Privacy

Browser extension

The extension stores a revocable Harmonies authorization token in your browser to connect your account. On supported BGA pages it reads game content, including player identifiers, board state, scores and replay moves, to provide scoring and explicit game uploads. It does not collect your general browsing history. BGA requests use your existing browser session; BGA passwords and session cookies are not read or sent to Harmonies.

The extension's presence check on this website returns only its availability and version. Game and account data are used to operate the service, not sold or used for advertising or credit decisions. Live scoring and uploads use the configured HTTPS API. Disconnect the extension from Account to revoke its access.

Account and Google sign-in

Harmonies stores your email, account identifier, unlocked animals, linked BGA player identifier and subscription status to provide your account. Passwords are stored as salted hashes.

If you choose Google sign-in, we request your Google account identity and verified email address. We store Google's account identifier to recognize you on future visits. We do not request Gmail messages, Drive files, contacts or your Google password. Google authentication tokens are used to verify sign-in and are not retained as account data.

Games and payments

Games you explicitly upload are stored to award animal unlocks, prevent duplicate rewards and produce shared game statistics. Uploads can include BGA player identifiers, scores, board details and replay data. Live scoring processes the game information submitted by the extension. Do not send BGA passwords or session cookies.

Stripe processes subscription payments. Harmonies stores billing references and subscription status, rather than card numbers.

Service providers and browser storage

Netlify hosts the website, Render runs the API, Neon stores account and game data, and Resend delivers account emails. Google processes Google sign-in when you choose it; Stripe processes billing. These providers receive information needed for their functions.

Essential cookies keep you signed in and secure Google sign-in. Local browser storage remembers display preferences such as board side and statistics source.

Your choices

Google sign-in is optional; email and password remain available. You can revoke Google access through your Google account and disconnect extensions in My account. Revoking Google access does not itself delete your Harmonies account.

Account and uploaded game records are retained to support your collection, subscription, rewards and statistics. To request access, correction or deletion of your information, contact us or email sirturnproject@gmail.com. Include your account email, but never send passwords or authentication tokens. Deletion requests may require identity confirmation and review of records needed for billing or fraud prevention.

Reliability diagnostics

We record request status, timing, a random support reference, and the affected API route when requests fail or are slow. The website also reports a fixed error category and page name when it crashes. These reports exclude passwords, tokens, cookies, email addresses, game payloads, URL queries and error-message text. Reports go to our existing hosting providers, Netlify and Render, and are used to diagnose service failures. Hosting providers may separately process ordinary operational connection logs under their own policies.