Privacy & anonymous play

You can play without an account. Anonymous play uses a pseudonymous browser identity, not a verified real-world identity.

What we record

First-party, HttpOnly cookies keep your guest session and browser identifier. To protect score integrity and understand visits, we store a hashed browser signal built from basic browser, language, timezone and rounded screen settings. We do not probe canvas, audio or installed fonts, and we use no third-party fingerprinting service.

Cloudflare supplies approximate country, region and network ASN. Referral hostname, campaign labels, browser/OS family and visit time help us understand where players arrive from. We do not retain raw IP addresses, full referrer URLs, precise coordinates or the raw fingerprint input in the visitor database. Client-reported signals can be incomplete or changed and are not proof of identity or location.

Scores and retention

Game actions are checked on the server before scores qualify for the leaderboard. Public rankings show your display name, guest/account status and game result, not your browser identifiers or visit details. Detailed visitor records are retained for up to 90 days and then removed by daily cleanup. Scores and their country classification may remain.

Guest sessions last up to 30 days, browser cookies up to 90 days, and visit cookies 30 minutes. Clearing this website’s cookies starts a new guest identity. Fingerprints are never used to recover a cleared guest account or sign you in.

Google Analytics

We use Google Analytics 4 to measure visits and website usage. It runs automatically when the site loads, without a consent dialog. Google receives page addresses, referral information, usage events, browser and device information, and approximate location. Analytics cookies and browser identifiers help distinguish visits and sessions.

We do not add account passwords, our browser fingerprint hashes or private visitor records to Google Analytics events. The 90-day visitor-record retention described above applies to our own database; Google Analytics data is managed separately through its property settings. See Google’s Privacy Policy for how Google processes this information.

Website screenshots

Only public webpages are captured. The game destroys a saved visual copy; it cannot modify the original site. Captures expire according to their displayed availability and are removed by automatic cleanup.