Privacy Policy.

Two5 (“Two5”, “we”, “us”) is a short-round challenge product for numbers, logic, and related thinking games. This Privacy Policy covers two5.in and related early-access surfaces we operate.

Questions about privacy go to hello@mentr.in.

This policy applies when you visit the site, join the waitlist, verify an account with a one-time code, play challenges, or contact us. If we launch new arenas (daily problems, friend challenges, or paid features), we will update this page and the effective date above.

We collect only what we need to run early access and the game loop.

• Account and waitlist details: name, email address, and age you provide.
• Authentication data: one-time passcodes (stored as a secure hash), send and attempt limits, and account ID.
• Session data: a signed session cookie so you stay signed in after verification.
• Gameplay data: challenge choices, scores, completion status, and similar progress signals as features open.
• Technical data: device/browser type, approximate location from IP, pages viewed, and diagnostic logs needed to keep the service reliable.
• Communications: messages you send us, and product updates you opt into by joining the waitlist.

We use your information to:

• Create and secure your Two5 account, including email OTP verification.
• Send waitlist, launch, and early-access updates you asked for.
• Run challenges, save scores, and show progress as those features ship.
• Prevent abuse (rate limits, failed-code locks, fraud and spam checks).
• Understand product performance with first-party analytics events (for example page views and waitlist funnel steps).
• Comply with law and enforce our Terms.

Where a privacy law requires a legal basis (including GDPR-style rules), we rely on: performance of a contract (running your account and the game); legitimate interests (security, product improvement, non-intrusive analytics); consent (optional marketing emails where required); and legal obligation when the law asks us to retain or disclose information.

We do not sell personal information. We may share data with:

• Infrastructure providers that host our database, email delivery, and website (acting on our instructions).
• Analytics or error tools we enable later, only as needed to operate Two5.
• Authorities when required by law, or to protect players, Two5, or others from harm or abuse.
• A successor entity if Two5 is involved in a merger, acquisition, or asset transfer, with notice where required.

We use a session cookie to keep you signed in after OTP verification, plus essential cookies needed for security and basic site function. See our Cookie Policy for the full list and choices.

Waitlist and account records are kept while your account is active and for a reasonable period afterward so we can provide support, prevent abuse, and meet legal duties. OTP codes expire quickly (minutes). Session cookies last up to about 30 days unless you sign out or clear them. You can ask us to delete your account data as described below.

We use industry-standard measures such as hashed one-time codes, signed session tokens, transport encryption (HTTPS), and access controls on production systems. No online service is perfectly secure; protect your email inbox, since that is how we verify you today.

Two5 is not directed at children under 13. You must meet the minimum age in our Terms to create an account. We do not knowingly collect personal information from children under 13. If you believe a child provided data, contact us and we will delete it.

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, object to or restrict certain processing, and withdraw consent where processing is based on consent. To exercise these rights, email us from the address on your account. We may need to verify it is you.

If you are in the EEA/UK, you may also lodge a complaint with your local supervisory authority. If you are in India, you may have rights under applicable Indian data protection law as it comes into force.

Two5 may be hosted or supported using providers in India and other countries. When we transfer personal information internationally, we use appropriate safeguards required by applicable law.

We may update this Privacy Policy as Two5 grows (new arenas, payments, or social features). We will change the “Last updated” date and, for material changes, provide additional notice on the site or by email when appropriate.

Privacy requests: hello@mentr.in. Website: https://www.two5.in.