Last updated 4 November 2026
Privacy policy
Clackshot is designed to collect as little as possible. You never create an account and we never ask for your name, email or contact details to play.
Stored on your device
Your settings, pilot name, personal bests, stats, pilot rank, cosmetic loadout, streak, best typing-test score and any runs waiting to be submitted are kept in your browser's local storage. You can clear them at any time from Settings or by clearing site data.
Stored on our servers
- An anonymous device ID. When you play an online run, our backend (Supabase) creates an anonymous session for your browser. It is a random identifier, not linked to your identity, used to own your scores and to prevent abuse.
- Nickname and cosmetic choice you set, shown publicly on leaderboards and share cards.
- Run data: the seed, your keystroke timings and the resulting score, WPM, accuracy and wave. Keystroke logs are used only to verify that a score is genuine and are never shown publicly.
- IP address, processed transiently to rate-limit requests and stored only as a one-way hash for a short time.
- Share links you create, which point to a verified run.
Advertising
Clackshot may show ads served by Google AdSense on the home, results, leaderboard and share pages, and in the strip below the playfield on desktop (never on top of the game). Google and its partners may use cookies or similar technologies to serve and measure ads, and to personalise them where you allow it. Visitors in the EEA, the UK and Switzerland are asked for consent through a Google-certified consent message before personalised ads are shown. You can learn more and opt out of personalised advertising at adssettings.google.com, and read how Google uses data at policies.google.com/technologies/partner-sites.
Service providers
We use Supabase (database, authentication and server functions) and Vercel (website hosting) to run the game, and Google AdSense for advertising. They process data on our behalf under their own security and privacy commitments.
Retention
Verified runs and share links are kept so leaderboards and links keep working. Keystroke logs may be deleted after verification windows close. Rate-limit records expire within a day. You can ask us to delete your server-side data at any time.
Children
Clackshot is a family-friendly game but it is not directed at children under 13, and we do not knowingly collect personal information from them. Nicknames should not contain real names.
Your rights
Depending on where you live you may have rights to access, correct or delete your data, or to object to processing. Contact us at hello@clackshot.com with your nickname and we will help.
Changes
If this policy changes we will update the date at the top of this page.