What applies today
Updated 10 November 2026. This page describes storage needed to play and optional statistics in the current version. Google AdSense, H5 Games Ads and Google Analytics are not enabled. The current Usage data choice is not consent for personalized advertising.
Storage that keeps games working
Your browser stores offline games, difficulty, character choice and tutorial status in localStorage. The ct-lang cookie remembers language for up to one year. You can clear these through your browser’s site data settings.
Online rooms store board state, connection times and SHA-256 hashes of player credentials on the server. Private credentials stay in the browser, outside invitation links. Room access expires after seven days; expiry does not mean its database record has already been deleted.
Daily puzzles have been retired and their API is closed. Old attempts may remain in the database. Historical attempts and room records have no automatic deletion schedule. Clearing localStorage does not automatically delete server records.
Optional statistics
Only after you allow it, the website sends game, tutorial and sharing events, language, device category, normalized referral source, duration and result. A random browser identifier is hashed with SHA-256 before server storage. Portrait selection is not recorded in analytics.
The analytics API does not store names, emails, IP addresses, keystrokes, full URLs, room links or player credentials. Reports are private to the game owner and cover at most the latest 30 days. Old events are removed in batches as new events arrive, so this is not a promise of immediate deletion on day 30.
Turn statistics off or delete events
Open Usage data at the bottom of any page to stop collection or delete events associated with this browser’s identifier. Deletion retains a hashed revocation record to stop old requests restoring events. This browser’s identifier cannot delete events created from another browser.
Turning analytics off does not change gameplay or access. Earlier activity is not collected retrospectively. Deleting usage statistics does not delete saved games or daily progress.
Shared links and infrastructure
Anyone with a room invitation can claim the first available seat in its two-player room. Invitation links do not contain your private player credential.
The website and database run on Sites/Cloudflare infrastructure. Infrastructure providers process technical information needed to serve connections under their policies. The analytics API not storing IP addresses does not mean the network infrastructure never processes them.