PRIVACY
NO ACCOUNT TO PLAY
You can play without signing in, and nothing asks you to. There is no email field on the click path. Two moments ask for an email, both optional: claiming a win with a prize, and saving Power you bought so it follows you to another device. Saving is a link sent to that email — there is no password, and no profile.
WHAT IS STORED
A random anonymous player id, signed by the server and held in a cookie. The round counter and the winner of each round. If you pick a name for the live feed: that name, against that anonymous id, shown to everyone who has the page open. If you claim a win with a prize: the email you gave, on that win, for the person who verifies it. If you buy Power: the purchase, against that anonymous id, and — if you choose to save it — the email you gave and which anonymous ids it is linked to. Card details never reach this site; Stripe handles payment.
WHAT IS NOT STORED
Not your IP address. Addresses are hashed with a salt that rotates daily, used only to stop one machine flooding the counter, and never written next to anything identifying. Not a device fingerprint — the anti-abuse system works from timing behaviour, not from your hardware. Not one database row per click.
ANALYTICS
Aggregate numbers only: how many clicks, how many people, how long a round lasted. Individual clicks are not tracked to a person and are not sent to any third-party analytics service.
COOKIES
Two cookies, both HttpOnly, both holding a signed anonymous id and nothing else: a twelve-hour session so your clicks count, and a thirteen-month identity so Power you bought is still yours after you close the browser. There are no advertising or tracking cookies.
REMOVAL
Clearing the cookies ends the association completely; signing out does the same and keeps your Power behind your email. To have a stored win removed from the Hall of Fame, or an email and its purchases deleted, write to privacy@whowillbreakit.com with the round number or the email, and it will be done.