Privacy
What we keep, and why
Last updated 19 October 2026.
Who we are
Cinderfox (cinderfoxgames.com, with its games at madewithcinderfox.com) is run by Jason Foster, trading as Designspin, in Norwich, UK. Jason is the data controller, registered with the Information Commissioner’s Office under reference C1988372. For anything about your personal data, email jason@designspin.co.uk.
Playing needs nothing from you
You can play every game without an account. A game may keep its saves in your own browser, on that game’s address; they stay on your device and we never see them. There are no adverts and no analytics on this site.
If you make an account
- Your email address, to sign you in, to confirm it is yours, and to let you reset your password. We send only those emails: no newsletters, no marketing.
- Your display name, which is shown publicly beside your scores on the leaderboards.
- Your password, kept only as a one-way hash; nobody can read it back, us included.
- Your sessions: while you are signed in, the session records the IP address and browser it started from, and it ends after a week.
- Your scores and achievements, with when you earned them. On a leaderboard you appear by your display name and an identifier made for that game alone, never your email or account.
We use these to provide what you signed up for: an account that keeps your scores and achievements. That is the lawful basis (a contract with you).
Keeping it safe and fair
To stop abuse, we count requests from each network address for a minute or so, and keep a short record of how many scores or achievements each account sends to each game. If a score is removed from a leaderboard, we keep a record of the removal and the reason. We do these under our legitimate interest in keeping the site secure and the leaderboards honest.
Cookies
One cookie, which keeps you signed in, set only when you sign in. It is needed for your account to work, so there is nothing to opt into. We set no tracking or advertising cookies.
Who else handles it
- Cloudflare hosts the site and the games and stores the database and the game files, in Western Europe. Like any host it sees the requests your browser makes, including your IP address.
- Resend delivers our account emails (confirming your address, resetting your password) and so sees your email address and the message.
Both act on our instructions under their data processing terms, and both may process data outside the UK, under the safeguards those terms set out. We sell nothing and share nothing else.
How long we keep it
Your account, scores and achievements stay until you ask us to delete them. Sessions end after a week, links to confirm your email or reset your password stop working after an hour or thirty minutes, and request counts last about a minute. Deleting your account removes your scores and achievements with it; a record that a score was removed by a moderator, and why, may be kept.
What you can ask for
You can ask for a copy of what we hold about you, to correct it, to delete it, or to object to or limit how we use it. Email jason@designspin.co.uk from the address on your account. There is no delete button yet, so deletion is by email for now. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office.