Privacy policy

Last updated: 2026-11-13

Playing as a guest

You can play everything on this site without an account. Solo rounds and Pass & Play run in your browser. In private online rooms, the nickname you type, your avatar and your answers go to our server for the length of the game so everyone in the room sees the same game. Rooms are deleted after 30 minutes without activity.

Signing in with Google

Signing in is optional. It lets us keep your virtual prize money and put you on the Krillionaires list. When you sign in, Google sends us a signed token that proves who you are. From it we keep only one thing: Google's ID number for your account (a long string that is not your e-mail).

We also store:

• the nickname and pixel avatar you choose (shown publicly on the Krillionaires list),
• your virtual prize money balance and lifetime winnings,
• a game record for every change of prize money: time, game, category, the answer you typed, whether it was right, and the amount.

We never store your e-mail address, your real name or your Google profile picture. We don't use Google to read anything else from your account.

To keep you signed in we set one cookie with a signed session (HttpOnly) and one small cookie that only says "signed in", for 60 days. Signing out removes both.

Deleting your account

Open your account page and choose Delete my account. This deletes your account, nickname, balance and every game record linked to you, and removes you from the Krillionaires list (the list refreshes within about a minute). Anonymous counts of how often each answer has been given are kept, because they are not linked to you.

Services we use

• Cloudflare hosts the site, the game server and the database (Workers, Durable Objects, D1). It processes standard request data such as IP addresses to deliver pages and protect against abuse. In online rooms we use your network address only during the game, to stop one person from collecting the champion prize with several accounts; it is not saved to your account.
• Google Sign-In (Google Identity Services) handles the sign-in button. Google's script loads only when you choose to sign in. See the Google privacy policy.
• Google Analytics 4 tells us which pages are visited, roughly where visitors come from and which devices they use. It sets cookies and collects technical data such as your IP address, browser and pages viewed. See the how Google uses data from sites that use its services.
• Microsoft Clarity shows us how pages are used (clicks, scrolling and anonymised session replays) so we can fix layout and game problems. It sets cookies and masks text you type. See the Microsoft privacy statement.
• Both load only on pufferpartykrillion.com, a few seconds after the page opens. You can block them with your browser's settings or an extension; the site and the game keep working. Neither is linked to your account.

Advertising

We don't show ads at the moment. If that changes, we will update this page first.

Children

The site is a general-audience game. Don't sign in if you are under 13, or younger than the minimum age for a Google account where you live.

Contact

Questions about privacy: contact us.