PRIVACY

Last updated 2026-08-15

Spectral Vigil has no accounts, asks for no email, and stores nothing that identifies a person. What follows is the whole of it.

One switch, and everything it governs

There is a single toggle in Settings, and it is on by default. While it is on, two things happen when a run ends: anonymous statistics about that run are sent, and the run is offered to the leaderboard automatically, under a generated name.

Turn the toggle off and both stop. No statistics, no board entries, nothing leaves your browser. The game plays exactly the same either way.

What is collected

• A random device id generated in your browser. It is not derived from anything about you or your machine, and it identifies an install, not a person. Clearing your browser storage discards it and mints a new one.
• A keeper name for the leaderboards. It is generated from a word list, and the "new name" button gives you a different generated one. Beside it sits a short public tag derived one-way from the device id; the tag cannot be turned back into the id.
• The app version, and statistics about finished runs: waves, times, choices, what killed you.
• For runs offered to the board: a recording of that run. Its seed, its settings, the menu decisions you made, and the path your cursor took. The server replays it to check the score is real.
• A coarse platform bucket: operating system, browser family, and whether the device is a desktop, phone or tablet. The full browser identification string is read and immediately discarded; it is never stored.

What is never collected

• No name, no email address, no password. There are no accounts.
• No IP addresses. They are used in memory for a moment to rate-limit requests and are never written to the database.
• No location, no device fingerprinting, no advertising identifiers.
• No third-party analytics and no trackers of any kind. Nothing here is sold or shared.

How long it is kept

Run statistics are kept for eighteen months and then reduced to aggregates that describe nobody in particular. Rate-limiting state lives in memory only and disappears on restart.

Deleting everything

Settings has a delete my server data button. It removes your run statistics, your submissions including every leaderboard entry, and your recordings. It is a real deletion, not an anonymised leftover.

Because there is no account, the device id in your browser is the key. Whoever holds it can rename or delete those rows. That is why the game calls the exported copy of it a secret, and why you should treat it as one.

This website

This site sets no cookies and runs no analytics. The standings on it are fetched through this domain and cached briefly; those requests carry no device id, which is why no entry here is ever marked as yours.

Getting in touch

The Discord linked at the bottom of every page is the fastest way to reach me about anything on this page.