Privacy
Last updated 8 September 2026
The short version
A child can play every game here without giving us an email address, a real name, a birthday, or anything else that identifies them. Press Play, pick a nickname if you feel like it, and that is the whole sign-up. What we keep is a random identifier, that nickname, and how the puzzles went. We do not show ads, we do not sell or share anything, and there is no tracking of players across other websites.
What we store
All of it, with nothing left out:
| What | Why |
|---|---|
| A random identifier for the account | So your scores are yours and come back next time. It is a random string — it is not derived from anything about you. |
| The nickname you typed, if you typed one | To label a score on the board. It is optional, and "Player" is a perfectly good answer. |
| Which character you chose, and your music setting | So the game looks and sounds the way you left it. |
| Per puzzle: tries, whether you cleared it, pieces used, score, and time taken | This is the game — the scorecard, the stars and the leaderboard are made of it. |
| Boards you build in the designer, and star ratings you give | So you can come back to them, and so other players can find good ones. |
What we deliberately do not store
- No email address. Guests are never asked for one. And when you sign in with Google we ask Google for your first name only — we do not request your email address, so it never reaches us at all.
- No real name, birthday, age, address, phone number or photograph. Nothing on this site asks for any of them.
- No passwords from Google. Google handles that; all we ever learn is that the sign-in succeeded.
- No advertising or analytics trackers, and no third-party code on the pages at all. The site's own code is the only code that runs, and the browser is instructed to refuse any other, so a script that somehow got onto a page could not send anything out.
- No location, microphone or camera. The site tells your browser to refuse those outright, so a bug could not turn them on by accident.
If you set a nickname and a passcode
You can optionally add a passcode so your scores follow you to another device without an email address. We never store the passcode itself — only a one-way scrambled version (PBKDF2-SHA256 with a random salt per account). It cannot be turned back into your passcode, not even by us, which also means we cannot tell you what it was if you forget it.
If you sign in with Google
This is optional, and it exists for one reason: so a cleared browser or a new tablet does not lose a child's progress. Google tells us an identifier for your Google account and your first name. That is all we ask for and all we receive. Progress you made as a guest carries over to the account, and keeps the same random identifier, so nothing earned is lost.
Cookies
One cookie, and it is the thing that keeps you signed in. It cannot be read by any code running on the page, it is only sent to this site, and what we store on our side is a scrambled version of it — so a copy of our database is not a set of usable logins. There are no advertising cookies and no third-party cookies, which is why you are not being asked to dismiss a cookie banner.
Your browser also remembers your nickname locally so the box is filled in next time. That stays on your device and is never sent anywhere.
What other players can see
Only a nickname, a chosen character and a score, on the leaderboard. There are no player profiles to open, no way to search for another player, and no messaging between players. The leaderboard does not even hand your browser the other players' identifiers, so there is nothing there to look anybody up with.
Where it lives
On Cloudflare, which serves the pages and stores the data. The connection is encrypted end to end. No player data is copied to any other company.
One honest footnote: the two fonts the pages use are loaded from Google Fonts, so your browser asks Google for a font file and Google therefore sees the request. No account information, score or nickname is involved — it is a font — but it is a request to somebody else's server, so it belongs on this page rather than left unsaid.
For parents and guardians
We built guest play precisely so that a child does not have to hand over anything personal to play a puzzle game. If you would rather they had no account at all, they can still play — the game works offline and keeps progress in the browser on that device.
To delete an account and everything attached to it, email [email protected] with the nickname, and we will remove it. Because guest accounts hold nothing that identifies a person, please write from the device that was used to play so we can be sure we are deleting the right one.
We do not knowingly collect personal information from anyone, of any age, because the site does not ask for personal information in the first place.
Changes
If we ever start storing something new, this page changes first and the date at the top changes with it. We will not quietly widen it.
Getting in touch
Questions, or anything that looks wrong: [email protected].