Privacy policy
Last updated October 19, 2026
Guest play
No email is required. When you first open the home page, before you play, the game sets a random, HttpOnly device cookie. Each visit renews it, so it lasts two years from your last visit. Until you use the game (open Practice, play, choose a username or send a report), nothing about your browser is stored on the server; from then on the cookie associates your browser with its public username, its games and its reports. Ranked game starts, submitted guesses, scores, and completion times are stored in Cloudflare D1. Guest Practice history and resumable drafts are stored in your browser.
VBI · QVANDO · QVIS is not intended for children under 13.
Google sign-in
Google sign-in is optional. The server processes a Google ID token to verify the account and retains only Google’s account-specific subject identifier. It does not persist the token, email address, profile name, avatar, contacts, or password. The scoreboard uses only the public username you choose in the game.
Creating an account attaches the current browser’s guest username and ranked history. When a returning account encounters separate guest-ranked history, the game asks before importing it. Device-only guest Practice history and drafts are not silently uploaded.
Saved data and public results
When you are signed in, your public username, ranked history, active games, Practice filters, seen-painting history, and completed Practice records can be stored in Cloudflare D1 and made available across signed-in devices. The public scoreboards, one for all schools and one for each school, display only a username, rank, best game, average, games played, and their dates. They never display your Google email address.
When you suggest a correction, the report is stored in Cloudflare D1 with your browser’s guest identifier, and a copy is emailed to support@ubiquandoquis.com, a Google Workspace mailbox. A report holds the painting, the answers the game accepts for it, the answers you gave, the category you chose, your note (up to 280 characters), the page’s address, the public username shown on the page, and the time. Reports are kept until they are deleted; nothing removes them automatically. Please don’t put personal information in the note.
If we hide a profile from the scoreboards or rename it, the game keeps a record of what changed and why.
Security and retention
Device cookies last two years from your last visit. Account sessions use random, revocable HttpOnly cookies; the server retains only a keyed hash of each session token. Sessions expire after seven days of inactivity and no later than 30 days after creation. Active cloud-saved games expire after 30 days. To limit abuse, the server counts requests from each network over ten minutes, an hour or a day. Each count is stored under a hash of your IP address, keyed with a secret, and deleted within about a day. Starting a Google sign-in sets a security cookie that lasts at most 10 minutes and is cleared when sign-in finishes.
| Cookie | Set when | Lasts | For |
|---|---|---|---|
__Host-ommet_player | the first visit to the home page | two years, renewed on each visit | your browser’s guest identity |
__Host-ommet_session | signing in with Google | 7 days unused, 30 days at most; logging out ends it | your account session |
__Host-ommet_google_state | starting a sign-in with the game’s Google button | 10 minutes; spent when sign-in ends | checks that what Google sends back is the sign-in you started |
__Host-ommet_google_signin | Google’s redirect sign-in (touch devices) | 5 minutes | holds Google’s sign-in token until this tab finishes signing you in |
g_csrf_token | set by Google’s sign-in library on this site in its redirect mode | set by Google | Google’s check that the sign-in came from this site |
For each guest Practice round, the server keeps a one-way hash of the submitted answer and the round’s score, linked to the browser’s guest identifier, for up to 30 days, so that a resubmitted round returns the same result.
When you change your username, the old one stays reserved for you for 30 days, so no one else can take it; then the reservation is deleted.
To find faults, the site keeps a log of the requests it answers: for each request, the address asked for, including its query string (while you type an attribution, that holds the text the game is reading), the response’s status and how long it took; for each fault, a short description with any quoted text, email address, IP address and long codes removed. These lines don’t include your IP address, location, cookies, username or browser. Cloudflare keeps them for 7 days.
Other saved account and gameplay records remain until they are deleted or removed during operational maintenance.
Services and your choices
Cloudflare hosts the application and database. Cloudflare Web Analytics measures how quickly the pages load. On each page view your browser loads a small script from static.cloudflareinsights.com, which sends this site the page’s load timings, its address (without any query string) and the site that linked to it; Cloudflare records your country, browser, operating system and device type with them. It sets no cookies and uses no local storage, and Cloudflare states that it does not fingerprint visitors by IP address or browser. Cloudflare keeps the full records for 7 days and a sample after that. The visible map uses a customized OpenFreeMap Positron style, the OpenMapTiles schema, OpenStreetMap data, and low-zoom Natural Earth shaded relief. OpenFreeMap states that its public service uses no cookies or tracking; its anonymized logs may include browser type, referrer, date and time, and operating system without an IP address, and it may temporarily log IP addresses for up to 30 days while investigating abuse. Google Identity Services is loaded when Google sign-in is offered.
Clearing this site’s browser data removes local cookies and drafts but does not delete previously submitted ranked records. Logging out revokes the current account session. For privacy questions, or to see, correct or delete your data, email support@ubiquandoquis.com. We may ask you to verify ownership while signed in. Never send a password, Google ID token, or session cookie.