Privacy Policy
Updated 2026-10-22 (beta)
What we collect
Game saves are kept in your own browser's local storage by default. Once you have a Neighbour Card (a linked passkey or email), you can sync your save to our server (cloud save).
Anonymous statistics: to count how many people open the site, start the game, finish the prologue, join multiplayer, link an account and come back days later, pages send events to our account service. We store only the event name, days since first visit, server time, device type (phone / tablet / desktop), source (site or game), the referring site's domain, and a one-way hash of IP address and browser string used only to de-duplicate (it cannot be turned back into your IP). We do not store raw IP addresses or browser strings, and events are not linked to accounts. A random anonymous ID stays in your browser for its local log; the server does not keep it.
Account (Neighbour Card): nickname, birth year (year only, never your birthday), your passkey's public key, cloud save, jianbing tickets and print collection, and invitations. Sign-in is kept in an HttpOnly session cookie that page scripts cannot read. If you link an email, we store only an irreversible hash of the address (to recognise you), never the address itself; to send your code we hand the address to our email provider for delivery (see Service providers). Codes are valid for 10 minutes, work once, and are stored only as a hash.
Multiplayer: during a match the game server receives your nickname, position and inputs, and logs the connecting IP to prevent cheating and abuse; with a linked account, match results feed the leaderboards.
How long we keep it
Raw statistics events are kept for 180 days; daily totals are kept long-term. Account data is kept until you cancel your card. Deleting your account removes all of the account data above at once; database backups from the last 30 days may still hold a copy until they expire.
What we don't do
We don't sell data, show third-party ads or load third-party trackers.
Players under 13 can still use guest play, passkeys and cloud saves, but they never appear on leaderboards and we don't collect their email.
Service providers
The site is delivered through Cloudflare, which processes visitor IPs for security and delivery; our servers run on our own machine. Sign-in code emails are sent from [email protected] by Cloudflare Email Service, which processes the recipient address to deliver them.
Your choices
If your browser sends Do Not Track or Global Privacy Control, we don't send statistics. You can also switch statistics off below. At the bottom of the Neighbour Card page you can cancel your card, which deletes your account and cloud data; clearing site data removes your local save and local anonymous ID.
Contact
During the beta, please send feedback in the game or under our launch posts. A contact email will be added here.
Currently: statistics on