Velvet Rope

What we keep

• An anonymous player ID. A random ID in a signed, first-party cookie that scripts can't read, kept for about 13 months. No name, email or account unless you sign in.
• Your email, if you sign in. Kept in our own database so we can send sign-in links (delivered by Resend) and keep your games on every device. We don't email you anything else. If you sign in with Google, Google tells us your name, email and Google account ID; we use them only for your account.
• Your games. The guests you send, your guesses, the rulings and your scores, linked to that ID, so you can finish a night, keep a streak and see your stats. We keep them until you delete them below.
• Leagues, if you join one. The name you pick for leagues, the leagues you're in, and their names. Other members see your league name and each night's result (score, guests and tries), never your guests, guesses or email.
• Rate limits. Counters keyed by your ID and by a keyed hash of your IP address (never the address itself), deleted after two days.
• Judging. Guest text and rule guesses are sent to TypeSafe's Jev model to be judged, without your ID. Rulings are cached by text, with no link to you, and kept.
• Bot check. Before your first guest or guess of the day (and before a sign-in email), Cloudflare Turnstile checks that you're a person, usually without asking anything. A cookie remembers the pass until the end of the day; it holds only the date.
• Analytics. Cloudflare Web Analytics, which uses no cookies: page views (never on league pages, whose links carry codes). A separate cookie holds two random IDs, one for Velvet Rope and one shared with the other Glint Games. We count visits, Share taps, and clicks on “Today’s other puzzles” against it, with no text. Links to the other Glint Games carry the shared ID (signed), so they can tell you arrived from here; it doesn’t identify you or unlock anything. Game totals, like how many people solved a night, are counted from the games above.
• Logs. Our host keeps server logs, which can include your anonymous ID on abuse alerts, for a few days.
• Error reports. When something breaks, Sentry receives the error, the page address without its query, and your browser type. Never your IP address, cookies, ID or what you typed.

Share links carry only your grid and score, never guest or rule text. We don't sell data or show ads.

Velvet Rope is made by Glint Games. Questions or requests: hello@glintgames.site.