What this covers
This policy covers baker.games and every site under it, including churn.baker.games and spellbox.baker.games (together, "the sites"). Baker Games is run by one independent developer, referred to here as "we".
The short version: you can play every game without giving us anything. If you choose to make an account, we keep what's needed to sign you in and save your progress. Some pages may show ads from Google, and baker.games uses Google Analytics to count visits. Both use cookies as described below. We don't sell personal data.
Information we collect
When you just browse or play
We don't ask for any personal information to browse the sites or play the games. Our hosting provider, Cloudflare, processes standard technical data for every request (IP address, browser type, the page requested, and the time) to deliver the sites and protect them from abuse. Churn uses Cloudflare Web Analytics, which counts visits without cookies and without tracking you across sites.
The games save settings and progress in your browser's local storage, such as volume, graphics quality, and save slots. This stays on your device. If you sign in to Spellbox, your save slots are also kept on our server so they follow you between devices.
If you make an account
- Spellbox: a username, your email address, and your password, which we store only as a salted hash and never in readable form. We also store your save slots, your run history and statistics, and your leaderboard scores.
- Churn: signing in uses Google. We receive and store only Google's anonymous account identifier. We don't receive your email, contacts, or anything else from your Google account. We store a display name (generated for you when you first sign in), your game history and placements, and a sign-in cookie that holds a random token. The server keeps only a one-way hash of that token.
Usernames, display names, and leaderboard results are public: other players can see them.
Multiplayer
When you join a Churn room, the name you type is shown to the other players in that room. If you're signed in, room games are recorded in your history, just like solo games.
The contact form
If you send a message through the contact form, we receive what you write, the email address you give for a reply, your name if you add one, and your browser's user-agent string (its name, version, and operating system), which helps with bug reports. It arrives as an email, and we keep the conversation so we can reply and follow up. We don't add you to any mailing list. The form is protected by Cloudflare Turnstile, which checks signals from your browser to tell that a person, not a bot, is sending it, usually without showing you a puzzle.
Analytics
baker.games uses Google Analytics to understand how the site is used: which pages are visited, how visitors found them, the type of device and browser, and an approximate location (country or city) worked out from the IP address. Google Analytics doesn't log or store IP addresses. It sets first-party cookies, which last up to two years, so it can tell new visits from returning ones. We see this only as aggregate reports, not as a record of any one person. The game sites, churn.baker.games and spellbox.baker.games, don't use Google Analytics.
If you're in the European Economic Area, the United Kingdom, or Switzerland, Google Analytics doesn't set or read cookies unless you agree in Google's consent message, the same one used for ads. Until then, the page may send Google basic signals without cookies, such as that a page was viewed, that aren't linked to you across visits. Anyone can opt out entirely with Google's Analytics opt-out browser add-on.
Advertising and cookies
The sites use Google AdSense to show ads, which helps pay for running the sites. Third-party vendors, including Google, use cookies to serve ads based on your previous visits to this site and other sites. Google's advertising cookies let it and its partners show you ads based on your visits to the sites and/or other sites on the internet.
- You can opt out of personalized advertising in Google's Ads Settings.
- You can also opt out of some third-party vendors' use of cookies for personalized advertising at aboutads.info.
- To learn how Google uses information from sites that use its services, see How Google uses information from sites or apps that use our services.
If you're in the European Economic Area, the United Kingdom, or Switzerland, you'll be asked for consent before personalized ads or their cookies are used, through Google's consent message. You can change your choice at any time from the privacy link that message adds to the page. Without consent, Google may still show limited, non-personalized ads.
Inside the games, any ads appear only at natural breaks, such as between rounds or after a run, or as rewards you choose to watch. They're never shown on top of active gameplay.
Other services we rely on
- Cloudflare hosts the sites, stores account data, protects the contact form with Turnstile, and delivers its messages. See Cloudflare's privacy policy.
- Google provides Churn's sign-in, AdSense, and Google Analytics. See Google's privacy policy.
- Google Fonts serves the typefaces on baker.games, so your browser requests them from Google's servers.
How we use information
We use what we collect to run the games, keep you signed in, save your progress, show leaderboards, answer email, fix bugs, and keep the sites secure. We don't sell or rent personal information, and we don't share it except with the service providers listed above, which process it on our behalf, or when the law requires it.
How long we keep it
Account data is kept until you delete your account or ask us to. Sign-in sessions expire on their own. Server logs at Cloudflare are kept for a limited time under Cloudflare's own policy.
Your choices and rights
- You can play without an account, and sign out at any time.
- You can clear the games' local data by clearing site data in your browser.
- You can ask for a copy of your account data, ask us to correct it, or ask us to delete your account and everything linked to it, through the contact form (choose "Privacy or my account" as the topic) or by email to hello@baker.games.
- Depending on where you live (for example, under the GDPR in Europe or the CCPA in California), you may have more rights. We'll honor any valid request regardless of where you are.
Children
The sites aren't directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has made an account, tell us and we'll delete it.
Security
All traffic uses HTTPS. Passwords and sign-in tokens are stored only as one-way hashes, and Churn runs under a strict content security policy. No system is perfectly secure, but we take care with what we hold, and we hold as little as we can.
Changes to this policy
If this policy changes, we'll update the date at the top of this page. Significant changes will also be noted in the devlog.
Contact
Questions about privacy: use the contact form or email hello@baker.games.