Privacy Policy

We store limited game data such as run progress, scores, entry-page attribution, and an optional leaderboard nickname. No personal account is required to play.

New game writes do not store a raw IP address in the live application tables. For rate limiting and leaderboard abuse controls, the Worker converts the network address into a secret-keyed HMAC identifier before a game-database write. That value describes a network identifier, not a person or device. Minute rate-limit rows become eligible for removal after two hours, and HMAC identifiers in game-run and leaderboard rows become eligible after 30 days; the Worker clears eligible rows on subsequent game-database activity.

Legacy raw values were scrubbed from the live tables during the HMAC cutover. Cloudflare D1 Time Travel is an always-on recovery system, so pre-cutover database states can remain recoverable for Cloudflare's plan-dependent recovery window (currently up to 7 days on Free or 30 days on Paid). Any restore must repeat the live-table scrub before game writes reopen. Cloudflare may also process standard network information to deliver and secure the service under its own infrastructure policies.

We use Google Analytics 4 to understand aggregate sessions, traffic sources, devices, entry pages, and game events. GA analytics identifiers are not joined to game-database network identifiers at an individual level.