Privacy

Last updated November 2, 2026

The anonymous tag

• Your browser makes up a random code the first time it needs one and keeps it on your device.
• It is sent only with a leaderboard score or a feedback message. Just visiting or using the tools never sends it.
• The site's developers see a scrambled version of it next to the names and messages it was used with. That lets them tell whether names or messages came from the same browser, and watch for and prevent inappropriate use (bad names, spam, abuse).
• It is not tied to your name, email or address, and it can't be used to work out who you are. If you have a Squiggle account and post a score while signed in, the scrambled tag of that browser is kept with your account, so your scores count towards your name. Clearing your browser's site data gives you a new one.
• Visits are counted anonymously, with no cookies and nothing that follows you between sites (see Visit counts below).

What the site keeps

• Leaderboard entries: the name you type (checked for inappropriate words), the score, the time and the anonymous tag.
• Feedback: the message you send, the page it was sent from, the time, the optional name you type, and the anonymous tag.
• Game scripts (signed in only): what you write on the Submit a game script page, the credit line you choose, your sketches (as pictures), the time, and which account sent it. Only the site's owner reads them. They're kept until the owner deletes them; to have yours removed, email support@squesmos.com.
• Rate limits: to stop flooding, the site counts requests using a scrambled form of your network address. The address itself is not stored.

Squiggle accounts (optional, 13 and older)

You can play, post scores and use every tool without one. If you make an account, the site keeps:

• Your username, which you sign in with and which is your name on the leaderboards. No email address or other personal details are asked for or kept.
• Your password, scrambled (a salted scrypt hash). Nobody, including the people who run the site, can read your password. When you pick one, the first five characters of a one-way fingerprint of it are checked against the public list of leaked passwords at Have I Been Pwned; your password itself never leaves this site.
• Any other leaderboard name you switch to. Names are yours straight away, but the people who run the site can take back one that's unkind or pretends to be someone; you then pick another. If you see a name like that, tell us with the Feedback button or at support@squesmos.com.
• Sign-in housekeeping: when the account was made and last used, a short description of each browser you signed in on (like "Chrome on Mac"), with a scrambled code for it, and the scrambled anonymous tags of the browsers your scores came from.

All of it is stored encrypted. You can see your username and scores in the Squiggle account window, and delete your account there at any time: everything above is erased at once (scores already on the boards stay, under the name they were posted with). Accounts are only for people 13 and older; if we learn one belongs to someone younger, we delete it. There is no password reset, since there's no email to send one to, so keep your password somewhere safe; if you're locked out, write to support@squesmos.com.

Visit counts

To see how the site is growing, it counts page visits with Vercel Web Analytics. It records which page was opened, the site you came from, and your rough country, browser, operating system and device type. It uses no cookies and stores nothing on your device; a visitor is recognised only within a single day, from a scrambled code that is thrown away and can't be traced back to you or followed to other sites. There is no advertising profile and nothing is sold. It also measures how quickly pages load and respond, with Vercel Speed Insights: timings, the page, and your rough device type and country, also with no cookies and nothing that identifies you.

What stays on your device

• Your graphs, setups, designs, drawings, compositions, calculator history and settings are saved in your own browser. They are not uploaded.
• Share links hold the whole thing inside the link itself (after the #), so nothing is stored on a server.
• The arcade's microphone, camera and face-tracking controls work on your device. Nothing from your camera or microphone is recorded or sent anywhere.

Cookies

Visitors get none. If you sign in to an account, the site sets a sign-in cookie (it can't be read by the page's scripts, and lasts 30 days or until you sign out), a small cookie that only tells pages to show the Squiggle account button, and a random code for your browser, kept with your account's sign-in housekeeping. The few other cookies on the site belong to developer sign-in. None of them are used for tracking or advertising.

Services the site uses

• Hosting by Vercel, and storage of scores, feedback and Squiggle accounts by Supabase (in the United States). Like any website, the host sees your network address when a page loads.
• Have I Been Pwned's password list (see Squiggle accounts): it is sent only the first five characters of a one-way fingerprint of a new password, never the password itself.
• Some code libraries (and the arcade's face-tracking model) load from public content networks (jsDelivr, cdnjs, unpkg and Google), which see your network address when they send those files.
• Visit counts by Vercel Web Analytics and page-speed timings by Vercel Speed Insights (see above). No advertising or social media trackers, and no Google Analytics.

Young visitors

Squesmos is for everyone, and nobody needs to sign up. Accounts are only for people 13 and older, and we don't knowingly collect personal information from children under 13; if you think a child under 13 has made an account, email us and we'll delete it. If you're young, please keep your leaderboard name and feedback free of your real name and contact details. If something personal ends up in a score name or a message, use the feedback button and ask for it to be removed.

Questions or removal

Use the Feedback button on any page. Tell us what you want removed and where it appears, and it will be taken out. You can ask what we hold about you, have it corrected or deleted at any time; account holders can delete their account themselves in the Squiggle account window. For more serious issues, complaints or technical difficulties, email support@squesmos.com.

Changes

If this changes, the date above changes with it.