Privacy policy

Data processing is limited to what is needed to provide the game, maintain optional accounts, synchronise statistics and manage optional private groups.

Data we process

Guest mode: a random guest identifier, game progress, attempts and game statistics.

Optional account: username, optional display name, salted password hash, technical session, games, attempts and statistics. We do not request an email address, real name, telephone number, date of birth or payment details.

Optional account recovery: when a user enables a browser as a recovery device, we store a public key, a descriptive device label and technical registration or last-use dates. The private key remains in the user's browser and is never sent to the server.

Optional groups: group name, registered-user membership, an optional nickname within each group, invitation link and the date the group was last viewed to show ranking updates. Contacts and address books are not stored.

Public rankings and solutions: completed daily games are shown under a server-generated alias that does not reveal the guest identifier. An account may expressly allow its display name to be shown and revoke that choice from Account. If two accounts share a private group, each sees the name or nickname already used in that group; once they no longer share a group, the alias is shown again unless public display has been authorised. A solution's attempts can only be viewed after completing your own challenge and by spending Aura from a registered account.

Purpose

Contact: you can send feedback without an account or choose not to link it to your account. We retain the text and date without adding an IP address, guest identifier or browser data to the message. If you send it while identified, it is linked to your user account so that private replies can be provided within the application. Do not include passwords or other personal data in the text.

The data is used to provide account access, save progress, calculate streaks, display statistics, create private and public rankings, grant monthly rewards and prevent disclosure of the secret code before a game ends.

Data minimisation

Only data essential to the purposes above is collected. The display name and group nickname are optional. Global rankings use an alias unless an account expressly enables publication of its display name or the viewer already shares a private group with that account.

Retention

Feedback, management notes and replies are deleted after 180 days without activity, or sooner if an administrator deletes them. Feedback linked to an account and its replies are deleted when that account is deleted. An anonymously submitted message cannot be used to identify its author or send them replies.

Accounts, statistics and group memberships are retained while the account remains active or until the user requests deletion. Technical session data may be renewed when signing in.

Security

Passwords are not stored in plain text. They are stored as PBKDF2-HMAC-SHA256 hashes with a random salt. Session cookies are technical and HTTP-only.

Device-based password recovery cannot reveal the previous password. It only allows a new one to be set after cryptographically verifying a previously enabled browser. If the user loses the password and has no recovery browser, the account cannot be verified without requesting external data.

Analytics and logs

To detect technical problems, we collect response times, loading and recovery failures, and performance metrics (LCP, INP and CLS). They are retained for up to 90 days as counters and ranges aggregated by day, version and mobile or desktop category. These measurements do not include account, session or device identifiers, URLs, error messages or stored IP addresses. No additional cookies are used for measurement.

External analytics is disabled by default. Access logs are also disabled by default to reduce data such as IP addresses; if enabled, this must be done under a lawful basis and with a defined retention period.

Rights

Users may access, correct and delete their account data from the application where applicable. On the Account page they can change their display name, sign out and delete the registered account.

Deleting an account removes the registered identity, sessions, recovery devices, group memberships, Aura and data associated with that account. Aggregated or historical results that can no longer identify a person may be retained for general game statistics and operation of the service.