Privacy
Short version: no accounts, no ads, no tracking pixels, no sale of data.
What is stored
- On your device (localStorage): a random anonymous id, your streak and statistics, your mute setting, and the state of today's game so a reload does not lose it. Clear your browser data to remove it.
- On our servers: a temporary game session (revealed tiles, pop count, misses) that expires after 36 hours; and, when you finish, one row with the date, your pop count, misses, win/loss, which areas you refined, and a one-way hash of your anonymous id mixed with a secret salt and the date. It cannot be traced back to you and is used only to count unique plays, build the community heatmap and compute the daily median.
- Guesses are checked on the server and are not saved to any profile.
- IP addresses are not stored as identifiers. A salted hash of your IP is used in a short-lived (one hour) counter to limit abuse.
Third parties
The site runs on Cloudflare. We use Cloudflare Turnstile to check that a player is human when a game starts, and Cloudflare Web Analytics for privacy-friendly page-view counts (no cookies, no cross-site tracking). There are no advertising or social-media pixels.
AI-generated images
Daily pictures are original illustrations generated by AI image models that are licensed for commercial use (or public-domain/CC0 images), and are checked automatically for safety. They are not copies of third-party artwork or photographs of real people.
Contact
Privacy, trademark or copyright questions: hello@popapixel.com.