Privacy

The short version

Lockwright has no accounts and no advertising. Your progress is saved in your own browser and never uploaded. If you accept in the cookie banner, the site uses Google Analytics cookies to count visits and see which pages are used; if you decline, none are set. Beyond that, two things can leave your device: an optional, anonymous request that asks whether you look stuck, so the game can offer a hint, and, only if you choose to add your time, a leaderboard entry with the name you type.

What is stored on your device

The game keeps one entry in your browser's local storage (lockwright:save): which rooms you have escaped, your best times and stars, any unfinished run, and your settings. It stays on this device, in this browser, and is not sent anywhere. It is needed for the game to remember you between visits, which is why no consent banner is shown for it.

Two smaller entries support the leaderboard: lockwright:board-tokens (the one-time tokens of your recent runs, so a run can still be added after a reload) and lockwright:nickname (the name you last used, so you do not have to type it again). One more, lockwright:consent, remembers your answer to the cookie banner.

To delete it, open Settings and progress on the room select and choose Reset all progress, or clear this site's data in your browser.

Hint suggestions

After a while without progress, the game may ask its own server whether you seem stuck. The request contains only game data: the room, the stage, how long you have been on it, how many hints you have seen, the last few things you interacted with and their outcomes, and how far you walked. It contains no text you typed, no name, and no identifier for you or your device.

The server turns that into a short description of the situation and sends it to TypeSafe (their Jev model), which answers with a judgement such as "stuck" or "exploring". TypeSafe receives that description and nothing else; it does not receive your IP address. The answer is used once and not stored.

You can turn this off: Settings and progress → Hint suggestions. With it off, no request is made, and the game still offers hints on a simple timer.

Leaderboard

When you start a run, the game asks its server for a one-time token for it. That request contains the room and a random id made for this run, nothing about you. The token is what lets a finished run be added once, and it is deleted about a week later.

Your time goes on the leaderboard only when you press Add my time. The entry holds the name you typed, the room, your time and its parts (hints and alarms), your stars, the date and the run id. The name, time, hints, stars and date are shown publicly on the leaderboard; use a nickname, not your full name. No IP address, device identifier or email is stored with it.

Entries are stored in a database run by Supabase for this game. To have an entry removed, email the address below with the name, room and date.

Analytics (Google Tag Manager and Google Analytics)

The site loads Google Tag Manager, a Google script that in turn loads Google Analytics 4. Google Analytics records which pages you visit, roughly where you are (country and city, worked out from your IP address), your device type, browser and screen size, the site that sent you, and how long you stay. It does not receive your game progress, the name you put on the leaderboard, or anything you type.

The banner asks first, and Google Analytics sets cookies only if you choose Accept. They are _ga and _ga_<id>: a random identifier, not your name or email, used to tell visits apart, and they expire after up to two years. If you decline or have not answered, no cookies are set and no identifier is kept, but Google may still receive a basic signal that a page was viewed (time, browser, approximate location) and use it to estimate total visits. This is Google's Consent Mode. Google Analytics 4 does not log or store IP addresses; it uses them only to estimate location and then discards them. The data is processed by Google, which may happen outside your country, under Google's privacy policy. The game uses it only for visit statistics: not for advertising, and it is not combined with any other data.

You can change your answer at any time; declining after accepting also deletes the Google Analytics cookies. A content blocker or Google's Analytics opt-out add-on blocks it entirely. The game works the same either way.

Cookie settings

Hosting and IP addresses

The game is served by Vercel. Like any web host, Vercel sees your IP address and the pages you request, and keeps standard server logs for a limited time for security and operations. The hint and leaderboard requests are also rate-limited by IP (so that a script cannot run up a bill or flood the board); the address is used for that check and not kept by the game.

What the game does not do

• No advertising, and no third-party scripts, fonts or cookies other than Google Tag Manager and, if you accept, Google Analytics.
• No accounts, and nothing to sign up for. The leaderboard asks only for a nickname.
• No selling or sharing of data: there is nothing to sell.

Contact

Questions about any of this: kushtriimhyseni@gmail.com. If this page changes, the date at the top changes with it.