operator and contact in config.js before launch.Last updated
Warmer is run by (the "controller" for UK GDPR / EU GDPR purposes). Contact for any privacy question or request: .
| Data | Where it lives | Why |
|---|---|---|
| Anonymous player ID, display name (optional), XP, streak, achievements, cosmetics, settings, in-progress game, daily results and your routes | Your browser's local storage on your device | To provide the game you asked for. This is strictly necessary storage, so we do not show a cookie banner. We set no cookies. |
| Anonymous player ID, display name, XP, daily scores (clicks, time, score), the list of article titles you visited in a daily puzzle, league codes you join | Our server, only when you post a score or join a league | To show leaderboards, leagues, rank colours and the "path map" of how routes compare. Legal basis: performance of the service you request and our legitimate interest in running fair leaderboards. |
| Challenge links you create | Inside the link itself (nothing is stored by us) | To let a friend play the same puzzle against your result. |
| If you buy the optional Supporter pack: the order ID and your anonymous Player ID | Our server, received from our payment provider | To unlock your purchase and to keep the financial records the law requires. Your name, email, address and card details are handled by the payment provider, not by us. |
| Anonymous usage statistics: for each day you play, one record with your anonymous Player ID and yes/no flags (started a puzzle, solved it, shared it). A separate aggregate counter holds visits and, from Cloudflare, your country | Our server, unless you switch it off in Settings | To see how many people play, whether they come back, and which puzzles are unfair, so we can improve the game. It contains no name, email or IP address, and is deleted with your other online data. Legal basis: our legitimate interest in running and improving the service; you can object at any time by switching it off. |
| Aggregate visit statistics (page, country, device and browser type, referrer), only if enabled | Cloudflare Web Analytics | To see how many people use the site and which pages work. It sets no cookies, uses no local storage, does not fingerprint you and is not linked to your Player ID. Legal basis: our legitimate interest in running and improving the service. |
| IP address and basic request logs | Our hosting providers | Security, abuse prevention and rate limiting. Kept only as long as the provider's standard log retention. |
We do not ask for your name, email, location or date of birth, and we do not knowingly collect any of them. Please do not put personal information in your display name or league names, as these are visible to other players.
We do not sell your data and we do not use it for advertising profiles.
Under UK GDPR / EU GDPR you can ask to access, correct, erase, restrict or export your data, and object to our processing. Because we do not know who you are, the easiest way is self-service: open Settings → Delete my online data, which removes your name, scores, routes and league memberships from our server. Records of a purchase are the one exception, because we must keep financial records. You can also email us with your Player ID (shown in Settings) and we will act on it. Your local data never leaves your device, so you can clear it yourself in your browser settings. If you are unhappy with how we handle your data you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.
Warmer is a general-audience word-and-knowledge game and is not directed at children under 13. If you are under 13, ask a parent or guardian before using leaderboards or leagues, and never use a real name.
Traffic is encrypted in transit (HTTPS). Your Player ID acts like a password for your online data, so keep your backup code private.
If we change this policy in a meaningful way we will update the date above and, where required, tell players in the app.