Privacy Policy

Last updated October 23, 2026

Light Lol (lightlol.com and games.lightlol.com, "the site") is a small, independently run collection of multiplayer games. This page says what we collect, why, who else sees it, and how you can get rid of it. We try to collect as little as the site needs to work.

What we collect

• Your email address. Used to send you a one-time sign-in code. We don't use passwords, and we don't send marketing email.
• Your username and profile choices — username, avatar color, default in-game name, theme and card-deck preferences, and whether your stats are public.
• Your game activity — results of games you play while signed in (win, loss, score, time, game and mode), weekly stats built from them, challenge progress, and your friends, blocks and stats-sharing permissions.
• Names you type into a game and anything you do in a shared room (moves, chat or messages the game offers) is visible to the other players in that room while it lasts.
• Messages you send us through the help form (your message, your email if you give one, and the game or topic you pick).
• Donations. If you donate, payment is handled by Stripe; we receive the amount, a confirmation, and the email you gave Stripe. We never see your card number.
• Where you're signed in. For each browser or phone signed in to your account we keep a short label (such as "Chrome on Windows"), the country it connected from, and when it signed in and was last used. You can see this list on your profile and sign any device out. We don't store the IP address in it.
• Technical data. Our servers and Cloudflare (which sits in front of the site) see your IP address and browser information when you connect. We use it to keep the site secure and to limit abuse (for example, rate limits on sign-in codes). Our own visit counts are anonymous: they use a one-way, once-a-day scrambled value, never stored beyond the day it is counted, and they set no cookie.

Cookies

We use only the cookies the site needs to work: a sign-in session cookie, a "stay signed in" cookie (up to 14 days), and a cookie that remembers light/dark theme. We use no advertising or tracking cookies. When you sign in or send a message through a form, Cloudflare Turnstile may run a small check to tell people from bots.

Who else handles your data

• Cloudflare — delivers the site and protects it from abuse; also runs the Turnstile bot check.
• Microsoft — sends our sign-in and help emails.
• Stripe — processes donations.
• Automated services — some computer players and puzzles are generated by an automated service. Only game content is sent (for example a hand of cards or a puzzle theme), never your email or account details.

We do not sell your information, and we do not share it for advertising.

What other players can see

Your username and avatar appear on leaderboards, friend lists and in game rooms. Your detailed stats page is public only if you turn on "public stats" in your profile; otherwise only people you approve can view it. Your email address is never shown to other players.

How long we keep it

• Your account and game history: until you delete your account.
• Sign-in codes: expire in 10 minutes; leftover records are cleared within a day.
• Help messages: kept in our inbox as long as needed to answer you and fix problems.
• Donation records: kept as long as needed for accounting and tax purposes.
• Server logs: kept for a short time for security and troubleshooting.

Your choices

• Delete your account. Profile → Account → "Delete my account". It erases your profile, stats, results, challenge progress, friends and blocks right away. Donation records remain for accounting but are no longer linked to you.
• Change what's shown. You can change your username, default name, and stats visibility at any time from your profile.
• Ask us. To see, correct or remove anything else we hold about you, use the contact form.

Children

The site is meant for people 13 and older. We don't knowingly collect personal information from children under 13. If you believe a child has created an account, tell us through the contact form and we'll delete it.

Security

Sign-in codes are stored only as one-way hashes, connections are encrypted, and access to the administration area is restricted. No system is perfectly secure, so please keep the inbox you sign in with secure; that is what protects your account.

Changes

If this policy changes in a meaningful way we'll update the date above and, for big changes, say so on the site.

Contact

Questions about privacy? Use the contact form.