Privacy

When optional email sign-in is enabled, Eirele stores your email address in an account record and uses necessary browser and session cookies. Sign-in codes expire after ten minutes. Sessions have an absolute thirty-day lifetime; signing out revokes the session on the server.

When analytics is enabled, we count page views and fixed actions such as opening information or sign-in, choosing a county and checking or retrying saved progress using our self-hosted Umami service. These events do not include email addresses or sign-in codes.

These events go to this website first. Analytics does not use cookies, browser storage, user identifiers, or fingerprinting. We do not forward your IP address, browser details, or referring page to Umami.

Guest gameplay uses a separate HttpOnly cookie to bind your current game. Your browser stores up to two recent puzzles’ earned progress, a signed recovery receipt and any unconfirmed submission so that reloads and retries preserve progress. Clearing browser data removes these local records. They are not sent to analytics. Up to 365 played dates are retained locally as editable history. Guest server state expires at puzzle close plus 48 hours.

The web server necessarily receives connection information. When error reporting is enabled, GlitchTip receives technical errors and stack traces to help us fix problems. Analytics and error reporting are separate.

Joey Gough controls this service. We use your email and saved account games to provide the sign-in and cross-device game service you request. Account games remain until you delete your account.

We count games and outcomes on the server without recognising guests across dates. For accounts, we use accepted signed-in guesses to understand return play, separately from necessary authentication. You can object to account-retention measurement below without losing your games. Aggregate game totals remain.

Expired sign-in challenges and security budget records are removed in bounded scheduled batches after seven days. Temporary guest delivery records expire after puzzle close plus 48 hours. Daily aggregate totals have a 400-day retention policy. Encrypted backup retention is limited to 30 days; deleted-account records are kept separately so deletion can be reapplied before a restore reopens.

Before public release, the controller contact, legitimate-interest assessment for security and account measurement, service-provider details and off-host deletion/backup arrangements must be confirmed. This development notice does not claim those deployment checks have happened.