Privacy

Effective 9 November 2026

Cliffle is a daily game made and run by one person, kfudaman ("we" on this page). Nobody needs an account to play, and the game never asks for your name or email address.

Your game stays in your browser. Your answers and a few play events reach our server under a random id that your browser makes up, and we delete them after 12 months. There are no adverts and no cookies, and we never sell what we hold.

On your device

Your browser's local storage holds today's game and its clock, your finished days, your streak and stats, the walker you chose, whether the sound is on, the random id, and a short queue of play events waiting to be sent. We cannot see any of it unless your browser sends it, as described below.

The site also keeps your scroll position on each page in session storage, so the back button returns you to the same place. Your browser clears it when you close the tab.

Clearing this site's data in your browser deletes all of it, including your streak.

Sharing

The result you share holds the puzzle number, your depth, your streak, your metres for each list and the site's address. It holds no answers, no name and no id.

The share picture is drawn in your browser. It shows the day's seven settings and how deep you got, but not your answers. Both go only where you send them.

Sent to our server

Your browser asks our server for each day's lists. These requests carry only the date or the name of a list. Like every request on the web, they also carry your IP address, which the section on logs covers.

Your answers are checked in your browser, so nothing you type is sent while you are typing.

After each answer, your browser sends the random id, the date and your answers so far, each with its rank and score, and at the end of the day your depth. This is what powers the crowd view, which shows how other players did on each list. Our reply carries the crowd, and only for the lists your browser has answered, so nobody sees it before answering. A past cliff replayed from the archive sends no answers.

With the same id and date, your browser also sends a few play events: a day started, each answer with its list, rank and the seconds it took, the scout being used, a day finished, a share button pressed, and the first 80 characters of any answer that was not on the list. They travel with your first and last answers of the day. Any others are sent when you share, when you leave the page, or on your next visit. We use these to see how the game is played and which answers and spellings to add. Please keep personal details out of the answer box.

Why we use it

We use this data to run the game, show the crowd view, fix and improve the lists, and keep the game safe from abuse. Under the GDPR and the UK GDPR, the legal basis is our legitimate interest in doing these things. We think the impact on you is small, because the data sits under a random id, holds nothing that identifies you and is never used for advertising.

How long we keep it

We delete answers, depths and play events 12 months after the day they belong to. What remains are totals with no id attached, such as how many players picked each answer, and we keep those.

Cookies

Cliffle sets no cookies, so there is no cookie banner. Local storage keeps your game, your stats and your settings in your browser, as described above.

Analytics

We use Cloudflare Web Analytics to count visits. Cloudflare states that it uses no cookies or local storage and does not fingerprint visitors. It reports the pages viewed, the site you came from, your browser and device type, and your country, which Cloudflare works out from your IP address. We never see the address itself. Blocking it does not affect the game.

IP addresses and logs

Every request to Cliffle passes through Cloudflare, which needs your IP address to deliver the page and to protect the site from attacks. To stop scripted abuse, our server counts the requests from each IP address over one minute at a time (an IPv6 address together with the rest of its block) and does not store the count.

Cloudflare keeps logs of requests to our server for three days, which we use to find faults. These logs can include IP addresses. We do not store IP addresses in our database, and we do not use them to identify anyone.

Who handles the data

Cloudflare hosts the site, runs our server, stores our database and counts visits. It handles the data on our behalf under its data processing addendum.

Our database is stored in Cloudflare's Oceania region, and the site is served from Cloudflare's data centres around the world, so your data may be handled outside your country. For data from the UK and the EU, Cloudflare's addendum includes the standard contractual clauses (with the UK addendum), and Cloudflare is certified under the EU-US Data Privacy Framework.

We do not sell, rent or give this data to anyone else, unless the law requires us to.

Your rights

You can delete everything on your device yourself by clearing this site's data in your browser.

On our server, your data is filed under your random id, which you can find on your stats page. You have the right to a copy of that data, and to ask us to correct it, delete it, restrict how we use it or stop using it. To do any of these, email us and quote your id. We will reply within one month.

We cannot check that an id belongs to you, so we will act on the id you send us. This is also why nothing of value is tied to it.

If you are unhappy with how we handle your data, you can complain to the data protection authority where you live, such as the Information Commissioner's Office in the UK.

Children

Cliffle is not directed at children under 13, and it never asks for a name, an email address or any other personal details. If you think a child has sent us personal details, email us and we will delete them.

Changes

If we change this page, the new version will appear here with a new date at the top. If we start collecting anything new, we will update this page before the change goes live.

Contact

If you have any questions about this page or your data, feel free to email kfudaman@gmail.com.