Privacy Policy

This page describes what data is collected on this personal website. The source code is public on my git server for exact details. For security issues, contact [email protected].

Account data

If you create an account, the site stores your username and a hashed password. Passwords are not stored in plain text.

Sessions and cookies

When you log in, a session cookie named user is set. The server stores that cookie token with your username, expiry time, and the last IP address seen for that session. This data is only stored for the duration of your session.

Your cookie preference (accept or decline non-required cookies) is stored in your browser's local storage.

IP addresses and security

Your IP address may be recorded for:

• login and signup rate limiting
• server security logs (for example logins, signups, and privileged actions)
• Cloudflare Turnstile verification during login and signup

Analytics

This site uses a self-hosted Matomo analytics instance. It records page views and related browsing data in an aggregated manner.

You can opt out of Matomo via the cookie banner, or through this Matomo opt-out page. Note this will store a cookie in your browser to remember your choice.

Third parties

• Cloudflare — CDN delivery and Turnstile (bot protection) on login and signup. See Cloudflare's Turnstile privacy policy.

Game and feature data

Depending on what you use, the site may store:

• Golf — multiplayer game state, including usernames, scores, and card data for active games. This data is deleted 7 days after last use automatically.
• Klumpy — leaderboard scores, board state, and move history tied to your username
• Cookie Clicker addon — synced cookie progress for your account. This data is deleted when not used for long enough.
• Saved local storage — if you use the user menu save/load feature, browser local storage for games and preferences may be copied to the server under your username
• Browser local storage — some games (for example Dice Game and Truth Trees) keep progress only in your browser unless you save it as above

Server logs

Operational logs may include usernames, IP addresses, and descriptions of actions such as account creation, logins, privilege use, and game-related events. These logs are for securing the site.

What is not collected

Accounts do not require an email address or other personal contact details. No payment information is collected.

Contact

Questions about this policy, or requests to delete your data, can be sent to [email protected].

Changes to this policy

This policy may be updated from time to time. The current version is always available at https://lschaefer.xyz/privacy.

Last updated

This policy was last updated on August 9, 2026. For edit history you can view it in the commit history.