ROOST PRIVACY NOTE
ROOST is fully playable without an account — scores stay in your browser and disappear when you leave. Signing in is optional, and only adds your scores to the shared daily leaderboard.
What we store when you sign in
- Email address — used only to send you sign-in links. We never share or sell it, and we never send marketing email.
- Rider name — the username you pick, shown publicly on the daily leaderboard.
- Ride scores — your best score per day (points and correct answers), tied to your rider name on the leaderboard.
Anonymous ride analytics
To keep the game fun and the questions fair, we log basic stats for every finished ride — signed in or not: game mode (Daily/Unlimited), score, how long the ride took, and your country (from your connection, not GPS). If you're signed in, the ride is tied to your rider name; otherwise it's anonymous. We use this only to understand how the game is played — popular modes, average scores, where riders are — never to identify you.
Site analytics (first-party, privacy-respecting)
Across the site we collect simple first-party analytics so we can make things better — no third-party trackers, no advertising cookies, nothing sold or shared. That means:
- Pages visited — which pages get loaded, so we know what's working.
- Game activity — game starts, finishes, and shares, so we know what's played.
- Sign-in funnel — when a sign-in link is requested or completed, so we know the flow works.
- Device type — mobile or desktop, guessed from your browser info, so we can prioritize the right layouts.
- Country — derived from your connection (not GPS).
- Random visitor id — a random string stored in your browser's localStorage (
bflopp_vid) so we can tell repeat visits apart from new ones. It contains nothing about you and we never tie it to your email or rider name unless you sign in.
Do Not Track is respected — if your browser sends a Do Not Track signal, we don't record anything. All analytics data lives on our own infrastructure (a Cloudflare D1 database) — no Google Analytics or other third-party services ever see it.
Error reporting
If the game or a site page hits a JavaScript error, your browser sends us an automatic error report containing the page you were on, the error message, a technical stack trace, and your browser's user-agent string. It never includes your name, email address, or your raw IP address — we store only a one-way hash of your IP so we can tell a flood of duplicate reports apart from real bugs. Reports are rate-limited and capped, and visible only on our private admin pages.
Funnel analytics
We also count anonymous ROOST funnel steps — landing on ROOST, starting a ride, completing sign-up — tied to the same random visitor id (bflopp_vid) described above, never to your identity. This powers aggregate land → play → sign up → return conversion stats on our private admin pages.
What we don't do
- No passwords — sign-in is via emailed magic links.
- No ad tracking or third-party analytics anywhere on the site — analytics are first-party and Do Not Track is respected.
- No selling or sharing your data with anyone.
Cookies
One cookie (roost_session) keeps you signed in for 30 days. It's httpOnly, so page scripts can't read it. Signing out deletes it.
Deletion
Want your account, scores, or all of it gone? Reach out through the contact info on the About page and we'll delete your email, rider name, and scores.