Privacy Policy

Last updated: August 2026

Frog Noggin ("we", "us", "our") operates frognoggin.com and its subdomains (the "Site"), where you can play our puzzle games, create an account, and track your progress. We refer to all of this collectively as the "Services". This Privacy Policy explains what information we collect from you ("User", "you") when you use the Site or Services, and how we use and protect it.

1. Our Main Principle

We collect only the data necessary to operate the Services and provide core features such as saved progress, account access, and player statistics.

We use analytics to understand how the Services are used and to improve them, but we do not sell your data or use it to build advertising profiles.

2. Information We Collect

When you create an account, we collect:

  • Account information: Username, email address, and password (securely hashed)
  • Profile information: An optional bio
  • Game data: Which levels you have completed, your completion times, and your streaks

When you play games, we collect:

  • Gameplay analytics: For each attempt at a level, how long the attempt took, whether you finished it, and how many hints, solutions, and wrong guesses you used
  • Session data: A browser session, used to save your game progress when you are signed in, and to count an attempt correctly when you are not. See the Cookies section below.

If you play without an account, this gameplay data is not linked to any identity. It is tied only to a random session identifier that we cannot trace back to a person.

When you submit a bug report, we collect:

  • Your description of the issue
  • The page URL where the bug occurred
  • Your browser's user agent string (browser and device information), to help us reproduce and fix the issue

When you write to us through the Contact Us form, we collect:

  • Your email address, so that we can reply to you
  • Your message, and the page you were on when you wrote it
  • Your username, if you are signed in

Contact messages are not saved to our database. They are emailed straight to our support inbox, so they will not appear in a data export. Your IP address is checked briefly to limit how often the form can be submitted, and is not stored with your message.

3. How We Use Your Information

We use your information to:

  • Provide and improve our games
  • Save your game progress across sessions
  • Display your statistics and achievements
  • Analyze gameplay patterns to improve puzzle difficulty
  • Respond to bug reports and support requests

4. Third-Party Services

We work with the following service providers, which process user data on our behalf:

Stripe (Payments)

Any payments made on our Site are processed by Stripe. We do not store your payment details; they are handled directly by Stripe under Stripe's privacy policy.

https://stripe.com/privacy

Google OAuth (Optional Sign-In)

If you choose to sign in with Google, we receive your name, email, and profile picture from Google. We store only your email address to link your account.

https://policies.google.com/privacy

Resend (Email Service)

We use Resend to send transactional emails (password reset, email verification) and to deliver the messages you send us through the Contact Us form. Your email address and the content of those emails are transmitted to Resend for delivery.

https://resend.com/legal/privacy-policy

Railway (Hosting)

Our application is hosted on Railway. All data is stored on their servers in accordance with their privacy policy.

https://railway.com/legal/privacy

5. Cookies and Local Storage

We use only first-party, essential cookies:

  • sessionid — Keeps you logged in and saves your progress on a level. If you play without an account, this cookie also lets us count your attempt once rather than many times; it holds a random identifier only, never your name or email. It expires after two weeks.
  • csrftoken — Protects form submissions against cross-site request forgery.
  • messages — Temporarily carries confirmation notices (for example, "profile saved"). It is deleted as soon as the notice has been shown.

We also store your local play streak in your browser's local storage. That information stays on your device and is never sent to us.

We do not use third-party tracking cookies or advertising cookies. Signing in with Google or paying through Stripe takes you to their sites, where their own cookies and privacy policies apply.

6. Your Rights (GDPR)

You have the right to:

7. Data Retention

  • Account data: Retained until you delete your account
  • Gameplay analytics: Records tied to your account are deleted with your account. Records from play without an account are already pseudonymous and are kept in aggregate to help us tune puzzle difficulty.
  • Bug reports: Retained indefinitely (anonymized if you delete your account)
  • Contact messages: Held in our support inbox rather than our database, and deleted once we no longer need them. Deleting your account does not remove an email you have already sent us.

8. Data Security

We protect your data using:

  • HTTPS encryption for all data transmission
  • Secure password hashing (PBKDF2)
  • CSRF protection on all forms
  • HTTP security headers (HSTS, X-Frame-Options, etc.)

9. Contact

For privacy-related questions or to exercise your rights, use the Contact link at the bottom of any page, or email us at [email protected].