Every score is computed on encrypted data — the server holds no key and never sees a
location or a score. Below is the real traffic it handles: encrypted queries arriving,
getting computed on, and leaving, all as ciphertext.
⚙
Computing over ciphertext…
homomorphic PRF
0.0s
A normal leaderboard receives
locationyour GPS position
scoreyour real score
in the clear — that server sees everything
rngeo receives
location🔒 waiting…
score🔒 encrypted
ciphertext only — the server has no key
📍 location + time → SHA-256 → 256 encrypted bits → uploadthis all happens on your phone; only the ciphertext is ever sent