Privacy and cookies
Short version: CritteRNG has no analytics and no tracking. It keeps what it needs to run your account and your collection.
Who is responsible
[OPERATOR NAME AND POSTAL ADDRESS]. Contact for anything below, including access, correction and deletion of your data: [CONTACT EMAIL].
What we store
- Your account. If you sign in: your email address (used for sign-in links and account recovery), your display name, and a password hash if you set a password. If you sign in with Google, GitHub or Discord, we receive the identifier and email address that provider shares with us. Without signing in you get an anonymous guest account that has no email.
- Your game. The animals you pulled and when, your collection, points, level, streak, and your friends if you add any. Names and scores show on leaderboards.
- Technical data. Your IP address is used briefly to limit abuse (for example too many sign-in attempts) and may appear in server logs.
We keep this as long as your account exists. To have it deleted, write to the address above.
Why (legal basis)
Running your account and the game is needed to provide the service you asked for (GDPR Art. 6(1)(b)). Abuse protection and security are our legitimate interest (Art. 6(1)(f)). Advertising cookies are only set if you consent (Art. 6(1)(a)); you can withdraw consent at any time.
Cookies and similar storage
| Name | What for | Kind |
|---|---|---|
zd_session (cookie) | Keeps you signed in. Expires after 30 days. | Essential, no consent needed |
zd:theme (browser storage) | Remembers your light or dark choice. | Essential preference |
zd:c (session storage) | Remembers the name from a challenge link you opened while you sign in; cleared when you close the tab. | Essential, only used if you open such a link |
zd:consent (browser storage) | Remembers your cookie choice. | Essential |
| Google ads (cookies from Google) | Only if ads from Google are switched on for the site and you accepted them: Google can set cookies and use data to show and measure ads. | Optional, only after your consent |
You can change your cookie choice at any time with Cookie settings in the footer. If we show our own promos instead of Google ads, they load no third-party scripts and set no cookies.
Who else gets data
- The animal photos come through our own server, so your browser does not contact iNaturalist, Wikimedia or GBIF.
- Our hosting provider processes requests for us. Sign-in emails go through our email provider. Sign-in with Google, GitHub or Discord sends you to that provider under their own policy.
- Google, only for ads and only if you accepted them.
Your rights
You can ask us for access to your data, to correct or delete it, to restrict or object to processing, and to receive it in a portable format. You may complain to your data protection authority.
Animal data and photos: see the credits at the bottom of the main page (iNaturalist, Wikimedia Commons, GBIF, Catalogue of Life and others), each under its own licence.