Privacy Policy
Last updated: 26 July 2026
This policy explains exactly what Brainy Bunch stores, what it doesn't, and what choices you have. It is written to be read rather than skimmed past — the short version is that playing the games requires no personal information at all, and the only third party involved is Google, which serves the adverts.
The short version: You can play every game without an account and without giving us anything. If you choose to create an account, we store a username and a password hash — we never ask for your email address, real name, age or location. We don't run analytics. Adverts are served by Google, which uses cookies.
1. Who is responsible
Brainy Bunch is an independent, individually run website at noehnoe.com. For any privacy question or request, contact us at noehnoeis5@gmail.com — see also our contact page.
2. Playing without an account
If you just play the games, no personal data is sent to our servers at
all. Your progress is saved locally in your own browser using
localStorage, which is storage on your device that we cannot read
remotely. It stays on that device until you clear it.
The keys we write to your browser are:
| Name | Type | Purpose |
|---|---|---|
brainy-bunch-save-v1 |
localStorage | Your game progress: coins, XP, level, which games you've played, best scores, badges earned, themes owned and your sound/volume settings. |
bb-mode |
localStorage | Whether you're playing as a guest or signed in, so the site doesn't ask again on every visit. |
bb-token |
localStorage | Only if you sign in: a random session token that keeps you logged in. It contains no personal information and can be revoked by logging out. |
bb-username |
localStorage | Only if you sign in: your chosen display name, so it can be shown in the interface without a server request. |
bb-invite-shown |
sessionStorage | Remembers that we've already mentioned the optional account once, so we don't mention it again. Cleared when you close the tab. |
None of these are advertising or tracking identifiers, and none are shared with anyone. You can delete all of them at any time by clearing site data in your browser, or by using ♻️ Reset all progress in the game's settings menu.
3. If you create an account
An account is entirely optional. If you create one, we store:
- Your chosen username — shown publicly on the leaderboard and in battles. Please don't use your real name if you'd rather not be identifiable.
- A cryptographic hash of your password, produced with PBKDF2-SHA256 and a unique random salt. We never store or see your actual password, and we cannot recover it for you.
- An optional "security phrase", also stored only as a salted hash, if you choose to set one as a second factor.
- Your game progress — the same data described above, so it can sync between your devices — plus your coin, lifetime-earnings, rebirth and battle-win totals used for the leaderboard.
- Session tokens with their creation and expiry times, so you stay logged in. Expired sessions are deleted automatically.
We do not ask for or store your email address, real name, date of birth, phone number, address or payment details. There is nothing to buy on this site. Because we hold no email address, note that a forgotten password cannot be reset — that's the trade-off for collecting so little.
Account data is stored in Cloudflare D1 (a database hosted by Cloudflare, Inc.) and served through Cloudflare's network. Cloudflare processes requests to the site, including IP addresses, as part of delivering and protecting it.
4. What's public
If you sign in, your username, level, lifetime coins earned and rebirth count appear on the global leaderboard, and your username and scores can appear on a game's Mini Records list. Nothing else about you is ever shown. Guests never appear on any leaderboard.
5. Advertising and cookies
This site is free and is funded by advertising. Adverts are served by Google AdSense, a third-party advertising service.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads based on your visits to this site and/or other sites on the internet.
- You may opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of a third-party vendor's use of cookies for personalised advertising at aboutads.info.
- For more detail on how Google uses data from sites that use its services, see Google's Privacy & Terms.
If you are in the European Economic Area, the United Kingdom or Switzerland, you are shown a consent choice before personalised advertising cookies are set, and you can change that choice at any time using the Cookie settings link in the footer of any page.
6. What we deliberately don't do
- We don't run any analytics or visitor-tracking product on this site.
- We don't sell, rent or share your data with anyone for marketing.
- We don't send marketing email — we have no email addresses to send it to.
- We don't have chat, messaging, comments or any user-uploaded content.
- We don't use notifications, streak warnings or other pressure to make you return.
7. Children's privacy
These games are suitable for children, and the site is designed so that a child can play without providing any personal information — no account is needed, and creating one asks only for a username and password. We do not knowingly collect personal information from children, and we never request an email address, real name, age or location from anyone.
We encourage parents to have children play as guests, which sends nothing to our servers. If you believe a child has provided information you'd like removed, email noehnoeis5@gmail.com and we will delete the account promptly. Note that advertising is served by Google and is subject to its own policies, including those for ad serving to children.
8. Your rights and choices
- Play anonymously — simply don't create an account.
- Delete local data — use ♻️ Reset all progress in the game's settings, or clear site data in your browser.
- Access or delete your account — email noehnoeis5@gmail.com from the account's username and we will export or erase your data. Because we hold no email address, we may ask you to confirm ownership by logging in and changing something we can verify.
- Opt out of personalised ads — see section 5, or use the Cookie settings link in the footer.
Depending on where you live you may have additional rights over your personal data, including access, correction, erasure, restriction and portability. Contact us and we will honour them.
9. Data retention
Account data is kept while the account exists, and is deleted when you ask us to delete it. Session tokens expire after 60 days and expired ones are removed automatically. Local browser data stays on your device until you clear it.
10. Changes to this policy
If this policy changes we'll update the date at the top of the page. Material changes to what we collect or how we use it will be noted prominently on the site.
11. Contact
Questions, requests or complaints: noehnoeis5@gmail.com. We aim to reply within a few days.