Privacy

• Your full name, username and email address.
• Your date of birth. It is never shown on your profile, never included in a contest result or export, and is used for one thing: deciding whether you are old enough to make your city or school public.
• Your password, stored only as an argon2id hash. We cannot read it.
• Your orders: what you bought, the amount, the bKash transaction ID you gave us, and when it was approved.
• Your puzzle attempts, times, hints used and XP.
• Sign-in sessions, including the browser and IP address they were created from, so you can tell your own sessions apart from someone else’s.

Your profile is public: your full name, username, XP and, later, your rating and contest history. This is deliberate — leaderboards and challenges do not work anonymously.

If you are under 18, your city and school stay private whatever your settings say. The check runs when the page is built, not only when you save your settings, so they cannot be published by accident.

There is no private messaging between users.

Anyone can register. We deliberately keep as little about a child as the site can work with: a name, a username, an email address and a year of birth’s worth of age.

If you are a parent and would like your child’s account closed and its data deleted, write to us and we will do it.

Email is sent through Amazon SES, which handles the message in order to deliver it. Payment happens in bKash, outside this site: we see only the transaction ID you type in and the number you sent from.

We do not sell anything about you, and there is no advertising or third-party analytics on this site.

Your account for as long as you want it. Orders are kept after an account closes, as financial records. Everything else goes with the account.

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete your account. Your username and date of birth cannot be changed from your settings — write to us and we will change them for you.