Privacy policy

Last updated November 5, 2026

What we store

If you make an account

• Your username and display name.
• Your password, stored only in scrambled (hashed) form — nobody at Crazy10s can read it.
• Your email address, if you add one. It's optional, and it's used only to send you a password-reset link when you ask for one.
• When you joined and when you last played.
• Where you came from: the website or link that first brought you to Crazy10s — just the site's name (such as google.com), any campaign tag on the link, or the invite link a friend sent. We use it to learn which places bring new players.
• The country you last played from. We work it out from your internet address when you connect, and keep only the country, never the address.
• If you use the Crazy10s app and allow notifications: a notification token for your device, linked to your account, so we can tell you when it's your turn, when someone invites you or wants a rematch, and when you get a chat message. It's deleted when you sign out on that device.

If you play as a guest

The same, minus the email and password: a guest has a display name and a hidden username, and is kept signed in by a token saved in your browser. If you clear your browser, the guest account can't be recovered — that's why we suggest making an account.

Your games

• Moves, scores and results of every game you play, including against the Computer.
• Chat messages you send in a game. Your opponent can read them, and they're saved so they're still there when your opponent comes back.
• Your Daily Puzzle tries and scores — linked to your account, or, if you're not signed in, to a random ID saved in your browser — along with where you came from, as above.

If you support Crazy10s

Supporting is an optional subscription, bought in the app through the App Store or Google Play, or on our website through Paddle (see our terms). We never see your card or bank details: Apple or Google (Paddle, on the website) take the payment. We keep:

• Whether you're a supporter, your plan and level, which store you bought it in, when you started, and when it renews or ends.
• A random ID for your account that we share with RevenueCat (see Services we rely on) instead of your username, so they can confirm your purchases with Apple or Google (or Paddle).
• Bought on the website: Paddle's ID for your subscription, so we can show you a link to manage it and cancel it if you delete your account.
• Which of two versions of the Support screen you were shown (we compare them in totals to learn which works better).

Other players see only your supporter badge and frame, never your plan or what you paid.

In your browser

We save a few things in your browser's local storage: the token that keeps you signed in, your Daily Puzzle ID, where you first came from (see above), and small preferences such as the Computer difficulty you last picked and whether you've already seen the rules. We don't set cookies ourselves, and nothing here follows you to other websites. The one exception is Google's or Microsoft's ad tag, for visitors who arrive from one of their ads — see Advertising.

Briefly, and not saved

Our server looks at your internet address while you're connected, to work out your country and to limit abuse (for example, how many guest accounts one network can create in an hour). It's held in memory only and never written to our database. Our hosting and network providers keep their own short-term logs of addresses for security and to keep the site running.

What other players see

Your display name, your moves and scores in games you play with them, and chat messages you send them. People can invite you to a game by your username. The Daily Puzzle shows only scores and standings, never who played.

How we use it

• To run the game: sign you in, save your games, deliver moves and chat, and score the Daily Puzzle.
• To send a password-reset email when you ask for one. We don't send marketing email.
• If you support Crazy10s: to check your subscription with Apple or Google or Paddle (through RevenueCat) and switch your supporter extras on or off.
• To send app notifications about your games, if you allow them. They're only about your games — never marketing.
• To improve the game using totals — for example how many games are played to the end, or how many players come from each country.
• To keep the site safe and working.

Advertising

There are no ads inside Crazy10s. We do advertise the game on Google, Microsoft (Bing) and the App Store, and we want to know which ads bring players.

• If you arrive by clicking one of our Google ads, the website loads Google's ad tag. It saves two small cookies in your browser (one holds the ID of that ad click) and tells Google when you make your first move (in a game, the Daily Puzzle or Puzzles) or create an account. On your later visits it loads again, until you've made an account or 90 days have passed.
• If you arrive by clicking one of our Microsoft (Bing) ads, the website loads Microsoft's ad tag (UET) instead, which works the same way: small cookies in your browser, and it tells Microsoft when you make your first move or create an account, on later visits too, until you've made an account or 90 days have passed.
• Neither tag ever sends your name, username, email, games or chat. Like anything your browser loads, Google or Microsoft does see your internet address, your browser type and the pages of this site you open.
• Ad personalisation is switched off and we don't use the tags for remarketing: we use them only to count what our ads bring, not to build a profile of you or to show you ads on other sites.
• In the European Economic Area, the United Kingdom and Switzerland, Google's tag sets no cookies and Microsoft's tag isn't loaded at all.
• If you didn't arrive from an ad, neither tag is ever loaded (each loads only for its own ads). They are never loaded in the Crazy10s apps.
• You can remove the cookies any time by clearing this site's data in your browser.
• In the phone apps (Android from version 1.0.2, iPhone from 1.0.1), Google's Firebase Analytics measures the app the standard way (when it's installed and opened, and how long it's used) and tells Google once when you make your first move, and once when you start supporting Crazy10s (the plan and its price, never your card or store account), so we can tell which app ads bring players and supporters. It uses an ID for the app on your phone, plus the phone's model and system version; on Android it also uses your phone's advertising ID (which you can reset or delete in your phone's settings). The iPhone app never uses Apple's advertising ID and never asks to track you. It never sends your name, username, email, games or chat. Ad personalisation is switched off, and in the European Economic Area, the United Kingdom and Switzerland it is switched off completely: nothing is sent.
• If you install the iPhone app from one of our ads on the App Store (from version 1.0.1), the app asks Apple which ad it was: the campaign and the search keyword. This uses Apple's own ad attribution, which needs no tracking permission and doesn't identify you to anyone. We keep the answer with your account, like the tags on a website ad link, only to count which ads bring players.

Services we rely on

• Render hosts the game and its database. Our servers may be outside your country, including in the United States.
• Cloudflare sits in front of the site and handles the network traffic to it.
• Cloudflare Web Analytics counts visits to the site — which pages are viewed, which site sent you, and your type of device, browser and country. It uses no cookies, stores nothing in your browser, and doesn't identify you or follow you across other sites.
• Google Ads and Microsoft Advertising measure our own advertising, only for visitors who arrive from one of our ads on them — see Advertising.
• Google Firebase Analytics (the phone apps, outside Europe) tells Google Ads when a new player makes their first move or starts supporting, and Apple Search Ads tells us which of our App Store ads an iPhone app install came from — see Advertising.
• Resend sends password-reset emails; it receives your email address and the message.
• Apple (App Store) and Google (Google Play) handle the payment if you buy the supporter subscription, under their own privacy policies. RevenueCat checks those purchases for us: it receives the random ID above and the store's record of the purchase (product, price, dates, country), never your name, username, email or games.
• Paddle (Paddle.com) sells the supporter subscription on our website as our reseller (merchant of record), under its own privacy policy: it collects what it needs to take the payment, charge the right tax and send your receipt (your email address, country and postal code, and your card or PayPal details, which we never see), and passes RevenueCat the random ID above with the purchase.
• Google Firebase Cloud Messaging (Android) and Apple Push Notification service (iPhone) deliver app notifications to your phone; they receive your device's notification token and the notification's text (for example, "Maya passed. Your turn!").
• Your country is looked up on our own server with MaxMind's GeoLite2 database — nothing is sent to MaxMind.

We don't sell your information, and we don't share it with anyone else unless the law requires it.

How long we keep it

For as long as your account exists. Password-reset links stop working after an hour and are deleted within a day.

Your choices

• Change your display name any time in your Profile.
• Turn app notifications off any time in your phone's settings, or sign out of the app.
• Delete your account any time in Profile → Delete account — see Deleting your Crazy10s account.
• To get a copy of what we hold about you, email hello@crazy10s.com. We'll send it within 30 days.

Deleting your Crazy10s account

You can delete your Crazy10s account, and everything linked to it, at any time — in the app or on crazy10s.com.

1. Sign in, open Profile (the person icon at the top of the home screen) and tap Delete account.
2. Type your username to confirm (guests just confirm). The account is deleted straight away and you're signed out on every device.

Can't sign in? Email hello@crazy10s.com with the subject “Delete my Crazy10s account”, from the email address on your account or with your username, and we'll delete it within 30 days and confirm by email.

A supporter subscription bought in the app isn't cancelled by deleting your account: turn renewing off in your App Store or Google Play settings first (see our terms). One bought on our website is cancelled when you delete your account. We delete our record of it with your account; Apple, Google, Paddle, and RevenueCat keep their purchase records under their own rules.

What we delete: your account (username, display name, email and password), your sign-in sessions and app notification tokens, your games against the Computer and in Practice, your Daily Puzzle results, and the chat messages you sent. Any game in progress against another player ends as a give-up.

What stays, without your name: games you played against other people stay in their game lists, since they're theirs too — your side shows as “Deleted player” and can't be linked back to you. Your username becomes free for anyone to register, and nothing of yours carries over to them.

What we keep: nothing that identifies you. Copies in our hosting provider's routine database backups are overwritten on their normal schedule, within 30 days after deletion.

To delete only some of your data (for example your email address or your chat messages) without deleting the account, email us the same way and say what you'd like removed.

Keeping it safe

The site only runs over an encrypted connection (HTTPS), passwords are stored hashed, and reset links work once, for an hour.

Children

Crazy10s isn't directed at children under 13, and we don't knowingly collect personal information from them. If you think a child under 13 has made an account, email us and we'll delete it.

Changes

If this policy changes, we'll update this page and the date at the top.

Contact

Crazy10s · hello@crazy10s.com · See also our terms of use.

← Back to Crazy10s