The first time you play, your browser makes a random rider ID and a save token and keeps them. The token is also set as a cookie that only the save service reads. Your save is copied to our server (an Upstash database) so a lost browser isn't a lost rider. A save holds your rider name, look and gear, cheddar, XP, tricks and titles, personal bests, home and game settings. We store the token and the optional PIN only in scrambled (hashed) form.
By email. Supabase Auth sends you a one-time code and checks it. Cloudflare Turnstile may check that the request comes from a person. We keep your email address on your STEEZY account so you can sign in again.
With Discord. We get your Discord user ID and display name and keep both on your account. Discord also asks whether we may add you to the STEEZY Discord server. If you own a paid kit, our bot gives you that kit's role there, and takes it away if the purchase is refunded. We don't keep your Discord login token.
Signing in sets a cookie that keeps you signed in. That's all it does.
Kits are sold through Tebex, the merchant of record. Tebex takes the payment and holds your billing details under its own privacy policy. We send Tebex only an order number. We keep the order (product, price, rider ID, status) and Tebex's transaction ID, so your kit stays yours and refunds work.
Pick a name you're happy to have public.
Clips you record stay in your browser and are never uploaded. They leave your device only if you save or share them yourself.
When something breaks, the game sends us the error, the game version and your browser's user-agent. Each visit also sends one short report on load time, frame rate and hardware class (graphics card type, memory, CPU cores, screen size). Neither carries your name, rider ID or account.
To stop abuse, we count requests per IP address over windows of a minute to an hour. Security events (refused requests, sign-ins, account changes) go to a log that stores a hashed IP, never the address itself.
The game and its servers run on Cloudflare, with Vercel as a fallback. Saves, accounts and orders are stored in Upstash. Supabase handles email sign-in, Discord handles Discord sign-in, and Tebex handles payments. Each one gets only what its job needs.
| Save, account, leaderboard runs, friends, home | Until you delete your account or ask us to remove them. |
| Backup copies of a save | Up to 30 days. |
| Sugarpine Memories pictures | The board keeps the 9 newest and the cinema the 6 best. The rest are deleted. |
| Crash and performance reports | The newest 500 and 2,000. Older ones are overwritten. |
| Security log | The newest 4,000 entries. |
| Unpaid orders | 30 days. |
| Paid orders and Tebex transaction IDs | Kept for refunds and chargebacks. Once your account is deleted, they're tied only to a rider ID that nothing links to you. |
Signed in? Go to Settings > Account & save > Delete account. It deletes your account, your email and Discord link, your save and name, friends, leaderboard runs, cheddar and home. Kits you paid for go with it. It can't be undone.
Playing as a guest, or want a Memories picture or anything else removed? Email us your rider name and we'll do it.
STEEZY is for players 13 and over, the same as our Terms.
STEEZY is a small, independent game. Write to steezy.devs@gmail.com with any question or request.