Privacy

Playing as a guest

Your personal bests, unlocks and settings stay in this browser. If you submit a score, we store the nickname you choose, your score, the run's statistics and the recorded taps used to verify it. A random guest identifier in a cookie lets the leaderboard list each browser once.

With a claimed username

We store your username, previous usernames (reserved for you so old links keep working), your email address, a salted Argon2id hash of your password if you set one (never the password itself), when you joined, your equipped cosmetics, cosmetic progress, badges, invitation records and your active sign-in sessions. Your email is never shown publicly or shared. Sign-in and confirmation emails are sent through our email delivery provider.

Cookies

All first-party, all HttpOnly, none for advertising or tracking:

• a sign-in session cookie, for up to 60 days after your last visit;
• a guest identifier, so a browser is listed once on each leaderboard;
• an invitation cookie for 7 days after you open a friend's invite link, so the invitation can count;
• a short-lived claim cookie while you confirm a new username (15 minutes).

Abuse prevention

To limit abuse we keep a salted hash of your IP address for at most a day, never the address itself.

Deleting your account

Open your account, go to Settings and choose Delete account, then confirm from the email we send. That erases your account data. Your leaderboard runs remain as anonymous "Former player" entries that can't be traced back to you.

Contact

Questions: info@ailandgrab.si.