Privacy policy

Last updated 2026-10-29. This page describes what the game and this website do with data, in plain words.

Short version

• No ads and no third-party trackers.
• No cookies. The game stores your save on your device (local storage or a file).
• An account is optional. If you claim one, your name and a password hash are stored on our server.
• Play counters are anonymous and carry no personal id.

What is stored on your device

Your save, settings and the guest session token. In the browser this is local storage. You can clear it any time in your browser settings, which also removes your local progress.

Accounts and cloud save

When the game starts, a guest account is created. If you claim a name and password, we store the name, a salted hash of the password (never the password itself), your cloud save copy and your leaderboard row (name, depth, weapon, a few statistics and the game version). The server also records when you last played, your platform, the app version and your country as reported by our hosting provider. We do not store your IP address in your account.

Anonymous play counters

The game sends counters such as runs played, depths reached, bosses faced and errors. They have no player id, name or save content. They help us balance the game and find bugs.

Contact messages

If you use the contact form, the name, email, topic and message you type are stored and sent by email to the developer. An anonymized hash of your IP address is kept for a short time to limit spam. We use your email only to reply.

Hosting and third parties

The site and the game server run on Cloudflare (Pages, Functions and D1). Cloudflare processes requests as our hosting provider. Contact form emails may pass through an email delivery service. We do not sell data.

Your choices

• Play as a guest without claiming a name.
• Ask us to delete your account and leaderboard row through the contact form (choose "Privacy or data request"). Include your player name.
• Ask for a copy of the data linked to your account the same way.

Children

Nrisca is not aimed at children under 13 and does not knowingly collect their personal data. If you think a child gave us data, contact us and we will remove it.

Changes

If this policy changes, the date at the top changes too.