Legal
Last updated: 2026
We are committed to data minimisation. You can play without an account. If you create one with email, we store your email, username and a password hash — never the password itself. If you continue with Google, we store Google’s user id, the verified email and a display name. We never store your raw IP address — it is hashed with a daily rotating salt purely for abuse prevention.
We count plays and unique players using privacy-preserving techniques (HyperLogLog) that do not identify individuals. We also use Google Analytics 4; with Consent Mode v2, analytics cookies are set only after you opt in via the consent banner. Declining keeps measurement cookieless.
We use Google advertising services. With Consent Mode v2, no personalised advertising cookies are set until you opt in via our consent banner. Declining keeps ads non-personalised.
If you create an account we store your email, username, a password hash (email sign-in) or Google account id (Google Sign-In), saved games and session tokens. Google Sign-In receives your Google user id, verified email and name. An unverified password account for that email is claimed (password cleared, other sessions signed out) so a squatted address cannot share the account; a verified email account can keep both Google and password. Google-only accounts have no password until you set one. You can change your password, sign out other devices, or permanently delete the account from the account page. Deletion removes that row and cascaded sessions, ratings and saved games. Play counts stay aggregated and anonymous.
You can change your consent at any time, clear cookies from your browser, and — if you have an account — change your password or delete the account from your account page. See our cookie policy for cookie details.