What we keep, in plain words

What we store

• Your garden name, the one you picked. It shows on the leaderboards.
• A random player id, made up when you pick a name. It is not linked to who you are.
• Your game results: games played and won per game and level, your streaks and your garden points. To check a score we replay the game's moves. We keep those moves too (just the moves, never anything about you), so we can tune how hard the games are. They are deleted with your profile.
• Scrambled keys. Your device keeps a secret token, and you get a garden key. We store only a one-way scrambled version (a hash) of each, so nobody can read them back from our side.
• Saved progress for games that have it (like your Pot Shot gardens or your Potting Shed), so it follows your garden key to another device. Each save replaces the last one.
• Your seeds, if you plant a game idea: the idea, our replies and your notes, under your garden name.
• Your email, only if you choose to give one for your seeds. You never need an email to play or to plant. We use it only to tell you when we reply to one of your seeds: never for marketing, never shown on the site and never shared or sold. The emails go out through SendGrid, the service that delivers them for us, with no tracking in them. Turn them off with the link in any email or on My seeds, or remove your email there any time.
• A rough timestamp, to the hour, of when you joined and when you last played, plus the time each progress save arrived.
• A spam check: when you pick a name, a scrambled fingerprint of your internet address is kept briefly (it is cleared when someone next picks a name) so one address cannot make lots of names in a minute. It can't be turned back into the address and is not linked to your profile.

What we don't

• No password, no phone number, no real name unless you choose one as your garden name.
• No email needed. We only keep one if you give it to us for news about your seeds.
• No ads yet, and no analytics cookies unless you say yes (see Cookies and analytics below).
• Your name and scores live in this browser's storage on your device, so the games remember you. Clearing your browser data clears that.

Where it lives

Your name, results and progress are stored in Google Cloud Firestore in the EU region europe-central2 (Warsaw, Poland). Nobody else's app can read it: only our own server talks to the database.

The site and that server run on Vercel. Vercel keeps request logs for a short time, and they include IP addresses. We don't copy them anywhere or use them for anything but fixing problems.

Cookies and analytics

The first time you visit, we ask if we may use Google Analytics. It tells us which games people play, for how long, and from which kind of device and country, so we know what to grow next. We never see who you are, and nothing is sold.

• If you say no, nothing from Google loads at all, and the site works exactly the same.
• If you say yes, Google Analytics sets its cookies (named _ga and _ga_..., kept up to 2 years) and Google processes the visit for us under its own privacy terms. Ad signals stay switched off.
• We keep your answer in this browser's storage, so we don't ask on every page.

Change my answer

Delete your profile

Open your garden (tap your name, or its first letter on a phone, at the top of the home page), then Delete my profile and tap again to confirm. Your name, stats, saved progress, leaderboard rows, your seeds and your email (if you gave one) are removed right away. We keep an anonymous note that a game was already counted, without your id, so the same game can't be counted twice.

Coming later

We plan to add ads to keep the garden free. Before they arrive, this page will be updated and you will be asked first, the same way as for analytics. We may also offer Google sign-in as an option; the garden name and key will keep working without it.