Privacy

Last updated: November 14, 2026

Who we are

Rarelode is run by Rarelode Studio (operated by TD), based in the United States. We decide how the data described here is used (in GDPR terms, we are the data controller). You can reach us at the address under Contact below.

What we collect

A random player ID. The first time you play, your browser creates a random code and stores it on your device. It is not linked to your name, email or phone. We use it so you get one scored dig per day and can pick up where you left off if you refresh.

Your game. For each day you play, our server stores your player ID, the answers you type, which answer each one matched, whether it was right, how long you took, your score, and when you played. We store what you type exactly as you typed it, so please don't enter your name, contact details or anything else personal in the answer box.

Technical data. Like any website, our hosting providers receive your IP address and basic browser information when you load the page or play. They use it to deliver the site and protect it from abuse. We don't use it to work out who you are.

What stays on your device

The game saves a few things in your browser's local storage: your player ID, today's progress and result, your streak, the treasures you've collected, and whether sound is on. These are not cookies and are not sent to anyone else. Clearing your browser's site data removes them; your streak and collection will be lost.

How we use it

• To run the game: check answers, keep the clock, score your dig, and show you the day's answers after your score is locked.
• To improve the game: find answers we missed, adjust how rare each answer is, and see which levels are too hard or too easy. We look at this in aggregate, not to profile you.
• To keep the game fair and working: spot errors and abuse.

We don't sell your data, don't use it for advertising, and don't share it with anyone except the service providers below.

Our legal basis

If you are in the European Economic Area, the UK or Switzerland, the law asks us to name a legal basis for each use:

• Providing the game you ask to play (running your daily dig, keeping the clock and your score): this is necessary to provide the service you request.
• Improving the answer list, fixing problems and preventing abuse: our legitimate interest in running a fair, working game. We keep this to what we need, and you can object (see Your rights).

The items saved on your device are only what the game needs to work, so we don't ask for separate consent for them.

Who processes it for us

• Cloudflare hosts the web page.
• Supabase runs the game server and stores game records, in the United States.
• Google Fonts delivers the fonts the game uses, so your browser contacts Google when the page loads.

These providers handle data on our behalf under their own privacy terms.

Where your data goes

Game records are stored in the United States, and Cloudflare serves the page from data centers around the world. If you play from outside the US, including from the EEA or UK, your data is transferred there. We rely on our providers' legal safeguards for these transfers, such as the European Commission's Standard Contractual Clauses.

How we protect it

Everything travels over encrypted HTTPS connections. Your browser can't read or change the game database directly; only our game server can, and it only accepts game moves. Access to the stored records is limited to us. No system is perfectly secure, but we keep what we collect small so there is little to lose.

Sharing your result

When you tap share or copy, the result text goes to the app you choose or to your clipboard. Nothing is posted anywhere unless you post it yourself. Shared results don't include your answers.

Ads

There are no ads in the game right now, and no advertising or tracking code runs on this page.

If we add ads in the future, we will update this page before they go live. It will name each ad provider, explain what it collects (such as cookies or device identifiers) and why, and tell you how to turn off personalized ads. Where the law requires it, including in the EEA, the UK and Switzerland, we will ask for your consent before any ad cookies are used.

How long we keep it

• Game records: up to 24 months, then we delete them or keep only totals that can't be traced to a player ID.
• On your device: until you clear your browser's site data.
• Technical logs: our hosting providers keep these for a limited time under their own policies.
• Emails you send us: as long as needed to answer you.

Your rights

Depending on where you live, you may have the right to:

• see the data we hold about you, and get a copy of it;
• have it corrected or deleted;
• object to, or ask us to limit, how we use it;
• complain to your local data protection authority.

To use any of these, contact us. Because we don't know who you are, we can't look you up by name or email. Tell us the dates you played and the device and browser you used, and we'll do our best to find your records. You can also stop playing at any time and clear your browser's site data to remove everything stored on your device.

We don't sell your personal information, and we don't share it for targeted advertising.

Children

The game is not directed at children under 13, or under the higher minimum age that applies in your country. We don't knowingly collect personal information from them. If you believe a child has played and want their records removed, contact us.

Changes

If we change how the game uses data, we'll update this page and the date at the top. If we start using analytics, it will be listed here before it goes live; for ads, see Ads above.

Contact

Questions or requests: hello@rarelode.com