Data we process
- Visits and security
- Our own log records dynamic requests, dates, routes, sanitized parameters, responses, IP-derived identifiers, browser, referrer, language, hosting-provided country and technical headers. Cookie, authorization, token and API-key values are redacted or hashed before storage.
- Forms and community
- Suggestions, ratings, corrections, contact and newsletter forms can contain the submitted text, optional name, email or Instagram handle, source, moderation state and an abuse-control identifier.
- Games
- Chosen player name, player cookie, scores, IP-derived identifier, browser and technical game metrics used for rankings and abuse controls.
- Session
- A technical session cookie supports forms and admin login. A random
ble_visitor cookie estimates visitors and enforces abuse limits; it is not sold as a profile.
- Google Analytics
- Optional measurement for visits and performance. Analytics storage starts denied and the Google library loads only after analytics consent.
- Google AdSense
- The ownership meta tag supports review. The advertising library and ad slots are not loaded.