Privacy Notice

Retro Tic-Tac-Toe does not collect personal information. There are no accounts, no sign-up forms, no advertising, and the site sets no tracking cookies of its own. This page explains exactly what happens when you visit.

What stays in your browser

• Player names you enter on the “Enter Player Names” screen are saved in your browser’s sessionStorage under the key tic-tac-toe-players. They are discarded when you close the browser tab.
• Scores for the current session are stored the same way, and are cleared when the tab closes.
• Theme preference (dark or light) is saved in your browser’s localStorage under the key tic-tac-toe-theme so the site opens in your chosen appearance on return visits. It persists until you clear site data.
• Cached assets (page HTML, JavaScript, fonts, icons) are stored in a service-worker cache so the game loads instantly on return visits and works offline.

None of the above is ever transmitted off your device. You can clear it at any time through your browser settings, or simply close the tab.

What the host (Cloudflare) sees

This site is served through Cloudflare. When you load a page, Cloudflare receives the HTTP request and records a standard access log containing:

• Your IP address
• The URL requested
• Your user-agent string (browser and operating system)
• A timestamp

These logs are handled by Cloudflare for security, abuse prevention, and operational purposes under Cloudflare’s own privacy policy and retention schedule. The site operator does not maintain a separate log of visitors, does not export these logs, and does not associate them with any identity.

This site uses Cloudflare Web Analytics, which loads a small beacon script on each page. The beacon sends aggregate page-view information to Cloudflare:

• The URL of the page you are viewing
• The referring page (if any)
• Your user-agent string
• A timestamp and coarse performance timings

Cloudflare Web Analytics is cookieless, does not use persistent identifiers, and does not track you across other sites. It exists so the site operator can see aggregate traffic volume without running Google Analytics or similar profiling tools.

What is not collected

• No user accounts or authentication
• No email addresses or contact information
• No payment details
• No advertising or retargeting cookies
• No third-party analytics that identify you across sites
• No data is sold or shared with third parties

Cookies

The site itself sets no cookies. Cloudflare may set the following strictly necessary security cookies while you use the site:

• __cf_bm — Cloudflare’s bot-management cookie, used to distinguish humans from automated traffic. Typical lifetime is 30 minutes of inactivity.
• cf_clearance — set after you pass a Cloudflare security challenge (such as a CAPTCHA) so you are not re-challenged on subsequent requests. Typical lifetime is up to 30 days.

Neither cookie is used for advertising or cross-site tracking. Both are considered strictly necessary under the ePrivacy Directive and are managed by Cloudflare under its own privacy policy.

Third parties

• Cloudflare — hosting, CDN, tunnel, and optional aggregate analytics
• No Google Fonts, no Google Analytics, no Facebook pixel, no ad networks. The Permanent Marker font is self-hosted from this site; no requests are made to Google.

Children

The site does not knowingly collect personal information from anyone, including children. Because no data collection occurs beyond the standard host-level logs described above, COPPA and GDPR-K obligations that depend on collection are not triggered.

Your rights (GDPR / UK GDPR / CCPA)

Because the site does not associate visits with any identifier, there is nothing to request access to, correct, or delete from the site itself. To clear what exists:

• Browser storage (names, scores): clear sessionStorage in your browser, or close the tab.
• Service-worker cache: unregister via your browser’s developer tools or by clearing site data.
• Cloudflare’s server logs: contact Cloudflare directly through the privacy channels on their website; they are the data processor for those logs.

Residents of the European Economic Area, the United Kingdom, or Switzerland also have the right to lodge a complaint with a supervisory authority in their jurisdiction.

Changes

Material changes to this notice are reflected in the “Last updated” date below.

Related: About

Last updated April 22, 2026