Privacy

Break 5 stores as little as it can.

• Cookies: only strictly necessary ones: a session cookie so your puzzle attempt survives a refresh and keeps you signed in, and a one-shot cookie that carries a status message after you submit a form. No analytics, no tracking, no third-party cookies from us, so there is no cookie banner to click. (The Cloudflare bot check below may set its own while it runs on the sign-up form.)
• Fonts, scripts and game assets are served from break5.co.uk itself; nothing is loaded from Google, ad networks or other third parties while you play. The one exception is the sign-up form, described next.
• Bot check (Cloudflare Turnstile): the sign-up form, and the sign-up prompt shown to guests after a solve, load a small script and frame from Cloudflare to tell people from bots, so that one person cannot farm leaderboard accounts. Cloudflare receives technical details of that request and your browser, including your IP address, to run the check; we receive only the pass/fail result and never store the token it produces. We do this under our legitimate interest in keeping the game fair. Cloudflare may process the data outside the UK under its standard contractual safeguards; see Cloudflare's Turnstile privacy notice. Playing as a guest never involves Cloudflare.
• Guests: the IP address of each attempt, an anonymised device signature (a one-way hash of browser characteristics, computed only when you press Play) and a random device token kept in your browser's own storage are used solely to keep the daily leaderboard fair and match a guest to their own attempt. None of it is shared, used for advertising, or tied to your identity.
• Members: your email address, display name, puzzle results, and the IP address you last signed in from. We email you a sign-in link when you ask for one, and (if you've opted in) one email a day when the new puzzle is released. Unsubscribe from any email, or from your stats page.
• Advertising: ads are served by us from our own server. If an advertiser supplies an HTML creative it runs sandboxed in an iframe and may load assets from the advertiser's servers; we count impressions and clicks in aggregate.
• Deleting your account removes all of the above immediately. You can do it yourself from your stats page.

Questions: hello@break5.co.uk.