Privacy Policy

First&One is designed to minimize personal data collection. This policy describes what we process today and how that may change if accounts are added.

1. Data we process

• Technical logs: IP address, user agent, and request path may appear in hosting provider logs (Vercel) for security, rate limiting, and debugging. Retained per provider defaults (typically days to weeks).
• Local storage: Six Degrees streaks, preferences, and similar state may be stored in your browser only. We do not receive that data on our servers unless a future sync feature is added.
• No account system today: We do not collect names, emails, or passwords unless you contact us directly.

2. Cookies and analytics

We do not run third-party advertising cookies. Hosting may set operational cookies. If analytics are added later, this policy will be updated and consent mechanisms applied where required.

3. Sharing

We do not sell personal data. Processors (e.g. Vercel for hosting, Cloudflare for DNS) process technical data under their terms as needed to operate the Site.

4. Retention and deletion

Server logs follow host retention. Browser data can be cleared by you at any time via browser settings. For deletion requests related to correspondence, email the contact on the Disclaimer page.

5. Children

The Site is not directed at children under 13. We do not knowingly collect personal information from children.

6. International users

The Site may be hosted in the United States. By using it, you understand technical data may be processed in the US.

7. Changes

Material changes will be reflected by updating the date on this page.