Privacy
The short version. Your camera never leaves your device — the game reads your hand shape locally, in your browser, and no video is ever uploaded to us. We only collect personal details if you choose to put your name on the leaderboard, and even then we store your phone number as an irreversible scrambled value rather than the number itself. The game is free to play and we never sell your information.
This notice explains how the OPEN SEASON browser game at openseason.online handles information. The game is a promotional experience for the Weston Estate single “Moth to a Flame.”
Weston Estate is a Sony Music artist. Where Sony Music acts as the controller of your information, the Sony Music Privacy Policy also applies, and in the event of a conflict about information Sony Music controls, that policy governs. This page describes what happens on this specific website.
1. Your camera
The game uses your webcam so that pointing your hand becomes the aiming control. This is the part people care most about, so plainly:
- Video is processed entirely on your own device. Camera frames are read in your browser by an on-device hand-tracking model (Google MediaPipe, which we serve from our own site rather than a third party). Frames are analysed and immediately discarded.
- No camera video, image, or hand data is ever transmitted to us or to anyone else. We operate no server that receives video, and the game makes no network request containing it.
- We do not record, store, or retain any video, and we do not use your camera for identification. The model measures the position of hand points to work out where you are pointing. It does not recognise faces, and nothing derived from your camera is saved to our systems.
- Your browser asks for camera permission before any of this happens, and only after you tap to begin. You can decline, and you can revoke the permission at any time in your browser settings. Declining means the game cannot work, because your hand is the controller.
Highlight clips
After a round you can save or share a short highlight clip. Two things you should know: the clip is recorded from the game screen, and the game screen includes the small webcam window shown while you play, so your camera image appears in the clip. The clip is created and stored on your own device. It is never uploaded to us. It only goes anywhere if you choose to share or save it, and then it goes wherever you send it.
2. If you join the leaderboard
Playing the game requires no account and no personal details. If you choose to put a name on the board, you give us a handle and either a phone number or an email address, and you tick a box to opt in to messages. We then hold:
| What | Why | How it is stored |
|---|---|---|
| Your handle | To show your name on the leaderboard | As you typed it |
| Your phone number | To recognise you if you come back, and to send you the messages you asked for | Never stored as your actual number. We keep only a scrambled (salted, one-way hashed) value that cannot be turned back into your number. Your number itself is passed to our messaging provider and not retained by us. |
| Your email address | Same as above, if email is the channel you pick | Stored as entered, only when you choose email |
| Your opt-in | To record that you consented, and when | A timestamped record |
| Round results | Scores, leaderboard, and anti-cheat sanity checks | Score, accuracy, whether you downed the intruder, and the time |
Your handle may be publicly visible on the leaderboard. Nothing else you give us is shown publicly.
3. Messages you opt in to
If you tick the opt-in box, your contact details are sent to Laylo, the messaging platform Weston Estate uses, so the artist can message you about releases and shows. Consent is not a condition of playing the game. Message frequency varies, and message and data rates may apply. You can stop SMS at any time by replying STOP, or get help by replying HELP; email messages carry an unsubscribe link. Laylo handles that information under its own privacy policy and terms.
4. Music players on the page
To listen to the song, the page loads official players from Spotify and Apple Music. These are run by those companies, not by us. When they load, and especially if you sign in or press play, they may set cookies and collect information about your listening under their own policies — see Spotify’s privacy policy and Apple’s privacy policy. We do not receive your Spotify or Apple account details. If you sign in to Apple Music on the page, that session is held by Apple’s software in your browser, not by us. We can see only whether a player on our page started playing, so the game knows to continue.
5. Stored on your device
The game keeps a few things in your browser’s local storage so it works and remembers you. These stay on your device, are not tracking cookies, and are not used for advertising:
- Your best score.
- Your aim calibration, so you do not have to sight in every visit.
- If you joined the leaderboard, a sign-in token so you are not asked to join again (it expires after about 30 days).
- A gameplay diagnostics log, only if you deliberately switch it on. It is off by default, stays on your device, and is never sent to us automatically.
Clearing your browser’s site data for openseason.online removes all of it.
6. Who handles information for us
- Fly.io — hosts the website. Like any web host, it processes standard request data such as IP addresses to serve pages and keep the service secure.
- Supabase — hosts the database and the small server functions behind the leaderboard.
- Laylo — sends the messages you opted in to.
- Spotify and Apple — provide the music players described above.
We do not sell or share your personal information, and we do not use it for cross-site behavioural advertising.
7. How long we keep things
Leaderboard entries and round results are kept while the campaign is running. If you ask us to delete your entry, we will. Messaging preferences are kept by Laylo until you opt out.
8. Your choices and rights
You can play without giving us anything. If you have joined the leaderboard, you can ask us to see, correct, or delete what we hold, and you can withdraw your messaging consent at any time. Depending on where you live — including California, other US states with privacy laws, the UK, and the EEA — you may have additional rights, such as the right to access, delete, or object to certain processing, and the right not to be discriminated against for exercising them. To make a request about this website, contact us at the address below. For requests about information Sony Music controls, use the contact routes in the Sony Music Privacy Policy.
9. Children
This game is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.
10. Changes
If we change how the game handles information, we will update this page and change the effective date at the top.
11. Contact
Questions or requests about this website: CONTACT_EMAIL_TBD.