The short version
You can play every game completely without an account, and nothing you do leaves your device. Signing in is optional and does exactly one thing: it puts a name next to your score on the daily leaderboard. If you sign in we store an anonymous Google account identifier and a display name. We never ask for or receive your email address. You can delete everything from inside the game at any time, and it is gone immediately.
Who is responsible
These games are made and run by Victor Saly, an individual developer based in London, United Kingdom, who is the data controller for the purposes of UK and EU data protection law. You can reach me at info@victorsaly.com about anything on this page, including a request to see or delete your data.
Playing without signing in
The games keep your progress, high scores, averages, win rates, streaks and display preferences in your own browser's local storage. This stays on your device, is used only to make the games work between visits, and is never transmitted anywhere. No account is required to play anything.
You can clear it at any time through your browser's site-data or local-storage settings.
If you sign in to the leaderboard
Signing in uses Google. We request only the openid and profile
scopes, which give us an opaque account identifier and a basic profile name. We do not request
the email scope, so we never receive your email address, and we request nothing
that would let us read anything else in your Google account.
What is stored on our server:
| Data | Why |
|---|---|
| An opaque Google account identifier | To recognise you as the same player next time you sign in. |
| A display name | Shown next to your score. It starts as your Google first name and you can change it to anything. |
| Your scores | The score, whether you finished the board, how many turns it took, which daily board it was, and a record of the moves you played. |
The record of moves exists so that a submitted score can be checked against the board it claims to come from. It is what keeps invented scores off the leaderboard, and it contains nothing about you — only which tiles were played.
We do not store your email address, your Google profile picture, or any Google access or refresh token. We do not use advertising, we do not sell or share data with anyone, and there are no third-party tracking cookies.
What is public
Your display name and your scores appear on the leaderboard, which anyone can open. Nothing else about you is shown. Please do not choose a display name you would rather strangers did not see — you can change it at any time from the leaderboard.
Deleting your data
Open the leaderboard inside any game and choose Delete my data. This immediately and permanently removes your account record and every score you have posted. There is no waiting period, no soft delete, and no copy kept.
Signing out instead simply ends the session and leaves your scores in place.
Legal basis, retention and transfers
Where UK or EU data protection law applies, the basis for storing your display name and scores is your consent, given by choosing to sign in and withdrawn by deleting your data. Scores are kept until you delete them, because a leaderboard that forgets is not a leaderboard. You have the right to access, correct, export or erase your data, and to complain to the UK Information Commissioner's Office.
The leaderboard runs on Cloudflare Workers and Cloudflare D1, and data may be processed on Cloudflare's global network, including outside the UK and EEA, under Cloudflare's own data protection terms.
Children
The games are suitable for all ages and can be played in full without an account. Signing in requires a Google account, and Google applies its own minimum age requirements. We do not knowingly collect data from children below the age of digital consent in their country; if you believe a child has signed in, email me and I will delete the record.
Other services involved
- GitHub Pages hosts the game sites.
- Cloudflare hosts this site and runs the leaderboard.
- Google handles sign-in, under its own privacy policy.
Each may process limited technical information such as IP address and request logs in order to deliver the service. The games themselves load no third-party scripts at runtime — signing in works by sending your browser to Google and back, not by embedding Google's code in the page.
Changes
If these games begin using analytics, advertising, or anything else that processes personal information, this page will be updated before that change takes effect.