Privacy policy
Last updated: 16 September 2026
ClickPlanet is a game made by Raphaël Oester. You can play without an account, and we never ask for your name, email or any other contact detail. This page says what we still collect, why, and how long we keep it.
What we collect
| Data | Why | Kept for |
|---|---|---|
| Your IP address and browser user agent, in our server's access log | Security, debugging and finding bots | 14 days |
| Each tile you take: the tile, the flag, the time, and your IP address (or its /64 for IPv6) | Undoing and stopping cheaters | 72 hours |
| How you click: timing and order of clicks, map reads, bonus catches, linked to your IP address | Automatic bot detection | 72 hours |
| A ban record, keyed on an IP address (or /64), if you are banned for cheating | Keeping cheaters out | Indefinitely |
A guest account: a random id, when it was created and last used, and a cookie (cp_sid)
that identifies it. We store only a hash of the cookie.
|
Knowing that the same browser is still playing | 90 days after your last visit |
| Chat messages: the name you chose, the text, your flag, a random id your browser keeps, your IP address and user agent | Showing the chat, and moderating it | 30 days |
Tiles you hold stay on the map with their flag until someone takes them. The map records a flag per tile, not who clicked it.
The legal basis for all of this is our legitimate interest in running a fair game and keeping it safe from abuse.
What stays in your browser
Your browser keeps some settings in local storage: the country you play for, your sound settings, and your chat name and id. They are not sent to us, except the chat name and id when you post a message. Clearing your site data removes them.
Cookies
We set one cookie, cp_sid, which holds your guest account. It is strictly necessary to play:
we do not use it for advertising or analytics. We use no tracking or analytics cookies.
Who else sees your data
- Cloudflare delivers the site and runs Turnstile, the check that you are not a bot. Cloudflare processes your IP address and browser details to do this. See Cloudflare's privacy policy.
- Google Fonts serves the fonts the page uses, so your browser asks Google for them. See Google's privacy policy.
- Everyone playing sees chat messages: the name, the text, the flag, and a short tag made from a salted hash of your IP address. The tag does not reveal your address.
The Discord and Buy Me a Coffee buttons are plain links. Nothing is sent to those services until you click them. We do not sell your data.
Your rights
If you are in the EU, the UK or a place with similar laws, you can ask to see, correct or delete the data we hold about you, or object to how we use it. Because we do not know who you are, tell us your IP address and roughly when you played so we can find it. You can also complain to your data protection authority.
Children
ClickPlanet is not aimed at children under 13, and we do not knowingly collect their data.
Changes
If we change what we collect, we update this page and the date at the top.
Contact
Ask on our Discord, or message @raphael_oester on X.