Privacy policy

The short version

• You can play INKLOSURE without an account. Nothing about you is needed.
• If you sign in, you sign in with Google. We never see or store a password.
• We ask Google for your account's anonymous ID only. We do not receive your email address, name or photo.
• We store your answers and scores, and the shapes you draw, so your streak and results follow you between devices.
• We do not sell your data, we do not show ads, and we do not track you across other websites.
• You can delete your account and its data yourself, any time, from the help sheet in the game.

Who is responsible

INKLOSURE is a daily game run from Australia (“we”, “us”). You can reach us at hello@inklosure.app.

What we collect and why

If you play as a guest

• A random device ID made in your browser and kept in its local storage. Our server turns it into a one-way scrambled code (a salted SHA-256 hash) and keeps only that code, so we can tell that two answers came from the same player and stop the same question being counted twice. It is not your name, email or phone and we cannot turn it back into anything about you.
• Your answers: for each question, the score and a few numbers about it (how much ink you used, how close you were, the size of your box). These feed the “how everyone did” chart and tell us which questions are too hard or too easy. For guests we do not keep the shape you drew.
• In your browser only: your streak, past results, settings and theme. This never leaves your device unless you sign in.

If you sign in with Google

• An account ID. Google tells us a unique, anonymous ID for your Google account. We ask for the “openid” permission only. We store a one-way scrambled version of that ID, the date your account was created, and the date you last used it. We do not receive or store your email address, name, photo or anything else from your Google account.
• Your daily answers, scores and drawn shapes, so the same result can be shown on any device you sign in on, and your streak can be worked out from the days you finished.
• A sign-in session (a random code in a cookie, and a scrambled copy on our server) that keeps you signed in on that browser.

Endless mode

Endless mode records only anonymous totals per question (how many people played it and how they scored). Nothing in endless mode is linked to you.

Technical data

Our host, Cloudflare, receives your IP address and browser details when you load the site, as any web host does. We use your IP address briefly in memory to limit abuse and do not store it in our database. We may use Cloudflare Web Analytics for simple visit counts; it does not use cookies and does not follow you across sites.

Cookies and local storage

• inklosure_session: only if you sign in. Keeps you signed in. It is HttpOnly (scripts cannot read it), lasts up to 180 days and is removed when you sign out.
• inklosure_oauth: only while you sign in. Lasts 10 minutes and protects the sign-in from being hijacked.
• Local storage in your browser: your device ID, streak, past results, settings and theme. You can clear it any time from your browser settings.

There are no advertising or tracking cookies. If that ever changes we will update this page first and ask for your consent where the law requires it.

Sign in with Google

When you press “Sign in with Google” your browser goes to Google, where you choose an account and approve. Google then sends us the anonymous ID described above. Google's own handling of your data is covered by Google's privacy policy. We use the information we get from Google only to recognise your account in INKLOSURE. We do not use it for advertising, we do not share it with anyone, and we do not sell it.

Who we share data with

• Cloudflare, which hosts the site and stores our database, acting on our behalf.
• Google, to let you sign in (only if you choose to).
• Anyone else only if the law requires it. We do not sell personal data.

Our hosting may process data in countries other than your own. Cloudflare publishes its own safeguards for this.

How long we keep it

• Account data: until you delete your account. Deleting it removes your account, your saved answers and drawn shapes, and your sign-in sessions from our live database straight away.
• Guest data: the scrambled device code and answer scores are kept so the daily statistics stay accurate. They are not linked to your name or email, because we do not have them.
• Anonymous totals already counted in a day's “how everyone did” chart stay, since they cannot be tied to anyone.
• Backups of our database may keep deleted data for up to 90 days before being replaced.

Your choices and rights

• Delete your data yourself. Sign in, open the help sheet (the question mark), and choose “Delete my account and data”.
• Sign out from the same place. Your streak stays in your browser.
• Clear what is in your browser from your browser settings (site data for this site).
• Depending on where you live (for example Australia, the UK, the EU or California) you may also have the right to ask us for a copy of your data, to correct it, or to object to how we use it. Email hello@inklosure.app and we will reply within a month. If you are unhappy with our answer you can complain to your local data protection authority (in Australia, the Office of the Australian Information Commissioner).

Our legal basis for handling your data is to run the service you asked for (for accounts) and our legitimate interest in running a fair daily game with accurate statistics (for guest answers).

Children

INKLOSURE is a general puzzle game and is not aimed at children under 13. We do not knowingly collect personal information from them. If you think a child has signed in, email us and we will delete the account.

Security

The site is served over HTTPS. Passwords do not exist in the player flow. Account IDs and device IDs are stored only as one-way hashes. The site loads nothing from other websites, which keeps third parties out of your visit. No system is perfectly secure, and if something went wrong that affected your data we would tell you.

Changes to this policy

If we change how we handle data we will update this page and its date. For a significant change we will also say so in the game.

Contact

hello@inklosure.app