No tracking. One cookie, only if you sign in.

The short version

• No cookies, unless you sign in. Then one session cookie, and nothing else.
• No ads, no tracking pixels, no social buttons, no third-party analytics.
• One anonymous count when you finish a daily puzzle. No ID, and you can switch it off.
• No third parties in the pages: the fonts, scripts, and images all come from our own site. The sign-in email goes out through Resend.
• Your game results stay on your device, unless you sign in to sync them.

What the site stores on your device

An offline copy. The app saves its own files and the pages you open in your browser (with a service worker), so it opens fast and works with no signal. It holds our pages, not information about you.

Your game results. When you play, your results and streaks stay in your browser (local storage). They don't leave your device, and we can't see them.

Your language. If you pick a language in the menu, your browser remembers it (local storage), so that the home page opens in that language next time.

Your play count dates. To send at most one count a day, your browser keeps the date of your first count for each game and the date of the last one (local storage). If you switch the count off, it remembers that, and it keeps no dates.

These only make the features you use work. To delete them, clear the site data for Fantasista in the settings of your browser, or uninstall the app.

Your sign-in. If you sign in, your browser remembers that you did, the last day it synced each game, and the results from your other devices (local storage). The session cookie is in the next section.

The play count

When you finish a daily puzzle, your browser sends us one count. It holds four things: the game, the date of the puzzle, the date of your first count for that game on this device, and a yes or a no: is this your first comeback in the 7 days after that first day?

We add 1 to a total, and that's it. No cookie, no ID, no IP address, no time of day. We can't tell who played, and we can't link two counts to the same person.

Why: it tells us how many players come back within a week. If they don't, the game needs work, not you.

Your browser sends at most one count for each game and each day. It sends no count if you switch the count off here, or if your browser sends Global Privacy Control.

If you sign in, the same request carries your session cookie and your result of the day, so that the result goes to your account. The count still goes into the anonymous total: we store no link between the count and your account.

Your answers and your reports

When you finish a daily grid, the same request also sends your correct answers, so that the result can show how many players picked the same ones. Each answer adds 1 to a total for its cell. No ID, and no link to your count: the answers go even with the count off, because without them there are no percentages. Your browser keeps the percentages of each grid with your game.

If you report a wrong answer, the report holds the puzzle, the answer, your message, and the day. No email, no name: we can't write back, so we just fix the data, with a source.

The optional account

You can play everything with no account. An account keeps your stats and streaks on all your devices. If you sign in, we keep only what that needs: a random account ID, a scrambled form of your email address (a keyed hash, so we can't read the address back from it), the day you signed up, your sessions, and the result of each daily puzzle you finish (the game, the date, and won or not). No name, no password, no profile, no mailing list.

The cookie. Signing in sets one cookie, "session". It holds a random token, and your browser sends it only with the requests to our own API. It lasts a year, or until you sign out. It only makes the sign-in you asked for work, so there is no consent banner.

The email. To send you the 6-digit code, we pass your address to Resend, the service that delivers the email. We don't store the address, and we send you nothing else.

Delete it. On the sign-in page, tap "Delete my account": we delete the account, its sessions, and its results at once. The anonymous counts of the games stay, because nothing links them to you. The results on your device stay too: clear the site data to remove them. Or write to hello@fantasista.games.

What our host sees

Cloudflare hosts the site. To deliver the pages and protect the site from attacks, Cloudflare processes technical data such as your IP address and the type of your browser. We don't use this data to identify you or to track you. Read the privacy policy of Cloudflare.

If you write to us

If you email hello@fantasista.games, we use your address and your message only to answer you. We don't share them with anyone.

Your rights

You can ask us which personal data we have about you, and ask us to correct it or delete it. Write to hello@fantasista.games. You can also complain to a data protection authority.

Who runs Fantasista

Fantasista is a personal project, not a company. The person who runs it is responsible for the site and for your data. Contact: hello@fantasista.games.

If this changes

If we ever add ads, or analytics that can tell you apart from other players, we update this page first, and we ask for your consent where the law requires it.