Last updated: September 6, 2026
1. Who we are
Repository Games (“Repository Games”, “we”, “us”, or “our”) develops and operates games and Discord Activities, including Crossword Mesh, Daily Memory, our idle RPG, and other Repository Games titles that we may release in the future (together, the “Services”).
For the purposes of the EU General Data Protection Regulation (“GDPR”) and the UK GDPR, Repository Games is the data controller for the personal data described in this Privacy Policy.
For privacy questions, requests, or concerns, contact us at:
contact.repositorygames@gmail.com
This is our primary contact address for data protection matters.
2. Scope
This Privacy Policy applies to the Repository Games Services, including:
- Crossword Mesh;
- Daily Memory;
- our idle RPG;
- other games or Discord Activities operated by Repository Games that link to this Privacy Policy;
- the backend services and administrative systems supporting those games.
Some Services run inside Discord and interact with Discord’s platform and APIs.
This Privacy Policy does not govern Discord’s own processing of your personal data. Discord operates independently under its own privacy policy:
Where a particular Repository Games title collects or uses information differently from the general practices described here, we may provide additional information within that Service.
3. Information we collect
The exact information we process depends on which Repository Games Service you use and which features you interact with.
3.1 Discord account information
When you launch one of our Discord Activities, we may receive and store information made available through Discord, including:
- your Discord user ID;
- your Discord username;
- your display name, where available;
- your Discord avatar or avatar reference;
- identifiers associated with the Discord server (“guild”) or channel in which the Activity is launched.
Your Discord user ID is generally the primary identifier we use to associate game progress and other account-related information with you.
3.2 Gameplay and progression data
We may store gameplay information necessary to operate each game and preserve your progress.
Depending on the Service, this may include:
- puzzles or levels played;
- guesses or answers submitted;
- hints used;
- words or objectives completed;
- scores;
- completion times;
- streaks;
- statistics;
- achievements;
- badges;
- badge progression;
- unlocked cosmetics;
- equipped cosmetics;
- virtual inventory or resources;
- game progression;
- rewards;
- daily participation;
- other game-specific progression information.
For example, Crossword Mesh may store guesses, solved words, Mesh attempts, hints, completion times, streaks, badges, achievements, and equipped cosmetics.
Daily Memory may store information such as game completion, scores, attempts, times, and streaks.
Our idle RPG may store information such as progression, resources, inventory, upgrades, unlocks, or other persistent game state.
3.3 Social and channel activity information
Some Repository Games are designed to be social experiences within Discord.
Where applicable, we may process information such as:
- which users are participating in the same Activity channel;
- basic player progress shown to other participants;
- session participation;
- channel-level game results;
- live summary or recap information;
- player cosmetics or showcased badges displayed to other users.
This may allow other users in the same Discord channel to see information such as your username, avatar, progress, completion state, badges, or cosmetic appearance.
3.4 Optional recap or channel authorization data
Some Services may allow a Discord channel to enable optional automated summaries, recaps, reminders, or similar features.
Where someone with appropriate authorization enables such a feature, we may store:
- the relevant Discord channel or guild identifier;
- a Discord webhook identifier;
- an encrypted webhook token or similar authorization credential;
- configuration information necessary to send the requested message.
Where supported, disabling the relevant feature removes or invalidates the stored authorization as appropriate.
3.5 Feedback and bug reports
If you submit feedback or a bug report through one of our Services, we may store:
- the message you submit;
- whether it is feedback or a bug report;
- your Discord user ID;
- your username or display name snapshot;
- the relevant game or puzzle;
- date and time of submission;
- status of the report;
- relevant technical or contextual information, such as the screen you were using, channel or guild identifiers, or application version, where available.
We use this information to review feedback, investigate problems, and improve our Services.
3.6 Purchases, subscriptions, and entitlements
Some Repository Games may offer optional paid content through Discord’s supported payment systems.
We do not directly collect or store your full payment card number, bank account details, or other full payment credentials.
Payment processing is handled by Discord and its payment providers.
We may, however, receive and store information necessary to identify and provide the content you purchased, such as:
- product or SKU identifiers;
- entitlement identifiers;
- subscription identifiers;
- entitlement or subscription status;
- purchase or entitlement timestamps;
- expiration or renewal information where applicable;
- information indicating whether a purchase is active, canceled, refunded, revoked, or otherwise changed.
We use this information to provide and manage paid features, cosmetics, subscriptions, or other digital content associated with your Discord account.
Discord’s own payment processing is governed by Discord’s policies and terms.
3.7 Technical information
Our hosting and infrastructure providers may automatically process limited technical information when you access the Services, such as:
- IP address;
- browser or device information;
- request timestamps;
- request URLs;
- diagnostic information;
- server logs;
- error information.
We primarily use this information to operate, secure, maintain, and troubleshoot the Services.
We do not use this information for targeted advertising.
4. How we use your information
We use personal data for the following purposes.
Providing the Services
We process account and gameplay information in order to:
- identify you within the game;
- generate and serve game content;
- save and restore progress;
- calculate scores, streaks, achievements, badges, and statistics;
- manage unlocked and equipped cosmetics;
- provide persistent inventory or progression;
- recognize purchases and entitlements;
- provide other features you actively use.
Our legal basis is generally performance of a contract or taking steps at your request before entering into a contract, under GDPR Article 6(1)(b).
Social game features
We process limited player information to support social features such as:
- showing players who are participating together;
- displaying progress or completion status;
- displaying usernames and avatars;
- showing badges, cosmetics, or recap information;
- producing channel-level results or summaries.
Where these features form part of the Service you choose to use, our legal basis is generally Article 6(1)(b).
Where processing goes beyond what is strictly necessary to provide the Service, we may rely on our legitimate interest in operating useful social game features under Article 6(1)(f), balanced against your rights and interests.
Purchases and entitlements
We process purchase and entitlement information to:
- provide purchased digital content;
- maintain access to purchases or subscriptions;
- process entitlement changes;
- prevent duplicate or unauthorized access;
- resolve purchase-related support issues.
Our legal basis is generally Article 6(1)(b), and where we must retain records to comply with legal, tax, or accounting requirements, Article 6(1)(c).
Security and reliability
We may process technical data and logs to:
- detect abuse;
- prevent unauthorized access;
- investigate errors;
- maintain service availability;
- secure our infrastructure;
- protect Repository Games and our users.
Our legal basis is our legitimate interest in operating secure and reliable Services under Article 6(1)(f).
Feedback and bug reports
We process feedback and bug reports to:
- investigate reported issues;
- respond where appropriate;
- improve game design and functionality;
- track whether an issue has been resolved.
Our legal basis is generally our legitimate interest under Article 6(1)(f).
Optional features
Where a feature specifically asks for consent and consent is the appropriate legal basis, we will rely on Article 6(1)(a).
Where processing is based on consent, you may withdraw that consent at any time.
5. Advertising and profiling
Repository Games does not sell your personal data.
We do not share your personal data with advertisers or data brokers.
We do not use your personal data for targeted advertising.
We do not carry out automated decision-making or profiling that produces legal effects or similarly significant effects on you.
6. Sharing with Discord
Our Discord Activities necessarily interact with Discord’s services and APIs.
For example, this may include:
- identifying the Discord account launching an Activity;
- receiving Discord account or channel information;
- verifying purchases or entitlements;
- posting an authorized recap or summary;
- communicating with Discord APIs required to run the Activity.
Discord independently controls its own processing of information relating to your Discord account and use of Discord.
You can read Discord’s Privacy Policy here:
7. Other parties we share data with
We do not sell your personal data.
We use infrastructure providers that process information on our behalf in order to operate the Services.
These currently include:
Vercel
Vercel hosts parts of our web applications and backend services.
In the course of serving requests, Vercel may process technical information such as IP addresses, request information, and logs.
Supabase
Supabase provides database infrastructure used to store game data and other information described in this Privacy Policy.
Discord
Discord provides the platform on which our Discord Activities operate and, where applicable, processes purchases and payments through its supported systems.
Discord acts independently for much of its own platform and payment processing.
We may add or change infrastructure providers as our Services evolve.
Where a provider acts as our processor, we require appropriate data-protection safeguards in accordance with applicable law.
We may also disclose information where reasonably necessary to:
- comply with applicable law or a valid legal request;
- enforce our rights;
- investigate fraud or abuse;
- protect the safety, rights, property, or security of Repository Games, our users, or others.
8. International data transfers
Some of our service providers operate infrastructure in countries outside the European Economic Area (“EEA”) or United Kingdom.
Where personal data is transferred internationally, we rely on appropriate safeguards where required by law, such as:
- adequacy decisions;
- Standard Contractual Clauses;
- other legally recognized transfer mechanisms.
9. Cookies and local storage
Repository Games does not use advertising or cross-site tracking cookies.
Our games may use browser storage or similar local technologies where necessary to make the Services function.
Depending on the Service, this may include:
- accessibility preferences;
- user-interface preferences;
- temporary session information;
- local testing identifiers;
- cached player display information;
- other small pieces of game state needed for functionality or performance.
For example, a locally generated identifier may be used when a game is opened outside Discord during development or testing so that local progress does not conflict with another user.
Clearing your browser or application site data may remove locally stored information.
Local storage may still be synchronized with our servers where the relevant feature requires server-side persistence. Where that happens, the server-side data is covered by this Privacy Policy.
10. Data retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.
Gameplay and profile data
We generally retain gameplay and progression information while you continue to use our Services so that features such as progress, statistics, achievements, purchases, and streaks remain available.
We do not currently apply a fixed automatic deletion period to all gameplay data.
You may request deletion as described in Section 12.
Feedback and bug reports
Feedback or bug reports may be retained for as long as reasonably necessary to investigate, resolve, document, or learn from the issue.
Reports may later be archived or deleted.
Purchase and entitlement information
We may retain purchase or entitlement information for as long as necessary to:
- provide the purchased content;
- verify ownership or subscription status;
- resolve disputes or support requests;
- comply with legal, accounting, tax, fraud-prevention, or record-keeping obligations.
This may mean that limited transaction-related records need to be retained even after other gameplay data has been deleted.
Technical logs
Infrastructure and diagnostic logs are generally retained according to the retention periods provided by our hosting and infrastructure providers, unless we need to retain specific information longer for security, fraud prevention, or legal reasons.
11. Data security
We take reasonable technical and organizational measures to protect personal data.
These measures may include:
- HTTPS encryption in transit;
- database access controls;
- restricted administrative tooling;
- encrypted storage of sensitive authorization credentials where applicable;
- authentication and authorization controls;
- measures designed to limit unnecessary data access.
No online service can guarantee absolute security.
We therefore aim to collect and retain only information reasonably necessary to operate our Services.
12. Your privacy rights
If you are located in the EEA, United Kingdom, or another jurisdiction providing similar rights, you may have the right to:
- Access personal data we hold about you;
- Rectify inaccurate or incomplete information;
- Erase your personal data in certain circumstances;
- Restrict processing in certain circumstances;
- Object to processing based on legitimate interests;
- Receive certain data in a portable format;
- Withdraw consent where processing is based on consent;
- Lodge a complaint with a competent data protection supervisory authority.
These rights may be subject to exceptions under applicable law.
To exercise a privacy right, email:
contact.repositorygames@gmail.com
Please include your Discord user ID where possible so that we can identify the relevant game data.
You can find your Discord user ID by enabling Developer Mode in Discord and using the “Copy User ID” option on your profile.
We may ask for additional information where reasonably necessary to verify your identity before fulfilling a request.
Where the GDPR applies, we will normally respond within one month, subject to any permitted extension for complex or numerous requests.
13. Deleting your data
You may request deletion of personal data associated with your Repository Games account by emailing:
contact.repositorygames@gmail.com
Please include your Discord user ID.
Deletion may result in permanent loss of:
- game progress;
- streaks;
- statistics;
- badges;
- achievements;
- inventories;
- settings;
- unlocked free rewards;
- other stored game progress.
Certain information may need to be retained where required by law or where reasonably necessary for purposes such as financial record keeping, fraud prevention, dispute resolution, or enforcing legal rights.
Deleting Repository Games data does not delete your Discord account or information controlled independently by Discord.
14. Children’s privacy
Our Services are not specifically directed at young children.
Repository Games Discord Activities require access through Discord and are intended for users who meet Discord’s applicable minimum-age requirements.
We do not knowingly seek to collect personal data from anyone who is not legally permitted to use the relevant Service.
If you believe that personal data relating to a child has been provided to us in circumstances where it should not have been collected, contact us at:
contact.repositorygames@gmail.com
We will review the request and take appropriate action.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time as:
- our games change;
- new Services are released;
- new features are introduced;
- our infrastructure changes;
- legal or regulatory requirements change.
When we update the policy, we will change the “Last updated” date above.
Where required by law, we will provide additional notice before material changes take effect.
16. Contact us
For questions, concerns, or privacy requests, contact:
Repository Games
Email: contact.repositorygames@gmail.com