Privacy

This page is a draft for the owner's review before publishing. It describes what the game does today, and it is not the final privacy policy.

Draft, not yet final

Three things still need the owner to confirm them before this page is final: whether the hosting keeps access logs with IP addresses, which contact channel to publish, and any analytics added to this website.

What stays on your device?

Almost everything. Your saves are kept in your browser's local storage on your own device.

  • Progress and level
  • Coins and boosters
  • Badges and your garden
  • Settings
  • A random device ID, made on first play
  • The optional display name you typed

There is no account, no sign-in and no email address. The random device ID is a random UUID. It is not tied to your name, email or phone.

What leaves your device, and when?

Only what the daily leaderboard needs, and only when you use it.

  • Posting a daily time sends the random device ID, the display name you typed (or "Anonymous"), your clear time in milliseconds, and the list of moves you made. The display name can be up to 20 characters.
  • Opening the leaderboard sends the random device ID, so the server can show your own rank.
  • Starting the daily asks the server for today's board.

Tray mode games and the rest of the game stay on your device and are never sent.

What does the leaderboard server store?

For each posted run it stores the device ID, display name, time, number of matches, the time it was posted, a fingerprint (hash) of the move list, and the score the server worked out.

The stored record has no IP address field.

Are there ads, trackers or outside scripts?

No. The web game loads no outside scripts: no ad networks, no analytics, no tracking pixels and no web fonts from other sites.

No ad network is connected, and the web build shows no ads of any kind. Analytics are not yet enabled on this website, and this page must be updated before any are added.

Is the connection secure?

Not yet. Connections to the leaderboard use plain HTTP, not HTTPS, today.

The leaderboard server runs on a development server and stores its entries in simple daily files. It is a prototype setup, not production hosting.

What still needs confirming?

  • Server access logs. The leaderboard's stored record has no IP address field, but the hosting layer may keep access logs that record IP addresses. That has not been checked yet and needs confirming.
  • A contact channel. One is not yet set up, so no contact details are given here.
  • Website analytics. They are not yet enabled, and this page must be updated before any are added.