Privacy, in plain language

No player accounts. No answer text sent to an analytics provider.

Anonymous progress

A signed, HTTP-only cookie called rd_player associates this browser with saved game sessions, recognized answers, scores, practice history, a personal best, and short rate-limit counters. It lasts up to 180 days. It is an identifier, not an account or a way to identify you across devices.

Submitted text is processed to match an answer. We save the canonical recognized answer in a completed round; unrecognized submissions are not retained. No live AI provider receives your answers.

Retention and control

The scheduled cleanup removes unfinished sessions inactive for seven days, completed sessions older than 180 days, and browser records inactive for 180 days. Practice history remains with an active browser record. Aggregated event counters are kept for 180 days. Losing or clearing the cookie makes progress inaccessible but does not itself delete database records.

For a deletion request, contact the operator first. We will explain how to demonstrate control of a browser without asking you to email a raw cookie. There is no recovery or merging of lost browser identities.

Usage and operational data

Our database records daily aggregate counts of game starts, completions, unrecognized outcomes, and share actions. These aggregate records contain no answer text, player ID, or session ID. No third-party analytics script is included by default.

The hosting and database providers necessarily handle ordinary technical requests. The application logs only generic error categories, but hosting infrastructure may retain request metadata under its own policies.

Hosting: Vercel. Database: . Operator: .

Optional advertising

Ads are disabled unless the operator configures the publisher account and a consent integration. When enabled and permitted by that integration, Google AdSense may use cookies or other identifiers to deliver and measure ads. We do not put game answers or player identifiers in our ad configuration.

The consent provider controls the advertising choice. A withdrawal removes the ad slot and triggers a reload; the operator must configure the provider to clear or restrict previously granted advertising storage. See Google’s information about partner sites.

Contact and external links

External reference sites have their own privacy practices. A real privacy contact must be configured before public launch.