Privacy Policy
Last updated: September 13, 2026
Scope and operator
Tim Cao operates timcao.com and the games and tools hosted under its Playground. This notice covers those experiences and project deployments that link to this notice. Independently operated websites and external services have their own notices.
Browser-only games and saves
Many games work without an account. Settings, audio preferences, progress, scorebooks and saves may be stored in local storage, IndexedDB or browser caches. These records stay in that browser unless you use an online feature that submits them. Clearing site data can permanently remove local saves. Saves do not automatically transfer from an older project domain to timcao.com.
Shared site storage
Games hosted on the same web origin share a browser storage boundary. Game-specific save keys organize data but do not create separate security sandboxes. Clearing all data for timcao.com can sign you out and remove saves or preferences across multiple games. A game's local reset does not necessarily remove online records.
Scores and online play
When you submit a leaderboard entry, the player name you choose, score, mode and associated run information can be stored and displayed publicly. Optional online features may store account identifiers, profile information, rooms, game state, moves, chat or content you submit. Information needed for a multiplayer session may be visible to its participants; published content and leaderboard entries may be visible to anyone. Avoid real names and sensitive information in public submissions.
Sign-in
Where Google sign-in is offered, Google and Supabase process authentication. We may receive your account identifier, email address and basic profile information supplied by that sign-in. Session tokens or cookies can keep you signed in. We do not receive your Google password. Signing out or clearing browser storage does not by itself delete server-side records.
Anonymous rooms and opponent activity
Some online games, including Wiki Wayfinder, create a persistent anonymous service identifier when you open online play, even without Google sign-in. Online rooms can retain player labels, connection timestamps and match history. When opponent activity sharing is enabled in Wiki Wayfinder, the other player can receive your in-game cursor position, open article and scroll position through Supabase Realtime. You can turn this sharing off in that game's settings. Exported replays can contain player labels and move history; review them before sharing.
Contact messages
The contact form sends your name, email address and message through Formspree for delivery. Email requests are also processed by email providers. Do not send passwords, payment details, health records or other sensitive information through the form or game chat.
Hosting, measurement and abuse prevention
Vercel hosts the site and provides Web Analytics and Speed Insights where enabled. Hosting and operational services can process request URLs, IP addresses, browser and device details, referrers, approximate location, timestamps, errors and performance data. Online game services use Supabase and Redis/Upstash where configured. These services support storage, authentication, reliability and rate limiting. Avoid putting private information into URLs or public player names.
External media and services
YouTube embeds, NASA media, Google Fonts, externally hosted thumbnails, linked articles and other external resources can send requests to their providers when loaded or used. Some images and fonts load automatically; clicking Play is not the only action that can result in a provider request. Their privacy practices apply to those requests. Opening an external link takes you outside this site's control.
Use and disclosure
Information is used to operate the features you request, respond to messages, maintain scores and sessions, diagnose problems and prevent abuse. Service providers process information needed for those functions. Information may also be disclosed where necessary to comply with law or protect users and the service. Providers may process data in countries other than your own.
Retention and deletion
Retention depends on the feature, provider settings, operational needs and legal obligations. There is no universal promise that room, chat, account or backup data disappears immediately when a session ends. You can clear local browser data yourself. For server-side access, correction or deletion requests, contact us with the game and relevant account or public entry; we may need to verify your request without asking for your password. Some records may remain where necessary for security, legal obligations or provider backup retention.
Children and choices
Do not submit personal information, create an online account or use public chat if you are under 13. A parent or guardian who believes a child provided personal information should contact us. You can play browser-only experiences without submitting a leaderboard entry, choose not to sign in, and avoid loading external media. Rights of access, deletion, correction, objection or complaint may apply depending on your location.
Security and changes
We use safeguards appropriate to these services, but no website, database or browser save can be guaranteed secure or continuously available. Report security concerns privately to the contact address below; do not include other users' data or exploit a live service. Changes to this notice will be published here with an updated date.
Contact: timcao.support@gmail.com