פרטיות במשחק החידות ובתגובות

Privacy note – picture riddles and comments

Last updated: October 27, 2026 · Applies to the picture riddles (yoyo-studio.com/riddles) and to comments on the site.

No sign-up and no real name needed. This is what is kept, why, and for how long:

The riddles game

• A cookie with a random player number, for one year, to remember your progress in this browser (riddles solved, hints, points). It is a pseudonymous identifier: it holds no name, but it links your visits to the game.
• A nickname, only if you choose to appear on the leaderboard. It is shown there to everyone.
• Owner-assisted recovery stores a request linking the current browser player to the old player, with a pseudonymous proof cookie for 30 minutes. The request number is not a login code. After approval and connection, the source progress is retained as a frozen copy; deleting the recovered player also deletes the copy and recovery requests. A request expires after 30 minutes. An uncompleted request is deleted on the next recovery activity after expiry, or during owner cleanup, so it may remain stored after expiry. The link for a completed recovery is kept until the player data is deleted.
• A restore code (if you ask for one) is kept only as a one-way hash, never the code itself.
• Progress, nickname and the restore-code hash are kept while the game runs. There is no automatic deletion for them at the moment.

Rate limits

To stop automated guessing and flooding, requests are counted per IP address. Our hosting provider (Cloudflare) also processes IP addresses in its own logs, under its own policy.

In the game, a rate-limit counter may contain the IP address itself. We are moving to storing a keyed hash of the address instead. The change applies to new counters only: existing counters that contain the address stay until they are deleted.

Each game counter has an expiry time, at most two days after it is created. An expired counter is not erased at that moment: an automatic cleanup runs every 15 minutes and deletes expired counters. Expired counters are also deleted from time to time while the game is in use.

Comments

• The name and comment you write are shown to everyone on the page.
• Each comment is stored with an IP tag: a hash of the IP address computed with a secret key. It is used for rate limits and duplicate checks.
• Visible comments, and comments hidden by the site admin, are kept together with their IP tag with no deletion date. A hidden comment is not shown, but it stays stored.
• Every comment is checked by automatic rules and by an AI model run by our hosting provider (Cloudflare). If the AI check is unavailable, the rules decide on their own.
• On riddle pages, a comment the filter identifies as giving the answer away is refused and its text is not stored. The filter can also miss things.
• Every attempt to post a comment is recorded in an attempts log (with the IP tag). These records have no expiry time of their own: a cleanup deletes records older than two days.
• A comment blocked by the general filter is never shown, but it is kept (with its IP tag) until a cleanup deletes it, after 30 days.
• That cleanup runs automatically once an hour, and also when a comment is published, so a record can remain past the two days or the 30 days.

How to delete your data

• With the button: it deletes from the game what is tied to the player number in this browser's cookie: your progress (riddles, hints, points), your nickname and the restore-code hash. Then it deletes the cookie. If you moved to another device with a restore code, that is the same player, so the progress there is deleted too. A deletion cannot be undone.
• By email: write to [email protected] and we will reply within 30 days. If you have a nickname in the game, include it.
• The button does not delete comments, because they are not linked to the player number. For a request about a comment you wrote, email us with the page, the name and the text.
• The game's overall statistics (how many tried and solved each riddle) do not identify players and do not change when you delete.
• Wrong guesses are counted anonymously and in aggregate: only the guess (normalized, up to 40 characters), the riddle, the day and how many times, with no link to any player or IP address. So they do not change when you delete either. Correct answers are not logged.

Delete my game data

Fonts

The pages load the Heebo font from Google Fonts, so your browser connects to Google's servers, which see your IP address.

If anything changes, this page will be updated.

Yoyo Studio