// Privacy Policy

Last updated: 25 February 2026

privacy.md

Who we are

2am Digital Ltd is a company registered in Scotland. Our registered address is in Edinburgh. When we say "we", "us", or "our" in this policy, we mean 2am Digital Ltd.

What data we collect

We keep things minimal. Here's what we collect and why:

Mailing list

If you subscribe to our mailing list, we store your email address and the date you signed up. That's it. We use it to send you occasional product updates. We don't sell or share your email with anyone.

Anonymous authentication

Our game (Lunch or Die) uses Firebase Anonymous Authentication to track your game progress across sessions. This creates a random identifier — it is not linked to your name, email, or any personal information unless you choose to provide your email for rewards.

Game progress

If you play Lunch or Die, we store your level, score, and reward history. This is linked to your anonymous session ID or your email if you provide one to claim rewards.

localStorage

We use your browser's localStorage to remember your theme preference and cookie consent. This data stays on your device and is never sent to our servers.

Cookies

We use essential cookies for Firebase Authentication session management. We do not use advertising or tracking cookies. Firebase may set its own cookies as part of its authentication service.

Legal basis for processing (UK GDPR)

We process your data under the following bases:

  • > Consent — mailing list subscription, cookie acceptance
  • > Legitimate interest — anonymous game progress, site functionality

How long we keep your data

  • > Mailing list emails — until you unsubscribe
  • > Game progress — until you request deletion or the service is discontinued
  • > Anonymous session IDs — automatically expire after extended inactivity

Your rights

Under UK GDPR, you have the right to:

  • > Access your personal data
  • > Correct inaccurate data
  • > Request deletion of your data
  • > Withdraw consent at any time
  • > Lodge a complaint with the ICO (ico.org.uk)

Third-party services

We use the following third-party services:

  • > Google Firebase — authentication, database, hosting (Google's privacy policy applies)

Contact

For any privacy-related questions or data requests, email us at hello@2am.digital.