Privacy

What stays in your browser

Your progress (scores, streak, which puzzles you have played, passport stamps), your settings (language, sound, text size), a cached copy of the puzzle list, and the random identifier. All of it lives in your browser's local storage. Clearing site data for terpano.com removes it, and so does using a private window.

What is sent to our server

When you finish a puzzle, your browser sends the random identifier with the score, so the site can show you where you stand among today's players. Once a day it sends the identifier alone, so we can count how many people come back. It also sends which game mode was played, which step of the share flow was reached, and, if you arrived from a link with a source tag, that tag. Every one of these records is keyed by the random identifier and nothing else: no name, no email, no IP address, no device fingerprint. They are the same for every player, child or adult, and are used only to run and improve the game, never for advertising or profiling.

Sync and passkeys (optional)

If you set up a recovery code, your browser stores a snapshot of your progress on our server under a one-way hash of that code; the code itself never leaves your device, so it cannot be recovered if lost. If you set up a passkey, we store only the public key and a credential identifier, which is enough to check a signature and nothing more. Neither is created unless you ask for it.

Rate limiting and analytics

To stop abuse, the server keeps a short-lived counter per visitor. It is keyed by a truncated hash of the IP address and expires within an hour; the address itself is not stored. Our host, Cloudflare, sees your IP address to deliver the site, as any host does. Its web analytics counts page views without cookies and without any identifier. There are no third-party trackers and no advertising scripts.

How long we keep it

In your browser: until you clear it. Per-day records on the server (visits, game modes, share steps, arrival sources): deleted automatically 13 months after the day they refer to. Scores and the first and last day an identifier was seen: kept until you delete them. Sync snapshots and passkey public keys: kept until you delete them. Rate-limit counters: gone within an hour. Daily backups exist so the service can be restored after a failure; they are kept privately and are not used for anything else.

How to delete it

Open Settings, find the Privacy card and press "Delete my data from the server". This removes every record stored under your identifier, deletes any sync snapshot and passkey linked to this browser, and then issues a fresh identifier. Your progress on this device is untouched; clear the site data if you want that gone too. No email, no form, no waiting.

Children

We do not ask for age, and we collect the same minimal data from everyone. There is no chat, no social feature, no persistent leaderboard, no account, and no text in the pictures. Nothing here is used for advertising or profiling.

Changes

If any of the above changes, this page changes with it and the date at the top is updated. The page is the complete description; there is no separate policy document.