Privacy Policy

Game records and browser storage

Playing does not require an account. If you submit a score, the site receives your nickname, completion time, difficulty, number of reveal moves, and a random player identifier stored in your browser. The server stores a one-way HMAC hash of that identifier so it can keep your best result; it does not store the original identifier.

Your browser stores local best times, the anonymous player key, and display preferences in local storage. Essential PHP sessions help protect score submissions from cross-site requests. The site loads the Outfit typeface from Google Fonts, which receives a standard font request when a page loads. This version does not include analytics or advertising tags.

Server and country information

The hosting provider may process standard server logs, such as IP address, request time, and browser information, to deliver the site and investigate abuse. The game database does not store your IP address. When Cloudflare supplies a valid two-letter country code with a submitted leaderboard result, that code is saved with the score so its flag can be shown. The game database does not store a more precise location.

Leaderboard nicknames and times are public. Use a nickname that does not reveal your real name, email address, or other private information.

Retention and requests

Leaderboard records are retained until they expire from a time-period board or are removed after a verified request. Browser storage can be cleared in your browser settings. Use the contact page to ask about a public record or privacy request.

To ask about or request removal of a public leaderboard entry, use the contact page and include the nickname, difficulty, and approximate date. These details help identify the right score without asking for account credentials.

Sharing a daily result

The Share result control appears after a daily win and works only when you press it. Your browser opens its built-in share sheet or copies the result text and challenge link to the clipboard. The site does not receive your chosen destination or keep a share history; the app you select handles the content under its own policy.