Privacy Policy

The short version

Overflow is a browser game with no accounts and no cookies. To run the leaderboard and understand how the game is played, it keeps a random ID in your browser and records anonymous gameplay events on a server I operate. If you submit a score, the name you type is shown publicly. The details are below.

A random player ID

The first time you play, the game creates a random ID (for example 3f9c…) and saves it in your browser's local storage. It isn't derived from anything about you. It lets the leaderboard keep one best score per player, and it links your play sessions together in the gameplay events below. Clearing this site's data in your browser resets it.

Gameplay events

While you play, the game sends events such as a run starting, a level reached or a run ending, along with a per-visit session ID, your player ID, and game-state details. When a visit starts it also records how you arrived: the referring website's domain name (not the full address), or a share or campaign tag in the link. These events are stored in a database hosted by Supabase and are kept indefinitely. They contain no name, email address or IP address.

The leaderboard

If you choose to submit a score, you type a name of up to 12 characters. It appears publicly on the leaderboard with your score, depth and date. Stored with it, and not public, are the run's details that let the server verify the score: the run's seed, its length and a log of in-game events. Scores are also kept indefinitely. Don't use your real name if you'd rather not.

IP addresses

To stop score spam, a submission's IP address is combined with a secret value and hashed, and the hash is checked against a one-minute rate limit. Those rate-limit records are deleted after about a minute. The raw IP address is never stored in the database.

Third parties

• Vercel Web Analytics and Speed Insights count page views and measure loading performance without cookies.
• Google Fonts serves the typefaces, and Google sees your IP address when your browser fetches them.
• The site is hosted on Vercel, which keeps standard request logs (IP address, time, page) for a limited period.

What I don't do

• No accounts, no sign-in, no email collection, no cookies.
• No advertising, and no selling, sharing or licensing of data.
• The game is not directed at children under 13.

Your choices

• Reset your player ID: clear this site's data in your browser. Future events will no longer link to your earlier ones.
• Remove a leaderboard name or your events: email me your player ID (it's stored under overflow_client_id in your browser's storage for playoverflow.com) and I'll delete the matching rows.

Changes

If this policy changes, I'll update the date at the top of this page.

Contact

Questions? Email hi@compendious.co.