Privacy
What we keep.
What we don’t.
Last updated September 23, 2026
The short version. You can play without an account. If you sign in with Google, we keep your email address and your saved progress, and you can delete both from inside the game at any time. We don’t ask for your name, we don’t sell anything, and there are no ads or ad trackers.
Playing as a guest
Guest progress is saved only in your own browser. It never leaves your device, and clearing your browser data erases it.
Before the game loads, a Cloudflare Turnstile check confirms you’re a person, not a bot. Cloudflare sees your browser and network details while it checks. Once you pass, we set one cookie that lets you into the game for a week. That cookie doesn’t identify you.
Signing in with Google
Signing in is optional and lets your progress follow you between devices. When you sign in, we store:
- The email address and account ID that Google shares with us
- Your saved game (where you are, what you’ve found, what you’re wearing), up to 4 KB
We don’t receive your Google password, contacts or anything else from your Google account. There’s no public profile, no custom display name and no chat.
Deleting your account: open Account & saves in the game and choose Delete account. That removes your account, your email address and your cloud save straight away.
Players under 13
The game asks for an age group before offering sign-in. The answer stays in that browser tab and is never sent to us. Players under 13 can play as guests but can’t create an account, and any feedback they send contains no free text.
Feedback you send
If you use Send feedback in the game, we store what you choose to send: a category, your message (with email addresses and phone numbers removed automatically), an optional screenshot, and details that help us reproduce a problem, such as the game version, where you were standing, your screen size and your last few in-game actions. Each report carries a scrambled device code so we can tell reports from the same device apart; it can’t be traced back to you. If you’re signed in, the report doesn’t include your email address.
The rest of the website
The public pages use Vercel Web Analytics to count page views. It doesn’t use cookies or track you across other sites. The game itself sends no analytics.
Who handles the data
- Vercel hosts the site.
- Supabase stores accounts, cloud saves and feedback.
- Google handles sign-in, if you use it.
- Cloudflare runs the bot check.
Each of these runs standard server logs, such as IP addresses and request times, under its own privacy policy.
Changes
If this page changes, the date at the top will change with it. We won’t start collecting something new without updating this page first.