The short version
You can play the entire game without an account, and nothing you do leaves your device. Signing in is optional and does exactly one thing: it puts a name next to your score on the daily leaderboard. If you sign in, we store your Google account identifier and a display name — not your email address — and you can delete both, along with every score, from inside the game at any time.
Playing without signing in
Shut The Cube stores game progress, high scores, averages, win rates, streaks, and display preferences in your browser's local storage. This information stays on your device and is used only to make the game work between visits. No account is needed and nothing is sent anywhere.
If you sign in to the leaderboard
Signing in uses Google. We ask Google only for the openid and profile scopes, which means we receive an opaque account identifier and your basic profile name. We do not request or receive your email address.
What we store on our own server is:
- the opaque identifier Google gives us for your account, so we recognise you next time;
- a display name, which starts as your Google first name and which you can change to anything you like;
- the scores you post — the score, whether you shut the box, how many rolls it took, which daily board it was, and the list of moves you played.
The move list is kept so that a submitted score can be checked against the board it claims to come from. It is what stops the leaderboard filling up with invented scores.
We do not store your email address, your Google profile picture, or any Google access or refresh token. We do not ask Google for permission to read anything else in your account, and we could not do so if we wanted to.
Your display name and score are shown publicly on the leaderboard to anyone who opens it. Please do not use a name you would rather strangers did not see.
Deleting everything
Open the leaderboard in the game and choose Delete my data. This immediately and permanently removes your account record and every score you have posted. There is no waiting period and no copy kept. You can also sign out at any time, which leaves your scores in place; use delete if you want them gone.
Locally stored game records are separate and are removed through your browser's site-data or local-storage settings.
Legal basis and where data is held
Where UK and EU data protection law applies, the basis for storing your name and scores is your consent, given by choosing to sign in, and withdrawn by deleting your data or signing out. The leaderboard runs on Cloudflare Workers and Cloudflare D1, and data is held on Cloudflare's network. The controller is Victor Saly; you can reach me at info@victorsaly.com with any question or request about your data.
Third-party services
The game is hosted through GitHub Pages, and the leaderboard through Cloudflare. Both may process limited technical information, such as IP address and request logs, to deliver the service under their own policies. Signing in sends you to Google, whose own privacy policy covers that step. The game itself loads no third-party scripts at runtime, including Google's — sign-in works by sending your browser to Google and back, not by embedding their code in the page.
There is no advertising, no third-party tracking, and no analytics cookie.
Changes to this policy
If the game begins using analytics, advertising, or other services that process personal information, this policy will be updated before those changes take effect.