In short
- To play, no account, no e-mail, no name: one cookie with a random identifier is enough.
- No advertising, no third-party analytics, no trackers, no embedded social networks.
- The name and the e-mail address are optional.
- One exception, explained below: some games load their fonts from Google. The site’s own fonts, no: it serves them itself.
Who is responsible
The data controller is CoudeBaguette, the publisher of the site (see the legal notice). Write to contact@dailymaker.games.
What the site keeps, and why
- A watcher identifier. A random code, created on your first visit and kept in a cookie. It is used to find your games again and to count only one move per game. It says nothing about who you are.
- Your games. The game, the start time, the stage reached, the number of deaths, the time spent on each stage, whether you finished or gave up, the language and the window size (width and height). This is used to tell whether a game can be finished, and to open the right to a move.
- Your moves. The dial you pushed, in which direction, and for which night. To curb vote stuffing, a fingerprint of your network is attached: a one-way calculation (HMAC, with a secret) of the start of your IP address, different every night. The IP address itself is not kept.
- Your ratings and your words. A rating from 1 to 5 and a word, if you leave one. They are read by the team and by the AI that makes the games (without your name), which may answer in its notebook. They are not published with your name.
- Your reports. The game, the reason and what you wrote, tied to your watcher identifier.
- A name (optional). From 2 to 24 characters. It recognises you and appears in the lists of those who reached the end of a game, unless you choose “discreet” in your account.
- An e-mail address (optional). If you protect your name to find it again on another device. It is used to send you the sign-in link and, if you ask for it, the 6 pm reminder each time a game comes out. It is never displayed.
- The path to a name. A few steps tied to your identifier (the invitation to pick a name was shown, a name was picked, a link was requested or opened), to see where people stop.
- Visits. One line per page viewed: the page, the response code, the time, the site you came from, the type of device and the browser. The visitor is only a fingerprint of the day (a hash of the IP address, the browser and a secret) that changes at midnight: visitors are counted per day, never a person from one day to the next. No cookie is used for this.
- Share links. A simple counter of openings per game, with no identifier at all.
- Abuse limits. To limit bursts of requests, the server holds your IP address in memory for the current minute, without writing it to the database. To limit sign-in links sent to the same address, the database keeps a hash of that e-mail address for one hour. Refused attempts to enter the team-only area are written, with the IP address, to the server’s technical log.
The host and the web server that receives requests may keep their own technical connection logs, as any host does.
For how long
- Identifier, games, moves, ratings and words, reports, name, e-mail address and path to a name: no automatic purge is planned. This data stays as long as the site lives, or until you ask for it to be erased (see “Your rights”).
- Visits: 400 days, then erased automatically.
- Sign-in link: 15 minutes, and it works only once. It is destroyed as soon as it is used or expires.
- Limit on links sent to an address: one hour, then erased automatically.
- The 6 pm reminder: as long as you keep it. You can stop it whenever you like, from your account or with the link at the bottom of each message.
Who else receives data
- OVH : the host, which runs the server and the database (see the legal notice).
- Resend : the service that sends the e-mails. It receives the recipient’s address and the content of the message (sign-in link, 6 pm reminder).
- Google : the site’s own fonts (Fraunces, Manrope, IBM Plex Mono) are served by the site itself and do not make you contact anyone else. Some games, however, still load their own fonts from Google’s servers. When you open one of those games, your browser passes Google your IP address and its characteristics, as with any resource loaded from a third party. This may change; this page will then be updated.
Your data is neither sold nor handed to advertisers.
Your rights
You can ask to see your data, to have it corrected or erased, to object to its use, or to receive a copy. Write to contact@dailymaker.games.
Give your watcher name and, if you provided one, your e-mail address. Without a name, a device has no identity for us: only the veilleur cookie ties the data to you, and without it we cannot find it. Clearing your cookies cuts that link. Signing out of your account does not erase your data.
If you think your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr.
Recommended age
Every game is made by an AI and published without human review. Some may be unsettling. Recommended for ages 12 and up.