Privacy policy

Scope and guiding principle

This privacy policy applies to the public Swordkoban website and browser game at swordkoban.owwi.net. The game is designed to work without an ordinary player account. Progress and preferences are kept in the browser where possible, while the server supplies published game content.

Administrative content-management routes are restricted and operate separately from ordinary gameplay. This policy describes both public use and the limited server-side systems needed to operate the game, but it does not turn a visitor into a registered player profile.

Information stored in your browser

Swordkoban uses localStorage to remember completed level identifiers, the best star result recorded for each completed level, the selected hero, and interface preferences such as motion and high contrast. These values stay in the browser profile on the device where you play. They are read when the app starts so the adventure can restore your local state.

LocalStorage does not expire on a fixed schedule. You can remove it through your browser’s site-data controls. Clearing site data, using a private browsing session, switching browser profiles, or changing devices can remove or separate this progress. Swordkoban does not currently synchronize ordinary player progress to a server account.

• Completed levels: stored as level identifiers.
• Level stars: stored as the highest local star value for each level.
• Selected hero: stored as the chosen hero identifier.
• Preferences: stored for motion and high-contrast behavior.

Google Analytics 4

Swordkoban uses Google Analytics 4 with measurement ID G-DJBWE118SL to understand whether public pages load successfully and how the site is used in aggregate. The Google tag may process information such as page URL and title, referrer, browser and device characteristics, interaction timing, technical events, and an approximate geographic area derived from network information. Google Analytics may set or read identifiers in cookies, including identifiers commonly beginning with “_ga”.

Analytics information is processed by Google under Google’s terms and privacy documentation and according to the settings of the Swordkoban Analytics property. Retention in Google Analytics follows the property configuration rather than the browser-local progress rules above. Browser privacy features, content blockers, or cookie controls may limit Analytics collection.

Advertising and Google AdSense

Swordkoban is prepared to use Google AdSense, but advertising may not be active on every route or at every time. If Google ads are displayed, Google and participating advertising partners may process advertising-request information such as IP address and user agent, and may use cookies, local storage, pixels or web beacons, and other online identifiers to select, limit, deliver, secure, and measure ads. Depending on region, consent, account status, and ad settings, an ad may be personalized or non-personalized.

Third-party advertising vendors, including Google, may use cookies to serve ads based on a visitor's earlier visits to Swordkoban or other websites. Google advertising cookies let Google and its partners select ads using those visits. Visitors can manage or opt out of personalized Google advertising through Google Ads Settings and can review participating-vendor choices through the Digital Advertising Alliance. When additional vendors or ad networks are enabled, the consent interface identifies the current providers and gives access to their information.

Ads are intended only for pages with substantial publisher content. Administrative screens, gameplay screens, error states, authentication, transitional dialogs, and other low-content utility views are not intended as ad placements. Before advertising that requires consent is enabled in a covered region, Swordkoban must provide the applicable consent and privacy-choice controls through a Google-approved mechanism. Google’s own privacy and ads controls also explain how Google uses information from sites and apps that use its services and how users can manage ad personalization.

• Manage personalized ads in Google Ads Settings
• Review participating-vendor opt-out choices
• How Google uses information from partner sites

Server-side game and administration data

MongoDB is used for the private administration system and game content management. It stores level definitions, words, board layouts, hero and skill configuration, world content, publication state, and administrative session records needed to protect the CMS. An authorized administrator receives an HTTP-only, same-site session cookie named “swordkoban.cms”; its session can remain valid for up to eight hours. Published portions of CMS content are returned through the game API so visitors can play.

MongoDB is not used to store ordinary player completion history, star progress, chosen hero, or a public player profile. Those gameplay values remain in localStorage as described above. When you submit the contact form, MongoDB stores the name, reply email, selected topic, message, review status, and submission timestamps so an authorized administrator can review and respond.

Contact messages receive an expiration time 24 months after submission and MongoDB automatically removes expired records on its cleanup schedule. A different period may be applied when reasonably required to resolve a request, protect the service, or comply with law. Administrative credentials and protected sessions are limited to authorized site operation and are not public game features.

Security, requests, and operational logs

Hosting, network, and application infrastructure may process standard request information needed to deliver and protect the service, such as IP address, timestamp, requested path, response status, user agent, and security signals. This information may appear in short-lived operational or security logs controlled by the relevant infrastructure provider.

Reasonable safeguards are used to separate public game access from restricted administration and to reduce unauthorized access, alteration, or disclosure. No internet service can guarantee absolute security, so visitors should avoid submitting passwords, payment details, government identifiers, or unrelated sensitive information through the contact form.

When information is shared

Swordkoban does not sell ordinary player progress or personal information. Data may be processed by service providers that deliver hosting, database, analytics, security, and—when enabled—advertising functions. Information may also be preserved or disclosed when reasonably necessary to comply with law, protect users and the service, investigate abuse, or enforce applicable terms.

Service providers process information under their own terms and privacy commitments as well as the configuration used by Swordkoban. Google is the relevant provider for Google Analytics and prospective AdSense functionality.

Your choices and controls

You can clear Swordkoban localStorage and cookies through browser settings, block third-party content, use browser tracking protection, or stop using the site. Clearing localStorage removes progress and preference data from that browser. Google provides separate controls for Analytics and advertising technologies, including advertising settings and browser-based opt-out tools where available.

Privacy questions and requests can be submitted through the official contact form. You may also use it to ask for access to or deletion of an identifiable contact message. Because ordinary progress is not tied to a server player account, Swordkoban may be unable to identify browser-local information after it leaves your device. A request should avoid including passwords or unrelated sensitive information.

Children and policy changes

Swordkoban does not knowingly request personal information from children and currently offers no ordinary player registration. Guardians can clear site data and use browser or device controls to limit analytics and advertising technologies. If a future feature intentionally collects contact or account information from younger users, this policy and the feature’s protections will be reviewed before launch.

This policy may change when the game, providers, legal requirements, or data practices change. The updated date identifies the current version. Material changes will be reflected on this page before or when the changed practice becomes relevant.

Frequently asked questions