Privacy
The short version: free play keeps no account and stores no identity. We keep the judgments, never the judges.
The hinge
“Permanent” and “compliant” reconcile only through true anonymization, not pseudonymization. The research record is irreversibly stripped of identifiers and never re-linkable — so it isn't personal data, and it can be kept indefinitely. The rule is an architecture requirement, not a disclaimer: anonymize at the source, never store the link.
Anonymous, not invisible
We build for anonymity and we mean it: free play keeps no account and stores no identity, and the research record is stripped of the link to you at the source. But here is the honest part — no one can promise perfect anonymity on the internet, and we won't pretend to. Your own device, your network, a screenshot a friend takes, the broad erosion of privacy everywhere — those live outside this site's walls. Privacy may already be dying out there; we make no guarantee about a world we don't control. So the promise is bounded and true: we don't collect who you are, and we can't sell, leak, or be compelled to surrender what we never took. We guarantee our own conduct, not the whole internet's — and we'd rather say that plainly than sell you a comfort we can't honor.
What is stored — and what never is
Kept (the anonymous corpus): the machine's painted clues and the secrets behind them; the names players submitted (captions only); the machine's hidden guess; flags, crown outcomes, speed brackets, timestamps, model identifiers, app version; and session structure (player count, not identity).
Never stored, never sent: the player names you type at setup — those are labels for the night, held on your device and discarded when the session ends; any account identifier tied to round data; IP addresses kept against game data, precise location, or device fingerprints.
No faces, no famous
The most sensitive category — real faces, likenesses, identifiable people — is disallowed by design, enforced at the engine, not the disclaimer. The machine paints things, creatures, scenes, and objects, never identifiable persons; players may not prompt for real people or celebrities. This protects the right of publicity, avoids biometric/special-category data, sidesteps synthetic-likeness exposure, and keeps print-on-demand alive. Captions are scrubbed for real names before any print, and a human clears every print before it ships.
The paid tier
The optional Pass is the only place you are known to us — and only to bill you, ship a prize, and send required notices. Buying a Pass never de-anonymizes your free play; the wall between them is the keystone term. The detection corpus from Fuel is anonymized the same way: the call and the outcome, never the image or the person.
Age — 13+ to play, 18+ for any data
The site is for ages 13 and up. A neutral date-of-birth screen runs on first visit; we store only a coarse age range (under-13, 13–17, or 18+) in your browser — never your date of birth. Anyone under 13 is shown a polite wall and cannot enter, and we do not knowingly collect personal information from children under 13 (consistent with COPPA). If we learn a child under 13 gave us data, we delete it — contact us below.
We collect personal data only from people who are 18 or older. Players aged 13–17 get the full free game, entirely anonymous: no account, no sign-in, no leaderboard, no payment — every data-collecting control is hidden for them. This is by design, so that minors’ data is simply never gathered. The age you enter is self-declared and accepted in good faith; it is a screen, not identity verification.
By playing, you certify your age. Pressing into the game is your declaration, made in good faith, that you are at least 13 to play at all, and 18 or older for anything that touches data, money, or the wall. It's a turnstile, not an ID check — accepted on trust and on you. If it isn't true, don't enter.
Cookies
Free play needs no tracking cookies. Any strictly necessary storage is disclosed at the point of use. Saved collections in the game live on your device only — not uploaded, clearable by you. The full breakdown — the one strictly-necessary sign-in cookie, the on-device storage, and what consenting to the science actually means — is in the Cookies & Consent notice.
This page summarizes the working notice; the governing document is finalized with counsel before launch.