What we collect
A random player ID stored in the rp_player cookie, the answers you submit, the time you take, your score, and a nickname if you set one. We also store a short-lived device fingerprint derived from your browser's user agent, language, timezone, and screen size, combined with a daily salt. It is used only to stop one device from entering the daily leaderboard twice. We do not use it to track you across other sites.
We store a truncated network prefix (for IPv4, the first three octets) for abuse prevention. It is kept for 30 days and then cleared. Full IP addresses are not stored in our game tables.
Cookies
rp_player: your random player ID, one year, HttpOnly.rp_unlock: proof of an Unlimited purchase on this device, one year, HttpOnly, signed. It contains no email address.- Advertising and analytics cookies, only if those features are enabled and, for visitors in regions that require it, only after consent.
Purchases
If you buy Unlimited, the checkout is hosted by Waffo Pancake, the merchant of record. Waffo collects your email and payment details and handles tax and receipts. We receive the email, order ID, amount, currency, and status so we can grant and restore your purchase. We use the email only for the purchase and for restore links, not for marketing. Restore links contain a one-time token; we store only a hash of the token.
Analytics and advertising
If analytics is enabled, we record page views and a small set of game events such as puzzle starts, finishes, share clicks, and paywall views. Event payloads never include your raw answers or your email. If advertising is enabled, ad slots are served on content pages and after results, never during a round. Devices with an active Unlimited purchase do not load ad scripts at all.
Your choices
You can clear the player cookie at any time; you will appear as a new guest, and your previous practice and daily records will no longer be linked to you. You can ask us to delete a player record or a purchase record by contacting us. We keep minimal server logs and webhook payloads for security and reconciliation, and delete them on a rolling schedule.
Children
The game is suitable for general audiences but is not directed at children under 13. We do not knowingly collect personal information from children.
Contact
Privacy questions: hello@rarestpick.com.