Privacy

Who runs RTHR

RTHR at www.rthr.to is operated by Huilata Oy, Finland, the controller of the personal data described here. Its registered address is listed in the Finnish Trade Register (YTJ).

Playing without an account

You do not need an account. The web game does not ask for your name or email address.

Your browser stores a random visitor identifier in localStorage under rthr_visitor_id and a list of answered question identifiers under rthr_answered_ids. These let us associate your votes with the same visitor and avoid repeating questions.

We store votes in a hosted database provider, Neon, linked through that random visitor identifier. Votes are used to calculate crowd percentages. The identifier is pseudonymous: it is not your name, but it can connect your votes.

Clearing browser storage removes the identifier and question history from that browser. It does not delete votes already stored in our database. Save your visitor identifier before clearing storage if you want to request deletion.

Analytics and cookies

RTHR does not use analytics or advertising cookies at the moment, so there is no cookie banner.

Hosting, security, and sharing

Vercel hosts the site. To limit abuse, we use your IP address in rate-limit counters that expire after one minute, kept in memory or, when configured, in an Upstash Redis service. We do not store your IP address with your votes. Security events, such as exceeding a rate limit, can include an IP address in server logs.

Share and challenge links encode question identifiers and A/B picks. They do not include your visitor identifier, name, or email. Anyone with a link can see the picks it shares.

We do not promise that all hosting or database processing takes place in the EU.

How long we keep data

Votes do not expire automatically. They stay in our database, linked to the visitor identifier, until you ask us to delete them.

The visitor identifier and the answered-question list stay in your browser until you clear this site’s data.

Your data requests

For access to or deletion of your votes, write to Huilata Oy at its registered address with your visitor identifier and what you would like us to do.

Open this page in the browser where you played to see that browser’s identifier. Without it, we may be unable to locate your votes.

Under the GDPR, you may request access, correction, deletion, restriction of processing, or a portable copy of your personal data, and object to processing where those rights apply.

You can complain to the Finnish Data Protection Ombudsman at tietosuoja.fi. The European Data Protection Board explains these rights.