Your privacy.

Updated October 13, 2026.

Anonymous play

A random, essential browser cookie identifies your saved guesses and statistics for one year. We store its one-way hash, your choices, and edition dates. No account is required. Your results are not public and no cross-device recovery is currently available.

Minimal analytics

When connected, we count visits, starts, round completions, finished games, shares, returns, and Plus page visits. Events contain the day and an optional short referral code. They do not contain your email, player identifier, image answers, or raw IP address. We honor Do Not Track and the preference below.

Abuse prevention

Requests use short-lived hashed rate-limit buckets. IP-derived bucket identifiers rotate every minute. Old buckets are periodically removed. Hosting providers may maintain their own operational logs.

Email interest list

Only an explicit opt-in submits an email address and consent timestamp. A successful signup means it was saved to the database. Email sending is not active yet. We do not sell email addresses or use them for game analytics.

Optional Premium phone waitlist

Giving a phone number is optional and does not affect free play. Only checking the separate permission box and submitting the form saves your international phone number, consent timestamp and wording version, and the app source. We use this list only for a future Premium launch notification, not general marketing. Repeated submissions are deduplicated. Numbers are stored privately, are not included in game analytics, and are not sold or returned by a public read endpoint.

Phone notifications are not active. Joining does not send a message, start a subscription, or charge you. A way to withdraw consent and delete your waitlist entry must be available before notifications are activated. This page will be updated with that process and retention details before any notification service starts.

Your data

Clearing the game cookie disconnects this browser from its saved results; it does not immediately delete database rows. A self-service deletion and email unsubscribe flow must be available before reminder emails are activated. Payments are not currently offered and we collect no payment details.