Privacy policy

The short version

• Every game plays without an account. You only need one to put a score on a leaderboard.
• We set no advertising or tracking cookies, and we sell nothing about you to anyone.
• Our game statistics never store your IP address, your name, your email or your account.
• Your username and your scores are public on the leaderboards. Nothing else about you is.

Who is responsible

zapjam.games is run by skycraft GmbH, Leibnizstraße 5, 01187 Dresden, Germany. We are the controller for the personal data described here. For anything about your data, write to privacy@zapjam.games. Our full company details are in the imprint.

Playing without an account

The games keep your progress, best results and settings in your browser's own storage (local storage), on your device, so they are still there next time. They also keep a random identifier there that lets a run you finish be ranked if you sign in afterwards, and the run itself until you do. None of this leaves your device except a finished run you choose to submit. You can remove all of it by clearing this site's data in your browser.

Your account

Accounts are run for us by Clerk. To create one you give an email address, a username and a password, or you sign in with Google, in which case Google tells Clerk your name, email address and profile picture. You may add a first and last name. Your email is confirmed with a code we send you. Sign-up is protected against bots by Cloudflare Turnstile.

Our own servers keep only your account's internal id and your username. Your email address stays with Clerk; we use it only to send you sign-in and password-reset codes. Clerk sets the cookies that keep you signed in. Legal basis: Art. 6(1)(b) GDPR — the account is the service you asked for.

Scores, leaderboards and friends

When you submit a result we store it with your account: the score, the record of your inputs that lets us check it was really played, a few figures about the run, and when it happened. Leaderboards show your username and your scores to everyone. A challenge link you share shows your username and the score you set. Friends see your rank beside theirs; friend requests and the list of your friends are visible only to you. Legal basis: Art. 6(1)(b) GDPR.

Debate Court

In Debate Court you type arguments. To run the game, the text you type is sent to OpenAI, which checks it for abuse, writes your AI opponent's replies, fact-checks claims (searching the web to do so) and judges the debate. The opponent's and the judge's lines are turned into speech by Cloudflare Workers AI. We store each debate — the topic, the transcript, the scores and the verdict — so you can see it again; a debate stays private unless you publish it, and a published one shows no account details. A debate played before you sign in is stored under the random identifier in your browser and added to your account when you sign in.

Please do not type anything personal into a debate. Legal basis: Art. 6(1)(b) GDPR.

Game statistics

To learn which parts of a game work, each game reports what happens while you play: when a session starts and how long it lasts, game events such as a level finished or a setting changed, loading time, frame rate, and errors. With them we record your device type, operating system, browser, screen size, language, the site you came from (its domain only) and campaign tags in the link, and the country, region and time zone your connection comes from. That location is worked out from your IP address by our host as the request arrives; the IP address itself is never stored, and nor are your name, email, username, account or anything you type.

A session is identified by a random number held in memory for as long as the page is open. Nothing for statistics is stored on your device, so we cannot recognise a returning visitor. Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in keeping the games working and making them better.

Page views on the catalogue

The catalogue pages (this site, apart from the games themselves) count visits with Plausible Analytics, from Plausible Insights OÜ in Estonia. Plausible sets no cookies and stores no personal data: it counts a visit from a daily-changing anonymous value and keeps only totals, such as pages viewed, referring sites, countries and device types. Legal basis: Art. 6(1)(f) GDPR.

Hosting, security and errors

The site and the games are hosted by Cloudflare, which processes your IP address and request to deliver them and to protect them from attack. When a game crashes we keep the error message and where in the code it happened, and our servers count their own errors; neither includes who you are. Legal basis: Art. 6(1)(f) GDPR.

Cookies and storage on your device

The only cookies are Clerk's, which keep you signed in. Everything else the site and the games keep is in local storage on your device: game progress, best results and settings, a run waiting to be ranked, the random identifier above, whether this browser has signed in before, and your choice of background on the catalogue. All of it is needed for the features you use, so we do not ask for consent to it (§ 25(2) TDDDG).

Who processes your data for us

• Cloudflare, Inc. (USA) — hosting, databases, bot protection and speech.
• Clerk, Inc. (USA) — accounts and sign-in.
• OpenAI Ireland Ltd (Ireland, with processing in the USA) — Debate Court's opponent, judge, fact-checks and moderation.
• Plausible Insights OÜ (Estonia) — catalogue page views.
• Google — only if you choose to sign in with Google, under Google's own privacy policy.

Each works under a data processing agreement with us. Where a provider is outside the EU, the transfer relies on the EU–U.S. Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission's standard contractual clauses.

How long we keep it

• Your account, scores, leaderboard rows, friends and debates: until you ask us to delete them, or delete your account and ask us to remove them.
• Game statistics: 24 months.
• Run tokens that let a game be ranked: 6 hours. Challenge links: 30 days.
• What is stored on your device: until you clear it.

Your rights

You have the right to see the data we hold about you, to have it corrected or deleted, to restrict how we use it, to receive it in a portable form, and to object to processing based on our legitimate interests (Art. 15–21 GDPR). You can delete your account yourself from your profile's account settings; to have your scores, leaderboard rows and debates deleted as well, write to privacy@zapjam.games. You may also complain to a data protection authority; ours is the Saxon Data Protection and Transparency Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte).

If you are under 16, please ask a parent before you create an account.

Changes

When the games start handling data differently, this page changes with them, and the date at the top says when it last did.