SURF THE NET

Privacy.

Preview · 10 October 2026

You can play solo and join guest rooms without an account. An optional account stores your chosen display name and cosmetic collection.

Accounts and device storage

Supabase handles email sign-in and stores your profile and collection. Your browser stores your login session, control settings, display name and local run records. Clearing this site's browser data removes the local copies. Your email address is not included in room rosters.

Online rooms

Joining a room shares your display name, equipped cosmetics and movement with other players in that room. Cloudflare relays those updates. Movement updates are held in active connections rather than written to the account database. Short-lived connection tickets and IP-based connection counters are used to limit repeated joins; expired entries are cleared during later room activity.

Chat, ranks and records

Server chat is public to players in your region. Each server retains up to 40 recent messages; messages expire after two hours and are removed at the next server activity or scheduled rotation. Display names, account identifiers, XP and verified personal bests are stored by Cloudflare. Display names, ranks and record times appear on public leaderboards. Submitted movement commands are used to verify completed runs; they are not retained as replay files.

Hosting

Cloudflare hosts the game and room services. Supabase hosts accounts and database records. These providers process connection information and operational logs as part of delivering and protecting their services. Fonts are served from this site. No advertising or visitor analytics have been added to this deployment.

Shop preview

Purchases are currently disabled. When enabled, Stripe will handle payment details; the game will store the purchased item, account identifier, payment reference, amount and fulfillment status. Card details will not be stored by the game.

Account data

Account and inventory records remain until removed by the service operator. Local browser data can be removed through your browser's site-data controls. A public support contact and account-deletion workflow must be available before the paid shop launches.

About this preview