Privacy

The short version. You can play the whole game without an account and without giving us anything. There are no tracking cookies, no advertising, no third-party trackers, and nothing is ever sold or shared. If you create an account, we keep your email so you can sign in — and your chosen name and times become public on the leaderboards.

Playing without an account

Nothing about you is sent to the server. Your progress, best times and replays are stored in your own browser (in localStorage), and they stay there. Clearing your browser data deletes them, and nobody else can see them.

If you create an account

We store:

• — the name you choose, which is public: it appears on the leaderboards and on your player page. Pick a nickname if you'd rather not use your real name;
• — your email address, which is never public. It identifies your account and lets you sign in;
• — your password, stored only as a hash. We cannot read it;
• — your submitted runs: the level, the time, and the replay itself. These are public — anyone can watch or download a run that is on the leaderboard. That is the point: a time is only trustworthy because it can be re-checked.

The legal basis is the performance of the service you asked for. We do not use your data for anything else, and we send no marketing email — there is no mailing list.

Cookies

Only strictly necessary ones: a session cookie and a security token that protects forms against cross-site request forgery. No analytics cookies, no advertising cookies, no cookies from other companies. That is why you are not being asked to accept anything — consent is required for tracking, and there is none here.

The browser storage described above holds your game progress and, if you sign in, your login token. It exists to provide the game itself.

Analytics

We want to know whether people actually play — how many start a level and finish one — not who they are. Analytics run on our own server, set no cookies, do not follow you across sites, and record no personal data. We do not use Google Analytics.

Server logs

Like any web server, ours records requests, including IP addresses, for security and to find faults. These are kept briefly and are not used to build a profile of anyone.

Historic community records

The level pages credit the players who recorded the fastest known solutions, using the name each of them signed into their own demo file decades ago. It is attribution: those solutions were shared publicly with the Supaplex community precisely so their authors would be credited. We deliberately publish only the name — the email addresses and locations present in some of those files are discarded and never stored.

If one of those names is yours and you would rather not appear, write to us and it comes off, no questions asked.

How long we keep things

Until you delete your account. Deleting it removes your email, your name, your times and your replays — everything, permanently. You can do it yourself from the leaderboards panel in the game, and it takes effect immediately.

Your rights

You can ask for a copy of your data, have it corrected, or have it erased, and you may complain to your data protection authority. Write to us and we will deal with it.

Where it lives

On a single rented server in Europe. There is no third-party analytics, advertising or marketing service in the chain. The donation link points to Ko-fi, which is an external site with its own privacy policy — we receive nothing about you from it.

Contact

For anything on this page — a copy of your data, a correction, a deletion, or a name to be taken off the historic records:
privacy@murphyslaw.run

This is a non-commercial fan project run by one person. If something here is unclear or looks wrong, tell us and it gets fixed.