← Back to the game

Privacy

Last updated: 3 November 2026

Barely Made It is a free browser game by Kai Works. There are no accounts, no ads and no tracking or analytics, and the game sets no cookies. This page says what little it keeps, where and why. Questions, or a name to take off the board: privacy@kaiworks.dev.

In your browser

The game keeps these in your browser's local storage. They never leave it, except as said below:

• your settings (graphics quality, frame rate, music) and whether the sound is off;
• a random player ID, made the first time you name a finish or choose to stay anonymous, so that you can rename it later;
• a finish that could not be sent yet (no connection), until it is sent.

Clearing this site's data in your browser removes them all.

On our server

The game's server runs on Cloudflare (Workers and a D1 database). It keeps only what the board and its fairness need:

• Each run: a random run ID, the run's seed and when it started, and the counts of tries and finishes shown on the title screen.
• Each finish: when it was, the fireflies caught and the hearts kept, and a keyed hash of your IP address (not the address itself), to stop the board from being flooded. Your run is checked by replaying its moves; the moves are not kept.
• When you name a finish or stay anonymous: your random player ID, and the nickname if you gave one, shown publicly on the leaderboard.
• Rate limits: the same keyed hash of your IP address with a count per hour, deleted after 48 hours.

Finishes stay on the board while the game is online, unless you ask for yours to be removed.

Cloudflare Turnstile

When you save a name, Cloudflare Turnstile checks, invisibly, that you are a person and not a bot. It processes data from your browser and your IP address, and our server sends Cloudflare your IP address with the check to verify it. Cloudflare's Turnstile Privacy Addendum covers this.

Hosting

Cloudflare serves the game. Like any web host it handles your IP address and the details of each request to deliver the pages and protect them, under the Cloudflare Privacy Policy. Cloudflare runs a global network, so this may happen outside the European Economic Area, under the safeguards its policy describes. The game's fonts are part of the game, not loaded from anyone else.

Tips

The tip jar in the bar opens our page on Ko-fi in a new tab. The game sends Ko-fi nothing; what you do there is covered by Ko-fi's privacy policy.

Why, and your rights

We keep the run and finish data, and the IP hashes, for our legitimate interest in running the game, a fair leaderboard, and keeping it free of abuse (GDPR Art. 6(1)(f)). A nickname is yours to publish or not (Art. 6(1)(a)); you can have it removed at any time.

You have the right to access your data, to have it corrected or erased, to restrict or object to its use, and to take it with you. Write to privacy@kaiworks.dev: for your name on the board, tell us the name and about when you finished. You may also complain to a data protection authority; in Poland, where we are, that is the President of the Personal Data Protection Office (UODO).

Changes

If the game starts keeping anything new, this page will say so first, with a new date at the top.