Privacy

• If you create an account — a username, an email address, and your password after it has been hashed. The password itself is never stored and cannot be recovered from what is.
• When you play — the challenge, the bracket size, which contender won each duel, and how long the run took. A run made while signed out is recorded as “Guest” and is not connected to any person.
• Anything you publish — the challenges, contenders, images and comments you create, along with the username attached to them.
• Your IP address, briefly — only on the sign-in, sign-up and password-reset endpoints, and only so the same address cannot try thousands of passwords. These records are deleted after an hour.

There is no tracking of what you read, no profile built from your picks, and nothing is sold to anyone.

• A session cookie, set only when you sign in. It holds a random token, is marked httpOnly so scripts cannot read it, and expires on its own. Signing out deletes it. Without it there is no way to stay signed in, so it cannot be turned off separately.
• Advertising cookies, described below, if you see ads on the site.

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this site or other sites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to LikeMore and other sites on the internet.

You can opt out of personalised advertising by visiting Google Ads Settings, or opt out of a third-party vendor’s use of cookies for personalised advertising at aboutads.info.

Running a website means other companies handle parts of it. These are all of them:

• Vercel — hosts the site and serves every page. Its analytics count page views and measure loading speed; they set no cookies and do not follow anyone between sites.
• Neon — the database, in the United States. Accounts, challenges and plays live here.
• Cloudflare R2 — stores the images.
• Resend — sends the password-reset email, and nothing else. There is no mailing list.
• Google — serves the advertising described above.

• Account details, until you ask for the account to be deleted.
• Plays and published challenges, until they are deleted.
• Sign-in records used for rate limiting, one hour.
• Password-reset links, one hour, and they stop working once used.

Write to contact@whatdoyoulikemore.com and you can have a copy of what is held about your account, have it corrected, or have the account and everything published under it deleted. Say which account you mean from the address it was registered with.

LikeMore is not directed at children under 13 and accounts are not knowingly created for them. If you believe a child has created one, write to contact@whatdoyoulikemore.com and it will be removed.

If this page changes in a way that matters, the date at the top changes with it. Questions go to contact@whatdoyoulikemore.com.