Privacy

If you sign in, we store your email address, your sign-in sessions and the boxes you tick on the trackers. Nothing else. You can delete all of it yourself from the account page. If you never sign in, the only personal information you hand us is what you type into the contact form. Beyond that, Google Analytics counts page views — see below.

Signing in is by email link: you type your address, we send a one-time link through Resend, our email provider, and clicking it signs you in on that device. There is no password.

Your progress — completion, collectibles, trophies — is saved against your account so it follows you between devices. Deleting the account deletes the progress with it, at once and for good; we keep no copy.

If you use the contact form, the name, email address and message you enter are stored so we can read and reply to them. They are used for that and nothing else: no mailing list, no profiling, and no passing them to anyone else.

Your IP address is used in memory to rate-limit submissions and is not written to the stored message.

This site loads Google Analytics 4 on every page. It records which pages are opened, roughly where in the world from, and which site you arrived from, so we can see which parts of the database people actually use. Google receives that data as a processor and sets its own cookies to recognise a returning browser.

We do not use it to build advertising audiences, and there is no ad network, retargeting pixel or social tracker anywhere on the site. If you would rather not be counted, any content blocker stops it, as does Google’s own opt-out add-on.

Two things set cookies here: Google Analytics, above, and next-intl, which records the language you picked so the site does not forget it on the next page. The language cookie is functional and identifies nothing about you. Signing in sets one more: a session cookie, httpOnly so page scripts cannot read it, which the sign-out button and account deletion both clear.

Images come from our own asset storage, and map tiles from a third-party tile host on the map pages only. Fonts are served from this site rather than a font CDN, so no request goes to Google for them. As with any request on the web, those hosts see the IP address making the request.

To ask what is stored about you, or to have a contact message deleted, write to us on the contact page.