Privacy

What is stored, and how to delete it.

The short version

You can play everything here without an account, without an email address, and without telling us who you are. A random identifier is kept in your browser so the feed can stop showing you the same games; that identifier is not linked to a name or an address unless you choose to create an account.

What is stored when you play

  • A random identifier for your browser, generated on your first visit. It is not derived from anything about you or your device.
  • Which games you played, for how long, the score, and how far you got.
  • Which games you liked, saved, shared or reported.
  • Which games you have been shown, so the feed can move on to ones you have not.
  • Your language, and whether you asked for reduced motion or muted sound, the settings the site needs in order to behave the way you asked.

This is what ranking runs on. A game that people finish and replay rises; one that people swipe past falls. There is no other use for it.

What is not stored

  • No IP addresses. Rate limiting needs to tell requests apart, so an address is passed through a one-way hash with a secret and only the hash is kept, it cannot be turned back into an address.
  • No advertising or cross-site tracking, and no third-party trackers by default.
  • No location, no contacts, no device fingerprinting.
  • Nothing at all if you never load the site, there is no email or off-site tracking.

The games cannot see you

Every game runs inside a sandboxed frame with its own opaque origin and a policy that blocks all network access. That is not a promise about how the games behave, it is enforced by the browser. A game cannot read your identifier, cannot reach this site's storage or cookies, and cannot send anything anywhere. It can only report a score back to the page.

If you create an account

An account stores a handle, a hashed password, and a hashed recovery code. An email address is optional and only used to send a password reset if you ask for one. Passwords and recovery codes are stored as hashes, so a copy of the database is not a list of working logins.

How long it is kept

Individual activity records are deleted automatically after 100 days. What survives is the aggregate, how many people played a game, how many finished it — which is not tied to any one person. Likes, saves and your account, if you made one, stay until you remove them.

Deleting it

There is a button. Not an address to write to and wait, the account page will show you everything held against your browser as a file you can download, and delete all of it on the spot. Deletion cascades: plays, likes, saves, sessions and events go with it.

If you joined the waitlist, /unsubscribe removes your address from it.

Who else sees it

The site runs on hosting and a database provider, which is what makes it possible for them to serve you a page at all. Nothing is sold, and nothing is shared for advertising.

This page describes what the software does with data. It is not a legal notice and does not identify an operating entity, so it is not a substitute for one where local law requires that, which it does in many places once a service takes payment or operates at scale.

Back to the feed