Privacy Policy

🧒Playing without an account

Anyone can play every game without an account. Then we don't know who you are: a game's progress, settings and best scores are saved only on your own device, in the browser's storage.

We count how many times each game is played, as a single total per game with nothing about who played.

👤With a Wizzymoon account

An account needs only a username and a password. Please don't use a real name as a username: it's shown on leaderboards. We store the password only in a scrambled form (a scrypt hash) that can't be turned back into the password.

To save progress across devices, we keep each game's progress, settings and best scores, your leaderboard scores, and how many times you played each game.

To protect accounts from attacks and stop people making lots of accounts, we keep the internet (IP) address, the country it's in and the type of device and browser used when the account was made, when it last logged in, and for each device that's logged in.

A grown-up's email address is optional. It's used only to confirm it and to send a link if the password is forgotten, never for newsletters or marketing.

🌐Server logs and security

Like most websites, our server keeps a log of requests, including the internet address that made them, for 14 days. It's used to keep the site running and to stop attacks, then deleted.

Wizzymoon is delivered through Cloudflare, which protects the site and makes it fast. Cloudflare processes requests on our behalf and may set a cookie that's strictly needed to tell people from bots. We don't use any other cookies.

🚫What we never do

There are no ads, no tracking or analytics tools, no social media buttons and no chat. We never sell or rent personal information, and we don't share it with anyone except the services that run the site for us (our hosting provider, Cloudflare and, for emails, our email provider).

⏳How long we keep it

Account information is kept until the account is deleted. Logging out removes that device's login, and each account keeps at most 20 logged-in devices. Email links stop working after 1 hour (password reset) or 24 hours (email confirmation). Server logs are deleted after 14 days.

🗑️Deleting an account

Open My profile and choose Delete my account. That permanently deletes the account and everything stored with it straight away: progress, scores, play counts, logged-in devices and the email address.

👪For parents

Wizzymoon is made for children. Children should ask a parent or carer before making an account or adding an email address. You can look at what's stored on the My profile page, and change the password, remove the email or delete the account there. For anything else, or if you can't log in, email us and we'll help.

⚖️Your rights

Depending on where you live (for example under the GDPR in the UK and EU), you can ask to see, correct, delete or move the personal information we hold, or object to how we use it. We use account information to provide the account you asked for, security information because we have a legitimate interest in keeping accounts safe, and an email address because you chose to add it. If you're unhappy with how we handle your information, you can also complain to your local data protection authority.

✉️Contact us

Questions about privacy, or a request about your information? Email [email protected].

If this policy changes, we'll update it here and change the date at the top.