Privacy & data

TLD GUESSR is a fan-made game operated by henhau. For privacy questions, use the issue / feature request page.

Your profile

Browsing alone keeps your guest identity in a browser cookie without creating a saved profile. We save a profile when you start an expedition, submit a screenshot or report, or save a name. For saved profiles, we store your username, games, scores, rating, streaks and activity times. Account passwords are stored as password hashes, not readable passwords. Email is optional and is used for password recovery or replies you request. Your username, badges, rank and leaderboard results are public. Recovery codes are stored only as hashes.

Cookies & preferences

Essential cookies keep you signed in or identify your guest profile. They last up to 400 days and renew while you use the site. Clearing guest cookies can lose access to your guest history. Browser storage remembers settings such as pausing the background video. We do not use advertising trackers.

Screenshots & reports

Submitted images are resized and stripped of metadata. Pending and discarded submissions are private to administrators. Approved images and contributor credits appear publicly in the game. Reports and replies are private to their author and administrators. If you request email, delivery uses Resend; password recovery emails use it too.

Site operation

We record visited page paths, referring domains, device category and visitor identifiers to understand traffic, including visits without a saved profile. Detailed traffic is retained for 180 days. Basic error counts and page categories are retained for 30 days; client error reports contain no form contents, error messages or stack traces. IP addresses are used for abuse prevention and may appear in authentication records and hosting logs. Hosting and email providers process the information needed to operate their services.

Deleting your data

You can delete your account or guest profile from Account settings. This removes login details, personal game history, reports, traffic records and unapproved submissions. Approved screenshots remain available without your contributor name. Administrative activity is anonymized. Deleted data may remain in backups until they expire; automated local backups keep the latest seven backup copies by default.

Guest history can be transferred when creating an account. Contact henhau through the report form for other access, correction, export or removal requests.