Privacy
Your account should not be a mystery.
This page describes the data used by tommythehamburger.fun as it works today. It does not turn a game score into permission to collect everything else.
What the site receives
Google sign-in runs through Neon Auth. A signed-in session can provide an account identifier, email address, and Google display name. The Tommy profile database stores that account identifier, a chosen public display name, and account activity dates.
Ranked arcade play stores server-created run records, timing, submitted input logs, scores, achievements, and anti-abuse signals. Network and browser values used for ranked-run abuse checks are stored as hashes where the current verified-run system supports hashing.
Wallet and connected-site data
If you link a wallet, the site stores the network, public wallet address, optional label, verification dates, and the signed challenge needed to prove control. The site does not ask for or store a wallet private key or seed phrase.
Tommy SSO can send a short-lived signed handoff containing your account identifier, email, display name, and primary public wallet to a connected Tommy site you choose to open. Hamburgerlandia keeps its own citizenship and country records; the central profile requests an owner-only dashboard from that separate service.
What other people can see
Public player pages and leaderboards can show a display name, a profile identifier in the page URL, verified scores, games played, and achievements. Email addresses, authentication sessions, wallet-link challenges, and the owner-only Hamburgerlandia dashboard are not presented as public profile fields.
Services involved
The site uses Google for sign-in, Neon for authentication and database services, Vercel for hosting, and Solana wallet or network services when a player chooses a wallet feature. Connected Tommy sites receive account data only through their configured Tommy SSO flow.
A small BTT Labs visit counter receives the Tommy site label, page path, referring hostname, and a broad mobile, tablet, or desktop viewport class. It does not receive page text from this script.
Your choices
Guest browsing and guest arcade play do not require a Tommy account. Signed-in players can change their display name, revoke linked wallets, and sign out. Account and deletion limits are explained on the Account and data page.
Retention and changes
Records are kept while they are needed to operate the account, verified leaderboards, security checks, connected features, and applicable recordkeeping. This page will change when the actual data flow changes. Last updated August 3, 2026.