Privacy policy
This policy explains what delight human collects, why we collect it, how long we keep it, and what you can ask us to do about it. It applies to the whole site, in every language.
Effective 14 September 2026
Who is responsible
delight human is a small independent project that hosts small browser games built by AI models. The operator named in the contact section is the data controller for everything described on this page.
The site is run from outside the European Union and is available worldwide. European data protection law (the GDPR) therefore applies to visitors in the EEA, and UK data protection law to visitors in the UK.
What we collect
Wishes: the title, description, category and tags you submit, the email address you give us so we can follow up about that wish, and an anonymous identifier that links the wish to your submissions.
Ratings, upvotes and play counts: the score or vote you give, the game it concerns, and an anonymous identifier. We do not ask for your name, your password or any payment details, and there are no user accounts. The only email address we ever hold is the one you choose to type into the wish form.
Technical records: our hosting provider logs the IP address, browser type, page requested and time of each request, for security and to keep the service running.
Analytics: if, and only if, you accept analytics, Google Analytics 4 records how pages and games are used, using cookies and a random identifier. Before you accept, no analytics data leaves your browser.
Why we use it, and our legal basis
To provide the service you asked for — publishing your wish, recording your rating or upvote, showing leaderboards. Legal basis: performance of the service you requested.
To keep the site working and unmanipulated: preventing repeat or automated voting, and understanding in aggregate which games are played. Legal basis: our legitimate interest in operating a functioning service.
For analytics, only with your consent, which you may withdraw at any time. Legal basis: your consent.
The email address you give us with a wish
It is optional. If you give one, it is used only to contact you about that specific wish. It is never shown publicly, never added to a mailing list and never sold. It is deleted on request and otherwise after 90 days once the wish is resolved, or 12 months after submission, whichever comes first.
Cookies and browser storage
We set no cookies at all unless you accept analytics. We do store a small amount of information in your browser so that ratings and upvotes work and so that your language choice is remembered. Every item is listed in the cookie and storage policy.
Who else sees your data
Google, through Firebase and Google Cloud, hosts the site, stores the database and provides the anonymous sign-in, acting as our processor. If you accept analytics, Google also processes analytics data on our behalf. We do not sell your data, we run no advertising, and we share your data with nobody else except where the law requires it.
Where your data goes
Our provider stores data in the United States. Transfers out of the EEA rely on the EU-US Data Privacy Framework and, as a fallback, on the European Commission's standard contractual clauses included in our provider's data processing terms.
How long we keep it
Wish emails: 90 days after the wish is resolved, or 12 months after submission, whichever comes first. Ratings, upvotes and play counts: kept while the site runs, linked only to an anonymous identifier. Anonymous identities inactive for 24 months are removed. Analytics data follows the retention setting of our analytics property.
Your rights
You may ask for a copy of your data (access), have it corrected or deleted, restrict or object to how we use it, and receive it in a portable format. Where we rely on consent, you may withdraw it at any time; withdrawal does not affect anything done before it.
Because ratings and upvotes are tied to an anonymous identifier rather than an account, we may need you to give us that identifier — it is stored in your browser — so that we can find your records.
If you are in the EEA or the UK, you also have the right to complain to your national data protection authority.
Children
The site is made for a general audience and is not directed to children under 13. You may browse and play at any age, but if you tell us you are under 13 we store nothing you submit and we accept no wish or rating from you. There is no account to create and no profile to fill in.
Do Not Track and Global Privacy Control
We do not track you across other websites, and we do not sell or share personal information as those terms are used in the United States state privacy laws. If your browser sends a Global Privacy Control signal, we read it as a refusal of analytics and analytics stays off.
Security
Data travels over encrypted connections and is stored in access-controlled systems, with security rules that stop one visitor from writing to another visitor's records. No system is perfectly secure, but we deliberately hold very little data, which is the strongest protection available.
Changes to this policy
When this policy changes we update the effective date above and, for any significant change, ask for your choice again.
Contact
TODO: registered legal name of the entity
Write to privacy@delighthuman.example with any question about this policy, or to exercise a data right. We respond within 30 days.