Privacy

No email is required. The game sets a random, HttpOnly device cookie that associates your browser with its public username and ranked activity. Ranked game starts, submitted guesses, scores, and completion times are stored in Cloudflare D1. Guest Practice history and resumable drafts are stored in your browser.

Google sign-in is optional. The server processes a Google ID token to verify the account and retains only Google's account-specific subject identifier. It does not persist the token, email address, profile name, avatar, contacts, or password. The leaderboard uses only the public username you choose in the game.

Creating an account attaches the current browser's guest username and ranked history. When a returning account encounters separate guest-ranked history, the game asks before importing it. Device-only guest Practice history and drafts are not silently uploaded.

When you are signed in, your public username, ranked history, active games, Practice filters, seen-painting history, and completed Practice records can be stored in Cloudflare D1 and made available across signed-in devices. The public leaderboard displays only a username, best completed score, rank, and completion date. It never displays your Google email address.

Device cookies last for up to two years. Account sessions use random, revocable HttpOnly cookies; the server retains only a keyed hash of each session token. Sessions expire after seven days of inactivity and no later than 30 days after creation. Active cloud-saved games expire after 30 days. Short-lived hashed network identifiers are used for rate limiting and abuse prevention.

Other saved account and gameplay records remain until they are deleted or removed during operational maintenance.

Cloudflare hosts the application and database. The visible map uses a customized OpenFreeMap Positron style, the OpenMapTiles schema, OpenStreetMap data, and low-zoom Natural Earth shaded relief. OpenFreeMap states that its public service uses no cookies or tracking; its anonymized logs may include browser type, referrer, date and time, and operating system without an IP address, and it may temporarily log IP addresses for up to 30 days while investigating abuse. Google Identity Services is loaded when Google sign-in is offered.

Clearing this site's browser data removes local cookies and drafts but does not delete previously submitted ranked records. Signing out revokes the current account session. For privacy questions or deletion requests, email support@ubiquandoquis.com. We may ask you to verify ownership while signed in. Never send a password, Google ID token, or session cookie.