Privacy policy
Last updated: October 20, 2026
In short
No mandatory sign-up, no ads and no tracking tools. There are only general, anonymous counts, with no identifier at all. We don't sell data, and we keep only what's needed to play. If you want, you can sign in with Google so your progress carries across devices.
Who is responsible
The data controllers are the site's operators, Dor and Eli. Inquiries: dorssg8@gmail.com
Remote play: what's stored on the server
For each room, the following is stored in Google Firebase (the database is located in Belgium):
- The names the players typed (up to 14 characters);
- A random ID for each player, to know who sits where;
- The game state, all the moves and the update times;
- Who is connected to the room right now, and the last chat message: a phrase from a fixed list, or a short message you wrote (up to 120 characters). Only the last message is kept.
The player ID is created by Firebase Authentication's anonymous sign-in. It's just a random ID, with no email and no phone number, and the security rules use it so that only the two players in the room can change the room. This Google service operates in the US.
The data is used only to run the game between the devices. You don't have to type a name; without a name you'll appear as "White" or "Black".
Sign in with Google (optional)
On the "My profile" page you can sign in with a Google account. The following is then stored in Firebase, under the account's ID: the name you chose, your records and rating, trophies, progress in the Academy and the daily puzzle, positions for practice, the dice count, the dates you played, and the move records of your recent games (with the players' names in them), so you can go back to them. The only purpose is for your progress to move with you between phone and computer. The security rules allow only you to read and write this data.
Firebase's sign-in service receives your name, email address and profile picture from Google, as with any Google sign-in. We don't store them in the database and don't use the email. The "Delete from account" button on the profile page deletes everything stored in the account; to disconnect from Google itself, you can contact us.
The site shows your Google profile photo only to you, in the circle in the corner of the screen, and it loads straight from Google.
Anonymous counts
To know whether the site works well, the page adds 1 to general daily counts in the database: how many visits there were, how long the site was open that day (over a minute, 5, 15, 30 or 60 minutes), which kind of game was played and against which computer level, how many games started and ended, which kind of link brought them (a room invite, a challenge, a shared puzzle or a post), whether it's a phone, a tablet or a computer, how many times people shared, which guides were read, and where new visitors came from (search, a room link, Facebook or directly). The counts contain no identifier, name or address, and there's no way to tell from them who played. To count how many come back after a day, a week or a month, your device remembers the date of your first visit and which counts it has already added today.
Who sees the room data
The players, and anyone who has the room code or the link. The room code is not a password.
What's stored only on your device
The saved game, name, settings and record are stored only in your browser. Only in remote play do the name and player ID also go into the room data. Details: Cookies and local storage.
Technical information
As with any website, Google's servers (site hosting, Firebase and Google Fonts) receive your IP address and details about your browser. According to Google, this information is used to operate the service and prevent abuse, and is kept for a limited time. We don't use it.
How long we keep data
A room nobody has touched for 30 days is deleted automatically, together with who was connected and the last message. You can ask us to delete a room sooner: send us the room code.
Sharing data
We don't sell data and don't pass it on to others. Google processes it for us as the hosting provider. We'll disclose data only if the law requires us to.
Security
The site works only over an encrypted connection (HTTPS), with security headers and a Content Security Policy (CSP).
Your rights
You can ask to see, correct or delete the data about you, in Hebrew, Arabic or English. If you signed in with Google, say which account; if not, include the room code. We reply within 30 days: dorssg8@gmail.com
Deleting the data from your device
In settings, tap "Delete all data from this device". You can also delete the site's data in your browser settings.
Children
The site suits all ages and asks for no identifying details. Playing for coins, the tables and the wheel of fortune are for ages 18 and over only. Children should pick a nickname. Parents can ask us to delete a room or a profile.
Changes
If we change anything in this policy, we update it here and change the date. We announce material changes on the site in advance.