Privacy
The short version
No account, no email address, no tracking analytics. No signup, no advertising trackers, no tracking cookies. We keep an anonymous daily tally that identifies no one. Our host also keeps short-lived per-IP request counters to rate-limit the game's server, and two short-lived records exist for rate limiting. All are described below.
What we do collect
We store no email addresses and no account data. The game runs in your browser. The daily tally stores no identifier, and the game sends none with it: when you finish a daily it counts two things only, the day, and whether this device played a daily the previous day.
Two short-lived records exist for rate limiting, and both expire within 24 hours:
- a keyed hash (not the address itself) of any address entered in the license-recovery form, and
- the payment ID of any refund request.
Our host, Cloudflare, also keeps per-IP request counters for about a minute, to rate-limit requests to the game's server.
The game keeps a few things in your browser's own storage so it can check your license without our server and remember your progress: your license, whether you have seen the how-to-play, each day's first daily result, and (only if you type one) the name used on race links; and, if you have the full game, your last 50 finished runs and your badges. The free game stores nothing new for its history: it shows the daily results already kept above. This is never sent to us, with two exceptions: a refund request sends the license you are refunding, and the daily tally sends whether yesterday's record exists. Your result and the name leave your device only in what you choose to share.
Who else processes data
- Stripe takes payment and is the seller of record for the purchase. It holds the purchase record, including your email. Stripe's privacy policy applies.
- Resend sends the license email and recovery emails, so it receives the address it sends to.
- Our host, Cloudflare, keeps standard request logs for security for up to 7 days. These contain no email addresses or license text. The one exception: after a purchase, the page address briefly carries a checkout session id, which can appear in those logs; it stops working for license delivery after 7 days.
Your license email
We do not hold your email address. Stripe holds it, as the record of the transaction, and we use it for three things only:
- sending your license after you buy,
- resending it if you lose it, and
- checking that the email you enter with a refund request matches the purchase.
Recovery works by looking up the purchase in Stripe and emailing the license to the address on that record. The license is never displayed on screen, and the response is identical whether or not a purchase exists — so the form cannot be used to discover who has bought the game.
Children
We collect nothing about children beyond what is described above. There is no account, no chat, no user-generated content and no tracking analytics of any kind.
Your rights
We hold no email addresses and no account data, so there is nothing for us to show, correct or delete on our side. Two short-lived, pseudonymous records exist — the 24-hour keyed hash and the refund payment ID — and both expire on their own. The record of your purchase is Stripe's; to have it removed, use Stripe's own privacy request process.
This page describes the game as built. If a feature is added that changes any of the above, this page changes with it.