Privacy policy

Last updated October 2026.

This policy explains what Midway collects when you play, why, who else handles it, and the choices you have. It covers this site and every game on it.

What we collect

If you create an account:

• Your email address and password, used only to sign you in and to send account emails such as password resets. Passwords are stored hashed by our sign-in provider; we never see them.
• Your username, avatar and cosmetics, which other players can see.
• Your game activity: guesses, scores, ranks, XP, Season Pass progress, duels, daily results, friends and friend requests.

If you play as a guest, without an account:

• The display name you type and a random guest ID, kept in your browser's local storage.
• Your results for the games you play, linked to that random ID. If you sign up later on the same browser, those results move to your new account.

Like most websites, our hosting and database providers also log technical data such as IP address, browser type and request times. We use it to keep the site running, stop abuse (for example, rate limiting) and fix bugs. We don't ask for your real name, and there is no chat.

Cookies and local storage

Midway itself uses your browser's local storage, not tracking cookies, to keep you signed in, remember your guest ID, your last game and settings like haptics and sound. These are needed for the site to work and never leave your device except to sign you in.

We don't use advertising or cross-site tracking cookies.

Advertising

Midway doesn't show ads. If that changes, we'll update this policy before any ads appear.

Services we use

• Supabase: our database and account sign-in. Your account and game data are stored there.
• Vercel: hosting.
• Resend: sends account emails such as sign-up confirmations and password resets.

What we don't do

We don't sell your personal information, and we only share it with the services above so they can run the site.

Keeping and deleting your data

We keep your account data until you delete your account. Delete it any time from Settings, the gear at the top right; that removes your profile, friendships, ranks and duel history. Guest results with no account are kept so finished duels still make sense to the other player. To remove your guest ID from a browser, clear this site's data in your browser settings.

Children

You must be 13 or older to create an account (see the terms). We don't knowingly collect data from children under 13. If you think a child has made an account, sign in to it and choose Delete account in Settings, the gear at the top right; that removes it straight away.

Changes

If this policy changes, we'll update the date at the top.