PRIVACY
What this game stores, what it does not, and how to have it removed.
NO ACCOUNT TO PLAY
You can play without signing in, and nothing asks you to. There is no email field on the click path. A few moments ask for an email, all optional: claiming a win with a prize; signing in, which keeps your nest, Power, looks and purchases across devices; the break alert; and running a community’s egg. Signing in is a link sent to that email — there is no password, and no profile. A ghost hand and the daily gift need an account: they belong to a person, not to a cookie, so the email is what they are kept behind.
WHAT IS STORED
A random anonymous player id, signed by the server and held in a cookie. The round counter and the winner of each round. If you pick a name for the live feed: that name, against that anonymous id, shown to everyone who has the page open. If you claim a win with a prize: the email you gave, on that win, for the person who verifies it. If you buy something: the purchase, against that anonymous id, and — if you sign in — the email you gave and which anonymous ids it is linked to. Card details never reach this site; Stripe handles payment. Your nest: feathers, the day streak, titles, a shell per egg you tapped on, the looks you wear, the team you joined, all against the anonymous id, and folded into the account when you save one. Your achievements are public: the board shows the name you wore when you earned one, and your nest has a page, at an id that is not your player id, listing your achievements, shells, best streak and feathers under the name you wear — never an email or an id. Whether you asked to be told by email when an egg is about to break: only if you ticked it in your nest, one mail per egg, off again whenever you untick it. If you found a team: its name and blazon, public. If you run a community’s egg: the name and email you gave for it, and what you see in its console is what the operator sees here, names and counts; the only email a host sees is their own winner’s, given when claiming, so the host can send the prize.
WHAT IS NOT STORED
Not your IP address. Addresses are hashed with a salt that rotates daily, used only to stop one machine flooding the counter, and never written next to anything identifying. Not a device fingerprint — the anti-abuse system works from timing behaviour, not from your hardware. Not one database row per click.
ANALYTICS
Aggregate numbers only: how many clicks, how many people, how long a round lasted. Individual clicks are not tracked to a person and are not sent to any third-party analytics service.
WHO IS RESPONSIBLE
The operator named on the legal notice is responsible for what this page describes, and answers at the address given there.
REMOVAL
Clearing the cookies ends the association completely; signing out does the same and keeps your nest and purchases behind your email. To erase the email itself, open your nest while signed in, shop tab, and use “delete my account”: the email, the devices linked to it, the Power, the colours, the reserved name, the nest (feathers, streak, titles, shells, looks, pass), the team membership and the alert all go at once, and the purchases keep their amounts but lose the person. A community’s egg you run is not deleted with the account: write to close it. To have a stored win removed from the Hall of Fame, or for anything the button does not cover, write to privacy@whowillbreakit.com with the round number or the email, and it will be done.