What this site keeps.

What is stored

Your answer

One row per completed attempt: a reaction time, a position on a line, the option you picked. The first counted attempt is what enters the crowd statistics. Up to 25 later attempts per test are retained so a profile can show retakes.

Your score

The percentile the server computed for that answer, and when you gave it.

A random identifier

A UUID generated in your browser and kept in local storage. It is what lets the site recognise a retake and stop one person counting twice. It is not derived from anything about you or your device.

There are no accounts at the moment, so there is no name, email address or login anywhere in this list. The random identifier above is the only thing an answer is stored against.

What is not stored

No cookies for tracking. Accounts are switched off, so there are no authentication cookies either. No advertising runs on this site, nothing here follows you to another one, and nothing is sold. Page views are counted — see below.

Your IP address is not stored in the application tables. It is used transiently in a way worth describing precisely, because the crowd statistics depend on it and vagueness here would be the easy option.

How your IP address is used

Every number on this site is a count of people. That only means anything if one person cannot pretend to be a thousand, and playing requires no account, so there is nothing else to go on.

On a submission, the connecting IP address is passed through SHA-256 with a secret random salt that clients cannot read. The resulting opaque value is used for minute and daily submission budgets. When a browser would become a new counted player, it is also used for hourly and daily new-player budgets. Over a limit, the answer can still be scored and shown on that device, but it is not stored on the server or added to the crowd totals.

The address itself is not written to these application tables. The opaque hash is designed not to identify an address without the secret salt, the rate tally holds no answers or browser identifiers, and rate rows are deleted after two days.

Our hosting, authentication and database providers can keep their own operational and security logs under their published terms.

Counting page views

This site uses Vercel Web Analytics to count how many people arrive and which pages they open. It sets no cookies and does not follow you to any other site. A visitor is identified by a hash derived from the incoming request, and that identification is discarded after 24 hours — so it can tell that one person opened four pages, and cannot tell that the same person came back tomorrow.

Each page view records the time, the page address, the referring site, filtered query parameters, an approximate location from the request, and the browser, device type and operating system. It is used to see whether anybody is finding the site. None of it is joined to your answers, your account or the identifier that stops one person counting twice.

Where it lives

Supabase is the database and authentication provider, and the site itself runs on a third-party hosting platform. These providers process data under their own security, retention and transfer terms.

How long it stays

A counted first attempt is retained with the crowd dataset. For each browser or account, the server keeps at most 25 non-first attempts per test; an additional retake removes the oldest retained retake. A history that already exceeded that cap before the limit was introduced is pruned the next time that test is retaken.

Anonymous responses have no email or account link and remain with the dataset until the related test or dataset is retired. Browser history and the random browser UUID stay in local storage until you clear them. IP-derived rate rows are removed after two days.

Why it is processed

Test responses are processed to return the result requested, build accurate crowd comparisons and prevent one person from distorting those comparisons. Abuse signals are processed to protect the service, its users and the integrity of the published statistics. The operator relies on providing the requested service and its legitimate interests in operating and protecting that service.

Getting rid of it

Erase what is on this device, on the profile page, clears the local history your browser keeps and the random identifier your answers were stored against. After that, nothing on this device connects you to anything you answered.

One limit, stated plainly, and it is the same one that has always applied to playing without an account: it does not reach the answers already held on the server. Those carry the random identifier and nothing else — no email, no login, no name — so once you have cleared it here, there is nothing left that points from you to them.

Your rights

If you are in the UK or EU you have the right to access, correct, export or erase your personal data, and to object to its processing. With accounts switched off, this site holds no name, email address or login for you, and an answer is stored against a random identifier that your browser generated and that is not derived from anything about you or your device. Clearing your local history on the profile page removes that identifier, which is the only thing linking you to what is stored. You may also complain to the data-protection authority where you live.