Privacy

Information in this browser

Your light/dark preference is stored under the localStorage theme key. Without a saved choice, we use the system setting. We store local best scores for each rules version in localStorage. Games still work if storage is blocked. Your default nickname is also kept in localStorage without an expiry until you change it. This does not reserve a public weekly name; availability is checked on save, and renaming keeps your records. Clearing browser data removes your nickname and local scores. They do not sync to another browser or device. When storage is blocked, memory lasts only in the current document and reopening may change the nickname.

Weekly nicknames and records

Rankings are optional. Anyone can see your nickname, weekly best score and rank for each game, Sneak & Play survival time and Burrito Rush completed orders. A nickname can still identify a person; avoid real names, schools and contact details. We do not collect email addresses or accounts.

Ownership of your records

A weekly ownership key lives in a browser cookie; the server stores only its hash. We do not link devices or recover keys. Clearing or blocking cookies prevents further updates to your record, while games and public rankings remain available. Inputs used to verify scores are discarded after validation. Nicknames, keys and input histories are not sent to analytics services.

Reset, deletion and backups

Public rankings reset every Monday at midnight, Korea time. Previous weeks’ nicknames, ownership hashes, scores and run information are deleted from the database within one hour. Nicknames can be chosen again next week. Access to recovery backups is restricted; backups are deleted after at most seven days. Restoring a backup first deletes previous weeks’ records. We do not publish past rankings.

Visits and play statistics

Our self-hosted Plausible measures public home, game introduction, play and ranking page visits and new-run starts by game, plus Burrito Rush finishes and90-second clears. It uses no analytics cookies; request processing uses IP and browser information. Queries, fragments and referrer paths are removed. Nicknames, individual scores, ownership keys, run details, inputs and messages are not sent. Privacy, API, development and unknown routes are excluded.

Idea messages

When you submit the message form, your entered name, message, current content URL and service URL https://play.yellowbox.dev are sent to the administrator through Telegram. Editing this name does not change your game nickname, and message contents are not sent to analytics.

Advertising

Home and introduction content with ads enabled may use Google AdSense, which may process cookies and device information. Gameplay and result screens do not load ad scripts. Without ad configuration, no ads appear.