Privacy notice

Scope of this notice

Updated 28 October 2026. This notice distinguishes device storage for computer and same-device games from server processing for online games. Online processing applies when you connect to and use that service. No ads, independent analytics, accounts, nicknames, free chat, public ranking or contact form are provided.

Queue, room and guest-state cleanup limits differ from the hosting provider’s access and security log policies. Send privacy enquiries to k1002yc@gmail.com.

Computer and same-device games

Offline boards, move calculations and computer choices run in the browser. Their progress, favorites, recents and settings stay in local storage and are not sent to an opponent. Online moves and state are sent to the server, so not all game information stays on the device.

Saves do not automatically follow you to another browser or device. Other people using the same browser on a shared device may see them. Private mode, storage restrictions or cleanup can prevent or erase saves.

Information exchanged online

The server issues a guest identity and secret reconnection token. Matching, room participation, move legality, time adjudication and return require exchange of move positions, board state, assigned colors, invite codes, server/move times and connection status. Opponents receive the board, colors and connection state needed for that room.

The secret token is kept per game in this tab’s sessionStorage and sent to the online server. It is not designed to be shared with opponents or put in invite URLs, console output, ads or analytics. Invite codes are different from this secret. Do not include the token in support requests or screenshots.

Online waiting and state cleanup

Initial limits are two minutes in the random queue, ten minutes waiting for a friend, 60 seconds to reconnect and two hours per game. The 30-second move clock continues during disconnection and can expire first. Finished rooms are removed after ten minutes; disconnected guests without a room are scheduled for cleanup after 24 hours of inactivity.

These limits concern queue, room and guest state, not necessarily hosting/security logs or backup copies. Server state follows these cleanup limits; hosting logs and backups may follow separate provider settings and retention policies.

Deleting saved information

Site-data controls in the browser can erase offline saves, settings and the tab’s reconnection token. Losing the token can prevent a return to an online game. Online state follows the separate server cleanup limits; browser deletion does not instantly erase all server or hosting information.

Connection information handled by hosting

The hosting setup uses Cloudflare Pages for static pages and a separate Workers/Durable Objects service for online games. Providing pages, online connections and network protection may involve Cloudflare processing IP addresses, traffic and device information. Local game storage does not mean that no connection information is processed.

The online app temporarily processes connection IPs in memory to limit excessive connections and does not permanently store raw IPs in game storage. Separate worker execution log collection is disabled by default. Cloudflare may still process access, error and security logs. This notice does not specify their fields, retention, access scope or international processing details. See https://www.cloudflare.com/privacypolicy/ .

No ads or separate analytics are currently used

This version does not use Google AdSense or a separate visitor analytics script, and it does not implement installation of advertising cookies for them. If introduced later, actual providers, data, purposes and choices must be explained and any necessary consent applied.

Future personalized advertising is distinct from the current ad-free state. The notice must be updated to match actual advertising and hosting settings.

Enquiries and privacy requests

Send privacy requests to k1002yc@gmail.com. Browser settings can erase local saves; identify requests about online server information separately from deleting browser data.

Email delivers your sender address and message to the operator and email service. Include only what is needed and never send passwords, identity numbers, secret reconnect tokens or other sensitive information.