Privacy Notice

This page is a practical V1 privacy notice and should be reviewed for the laws that apply to your final business and audience before launch.

Data we store

We store a player ID, display name, game attempts, scores, puzzle interactions and—only when you create an account—your email address and a securely hashed password. We do not need your real name to play.

Why we use it

The data is used to save progress, calculate rankings, show your game history, operate leaderboards, detect basic result integrity issues and improve puzzle difficulty and content.

Guest players

Guests receive a random browser token so progress can be recognized on the same browser. Creating an account converts that guest progress into account-linked progress.

YouTube

Video Challenge pages contain an official embedded YouTube player. YouTube/Google may process data when the player loads or when you interact with it under their own policies.

Security

Passwords are stored using PHP password hashing. Database queries use prepared statements. Administrator access is separated by role.

Retention and deletion

Before public launch, configure a support/contact route for deletion and privacy requests according to the countries you serve. Game statistics may be retained in pseudonymous form after account data is removed when legally permitted.