Privacy policy

Last updated: July 24, 2026

whatthecountry is a free game. It collects the minimum needed to run: your own game data never leaves your device unless you choose to sign in, and the only things sent otherwise are a set of anonymous counters that cannot describe you and a cookieless count of page views.

Playing without an account

Everything is stored in your browser's localStorage: today's run, your daily history, streaks and stats, and which release notes you've seen. None of it is sent to a server. Clearing your browser data erases it.

Anonymous counters

The game keeps a handful of aggregate counters so its difficulty and scoring can be tuned against what actually happens rather than guesswork — for example, how often a hard puzzle gets solved, or how many people finish all six. Concretely, the server stores rows of the form date, event, bucket, count and does nothing but add one to a number.

• There is no row about you. Nothing is stored per player, per session or per device: no account id, no device id, no IP address, no page URL, no referrer. There is nothing in the table to group by, so it cannot be turned back into individuals — not “we choose not to”, but there is nothing there to do it with.
• No cookies. The counters go to this site's own server, with no cookie and no stored identifier of any kind.
• Opt out and it stops. If your browser sends Global Privacy Control or Do Not Track, nothing is sent at all.

Page views

The counters above deliberately record no page addresses, which means they cannot say which pages people actually read or how anyone found the site. For that, the site uses Vercel Web Analytics, run by the company that hosts the site.

• No cookies, and nothing kept on your device. It sets no cookie and writes nothing to your browser storage.
• What it records. The page you viewed, the referring site if you came from one, and coarse details of your country, browser, operating system and device type.
• How a visit is counted. Rather than an identifier, it derives a one-way hash from the incoming request. The hash is rotated every day and cannot be reversed, so repeat visits cannot be linked across days and no profile is built. Your IP address is used to compute it and is not stored.
• No cross-site tracking and no ads. The data is used only to see how this site is doing. It is not sold or shared, and it follows you nowhere else.
• Opt out and it stops. Global Privacy Control and Do Not Track switch this off too — the script is never even loaded.

If you sign in

• Account data. With Google sign-in: your name, email address and profile picture. With email/password: your email and a hash of your password (the password itself is never stored).
• Daily results. One row per day you complete while signed in — score, puzzles solved, time, and your per-puzzle guesses — used to rank you on the daily leaderboard. Your display name is shown there.
• Leagues. If you create or join a private league: the league's name and the fact that you're a member. Your display name and daily results are visible to the other members of that league. Leaving a league removes your membership immediately.
• Sign-in cookies. A session cookie keeps you signed in. There are no advertising or cross-site tracking cookies.

What is not collected

No ads, no selling or sharing of personal data, no cross-site tracking, no advertising or tracking cookies. The game itself runs entirely in your browser — guesses in free play are never transmitted anywhere.

Deleting your data

You can delete your account and every stored result yourself from account settings — the deletion is immediate and permanent. Device-local data is yours to clear via your browser. For anything else, email jesper.kiledal@gmail.com.

Questions

Email jesper.kiledal@gmail.com. If this policy changes in a way that matters, it will be announced on What's new.