Quiet play includes quiet data.

OneGames collects only what is needed to verify access and operate your membership. This page describes what that means in practice.

What we keep

Your email address, your verification status, your subscription state, and a session token. The token is stored only as a SHA-256 hash, so the value in your browser cannot be reconstructed from our records.

Puzzle progress, statistics, and preferences are not sent to us. They live in your browser’s local storage under the onegames:v1 namespace and stay on the device that created them.

Verification codes

Six-digit sign-in codes are deliberately short-lived:

• stored only as a keyed hash, never in plain text
• valid for ten minutes
• invalidated after five incorrect attempts, or after one successful use
• limited to one request per address per minute

Playing without an account

Choosing to play without an account sets a single short-lived cookie and nothing else. No email address is collected, and no record of the session is kept after it expires.

What we do not do

We do not sell personal data, build advertising profiles, or embed third-party advertising trackers. There is no analytics script following you between pages.

Service partners

Resend delivers verification emails and Polar processes subscription payments. Each receives only the information required for that service — your email address, and in Polar’s case the subscription itself. We never see or store your card details.

Removal

Ask us to delete your account data at any time and we will remove your email address, verification records, and session tokens. Clearing your browser storage removes local puzzle progress independently of that.