Summary
- No registration, deposit, payment information, or real-money betting data is collected.
- No third-party analytics, advertising cookies, or AdSense code are currently active.
- A display name is stored in your browser only if you enter one.
- The server keeps a top-10 leaderboard and privacy-preserving visit totals.
Who operates the data processing
Third Base is an independently maintained educational project. The public contact channel and repository are listed on the Contact page. Because that channel is public, never post sensitive personal data there.
Data stored in your browser
Display-name preference
If you type a leaderboard display name, the trainer saves it in browser localStorage under the key thirdbase-player-name. It remains on that device until you clear site data or change the value. It is not sent to the server unless a streak is submitted.
Private statistics access
The non-indexed administrator statistics page temporarily stores its unlock code in sessionStorage. It is removed when the browser session ends or when the page locks. This code is for site administration and is not part of the public trainer.
Cookies
The public site currently sets no first-party cookies and loads no third-party advertising or analytics scripts. Browser storage described above is not used for cross-site tracking.
Data processed by the server
Visit measurement
When the trainer opens, it sends one first-party pageview request. The server briefly receives the IP address and user-agent string supplied with any web request. It combines them with a secret using HMAC-SHA256 and stores only a shortened pseudonymous identifier for unique-count estimation. The raw IP and user-agent are not written to the visit statistics file.
Pseudonymous visit identifiers are removed after the rolling 30-day window. Daily aggregate view and unique-visitor counts may be retained to understand long-term usage.
Leaderboard
If a player submits a qualifying streak, the server processes the chosen display name, streak length, and submission date. Only the ten highest entries are retained in the active leaderboard. Display names are public and should never contain a legal name or other personal information.
Security and access logs
The web server records ordinary access-log information such as IP address, time, requested path, response status, referrer, and browser user agent for operational security and troubleshooting. Logs rotate daily and the current server configuration retains up to 14 rotations. Short-lived in-memory IP counters are also used to rate-limit score, visit, and administrator requests.
Purposes and legal basis
The site processes limited technical data to deliver requested pages, protect the service, prevent abuse, maintain aggregate visit counts, and operate the optional leaderboard. These purposes are based on operating a secure service and the user’s voluntary request to submit a public score. Where future technology requires consent, it will not be activated until an appropriate consent mechanism and updated notice are available.
Your choices and requests
- Use the trainer without entering a display name.
- Clear the saved name through your browser’s site-data settings.
- Do not submit a leaderboard result.
- Request correction or removal through the process on the Contact page.
Applicable data-protection law may provide access, correction, deletion, restriction, objection, or complaint rights. A request may require proportionate information to identify the relevant entry without collecting unnecessary identity documents.
Advertising and future changes
AdSense and a consent management platform are not currently active. Before advertising or third-party analytics are enabled, this policy will be updated to identify the providers, storage, purposes, choices, and applicable retention. Material changes will receive a new effective date.