Privacy Policy

Playing as a guest

You can play without an email address, password or account

Your browser stores a guest token and game saves such as your best score, longest streak, sound setting and queued run updates. The server stores a SHA-256 hash of the guest token, not the token itself, plus your optional display name and browser language. The token links your profile and runs between visits

We store run progress, question answers, card choices, scores and timings. We use this information to resume open runs, check scores, run leaderboards and understand how the game is played. Duo rooms also store their participants and game actions so two players can share a run

Leaderboard names

Choosing a name is optional. A name you choose appears beside your score on the weekly and all-time leaderboards, and with your partner's name in duo results

Use Remove my name on the leaderboard to clear your name and leave the solo and duo boards while keeping your profile and runs. You can choose a name again later. Players without a name are not listed

Optional push notifications

Push notifications are optional and require your browser's permission. We store the browser push subscription endpoint and encryption keys, time zone, browser language and whether the device is a desktop so we can send notifications at suitable local times

Depending on your play and board activity, notifications can mention an open run, a friend joining your duo room, a change to the weekly top 10 or games from our collection

Scheduled and leaderboard notifications share a limit of one per local day. A friend joining your room is an extra notification. Push is quiet from 21:30 until 10:00 in the subscription's time zone

The browser's push service handles delivery, and the notification payload is encrypted for your browser. We record delivery and tap events, plus whether a permission prompt was granted, denied or left unanswered, to understand how push is used

Turn off push in the game's Settings. Planet Pop unsubscribes that browser and sends a request to remove its subscription from our server. You can also block notifications for farflung.earth in your browser's site settings. Unsynced subscriptions are deleted at 21:30 local time on day 90 after their last sync, after the final reminder window

To limit abuse, the server counts new subscriptions and permission answers by network address per UTC day. It stores a keyed daily hash instead of the address and removes each counter after its day ends

Analytics

Ahrefs Web Analytics loads on farflung.earth to count visits and help us understand how people find Planet Pop. Ahrefs processes the data sent by its script under its own privacy terms

We also use run and notification records to build internal game statistics, including totals, browser language, run results, scores and names. Guest tokens and push subscription keys are not shown on public leaderboards

Optional ratings

After five finished runs, Planet Pop can ask you for one rating. We store your one-to-five-star rating, optional comment of up to 500 characters, whether you dismissed the prompt, browser language and a snapshot of your game progress

We use ratings and comments to improve the game. They are not shown on public leaderboards

How long information stays

Unsynced push subscriptions are kept through the final reminder window and deleted at 21:30 local time on day 90 after their last sync. Permission prompt answers are deleted after 180 days, and notification delivery and tap records after 120 days. Daily address counters are removed after their UTC day ends

Recent activity records used to decide whether to suggest another game are kept for eight days. Guest profiles, names, run history, game events, ratings and promo rotation records have no automatic expiry in the current service

Use Delete my data in Settings to permanently delete your guest profile, name, solo and shared duo runs, answers, card choices, ratings and notification records. Shared duo runs are also removed from your partners' histories; their other data stays. This browser's token and game saves are cleared and its push subscription is cancelled. Daily address counters are not linked to profiles and expire after their UTC day. Clearing browser storage alone does not delete server records