Privacy

A device id cookie called gp_pid. It is a random id that tells one device from another. It has no name or email in it.

When you sign in, a session cookie called gp_s keeps you signed in. Signing out removes it.

A visit cookie called gp_v holds only the date and time of your last page view. It lets us count visits without knowing who you are.

A cookie called gp_src holds the name of the site you first came from, for 30 days.

We count page views, visits, the site a visit came from, the country and the kind of device, as daily totals. The totals are not tied to you, and we do not store your IP address.

Once a device has played a game, we keep one summary line for it under its random device id: when it first and last played, on how many days, for how long, its country, the kind of device and the site it first came from. It shows us which games bring people back.

If you press "Tell me when there is a new game", your browser gives us an address at its notification service (Google, Mozilla, Microsoft or Apple). We use it only to send those notifications. Switch them off in your browser settings at any time.

We count how often things happen on the site (a game played, a score saved, a sign-in) under the same random device id, and keep those counts for three months.

The site may also use Cloudflare Web Analytics (page counts and page speed, no cookies) and Microsoft Clarity (how pages are used: clicks, scrolling and recordings of page visits, with cookies). Clarity is not loaded in the European Economic Area, the United Kingdom or Switzerland.

We keep your Google account id, email, name and picture, and a nickname you can change on the Me page. Your nickname and picture show on a game's score board. Your email does not.

Your favourites, streak days and best scores are copied to your account so they follow you to other devices.

We email you only if you tick the box "Email me new games and puzzles". We keep the time you ticked it. Untick it on the Me page, or use the unsubscribe link in any email, to stop.

The Google sign-in script is loaded from accounts.google.com only when a sign-in button is shown.

For each play session we keep which game it was, how long it lasted, your best score in it, the game speed it ran at, and your country code, which Cloudflare works out from your connection. We use this to tune game speed, to order the home page and to see what is worth keeping.

When you are signed in, each play session is linked to your account.

Recently played games, saved games, your bests and your streak live in your browser (localStorage) and are not sent to us unless you sign in. The button "Delete my data on this device" on the Me page removes them.

When the site shows Google AdSense or other ad networks, those providers may use cookies to show and measure ads.

How Google uses data in ads

Data is kept until you ask for it to be deleted.

To remove what is on this device, open the Me page and press "Delete my data on this device". It also deletes the summary line kept for this device.

For an account, open the Me page and press "Delete my account". It removes your account, your scores and your nickname at once.