Privacy & cookies

Updated 12 October 2026 · Development version

What this game stores

Your chosen public nickname, game progress, cookie acknowledgement time and notice version, and leaderboard decisions are saved on the server. Nicknames, ranked scores and council choices are visible to other players. Choose a nickname that does not identify you. If you connect Google, we also store your Google account identifier and verified email. Your email is visible to authorized administrators, never on the public leaderboard.

The save cookie

dp_session is a first-party cookie used to find and protect your save. It lasts up to one year, is inaccessible to game scripts, and is marked Secure on HTTPS. Guest saves use SameSite=Strict; Google account sessions use SameSite=Lax to support the sign-in redirect. A new cookie is set only when you submit the entry form or sign in to a connected save. A temporary HttpOnly sign-in cookie, dp_oauth, lasts up to ten minutes and uses SameSite=Lax so Google can return you to the game. The game sets no advertising or analytics cookies and uses no browser storage for your game state.

Your choices

You can leave without starting or remove the cookie using your browser settings. Removing the cookie disconnects this browser from its save; it does not delete the server record. Connecting Google at Zero lets you recover your connected game and use it on other devices. You can continue as a guest. Restoring an existing Google save does not merge guest progress. Signing out revokes this browser's session while preserving the connected save. Google processes your sign-in under its own privacy policy; the game requests identity and email access only.

Hosting and retention

The game is designed to run on Cloudflare Workers and D1. Hosting providers may process network information to deliver and protect the service. Game records currently remain until the operator removes them; an automatic retention schedule is not yet configured.

Before public launch

The operator must complete this notice with their legal identity, contact details, applicable processing grounds, retention schedule, and a working process for data access and deletion requests. This development notice is not a claim of compliance with every jurisdiction.