.
6. Visibility & Results
Game prompts and public comments are visible to guests. Vote percentages, ratings, rankings and other community results are revealed only to signed-in users passing session checks. Your public nickname may appear on comments, creations and leaderboards; you can control profile, activity and leaderboard visibility in Account & Privacy settings.
7. Seeds & AI Content
Platform content has exactly two sources: user (tied to a real account) and official (AI-generated, seeded bank, early migrated data). Source and generator version are recorded. AI-generated content follows the same content-safety standards as user content and is never 18+. Such sources cannot sign in as users or use user sessions to play. AI-assisted moderation and generation can err; request review via reporting or the contact page.
8. Sharing, Processors & Data Security
We do not sell your personal data. Data is shared only with processors providing hosting, database, file storage, security, auth and necessary operations — or as required by law, security incidents and rights protection. Safeguards include site-wide HTTPS, session tokens stored only as revocable hashes, independently verified admin operations, content screening for uploads, and row-level database access control; if a security incident may affect your rights, we will notify you via in-site notice or email within a reasonable period.
9. Ads, Cookies & Personalization
Ads keep the service free. The only ad source today is Google AdSense; with no publisher ID configured, no ad script loads and no advertising cookie is set. When enabled, Google and third-party ad partners may use cookies or similar technologies to serve personalized or non-personalized ads based on your visits to this and other sites. You can opt out of personalized ads in Google Ads Settings (adssettings.google.com) or learn about and opt out of third-party ad cookies at aboutads.info. For visitors in the EEA, UK and Switzerland, personalization technologies load only after consent. We never sell your account data to advertisers; if in-house ad slots return, they only count impressions and clicks for billing — no cross-site tracking.
10. Retention, Export & Deletion
Account mapping and personal data are kept until you delete your Debate data; public content may remain de-identified after deletion to preserve discussion and statistical integrity. You can export or delete Debate data for free in settings. Deleting Debate data does not delete your iobot.top account or affect other iobot.top apps; deleting the iobot.top global account goes through iobot.top's own channels.
11. Sessions & Devices
With "Remember me" checked, sessions persist in local storage up to 30 days; otherwise they live in session storage only. On sign-out you can keep or clear local preferences. Each device gets an independent, revocable Debate session.
12. Your Choices & Rights
You can access, correct, export or delete Debate data, adjust visibility, and — where applicable law allows — request restriction, objection or withdrawal of consent. The policy pages, data export, deletion and support entry points are never gated on agreement status.
13. Children & Changes
This service is not directed to children under 13 (or a lower age where your jurisdiction requires it), and we do not knowingly collect their personal data. If you are a parent or guardian and believe a child under 13 has provided us personal data, contact master@debate.games — we will verify and promptly delete it. For material policy changes we notify via in-site notice or the policy update flow; changes requiring fresh consent are clearly presented before the affected feature.
14. Contact
For privacy questions and data-rights requests, email master@debate.games or use the contact page.