Privacy
What we collect and why
Last updated 14 October 2026.
Play without an account
You can solve today’s boards in the browser with no email. Streaks, solve counts, and settings stay in this browser’s local storage. Arcade Pass is a separate purchase.
If you sign in
We collect:
- Email — to send a magic-link sign-in (and email-change confirmation).
- Display name — optional, only if you join public daily leaderboards.
- Finished dailies — the puzzle, time, and hints for each daily you finish, saved so that daily reopens solved on another browser. The streak number and solve counts stay on the device that played.
- Leaderboard scores — shown on the public leaderboard only if you opt in. Opting out hides you from listings. It does not stop the finished daily from being saved.
- Device slot ids — anonymous browser ids so Arcade Pass can restore on up to 3 browsers.
We do not ask for a password. Magic links expire in 15 minutes.
If you buy Arcade Pass
Card details go to Stripe, not to Coronet. We store the checkout session id, receipt email, amount, and which browsers you’ve restored so we can honor the pass. Price is $4.99 USD.
Analytics
Cloudflare Web Analytics records page views. Cloudflare Analytics Engine records anonymous game events (open, win, share). No Google Analytics. No advertising cookies. No user ids in analytics.
Who receives data
- Cloudflare — hosts the site, Worker API, D1 database (accounts, finished dailies, leaderboards, payment ledger), Web Analytics, and Analytics Engine.
- Resend — delivers sign-in and email-change messages.
- Stripe — Checkout and restore lookups.
We do not sell personal data. Public leaderboards show only the display name and score you opted into.
How long we keep it
Account rows stay until you delete the account. Payment ledger rows stay as long as we need them to restore a purchase or meet bookkeeping rules. Magic-link tokens expire. Cloudflare processes website analytics.
Your choices
- Play as a guest — nothing is emailed.
- Stay off public leaderboards — default is off.
- Delete account — Settings → Account → Delete account. That deletes the account, finished dailies stored on it, leaderboard scores, and sessions. Streaks and solve counts in this browser stay until you clear site data. Stripe’s copy of the charge remains with Stripe.
Children
Coronet Arcade is a general-audience puzzle site. We do not knowingly collect personal data from children under 13.
AI client integration
The free daily puzzle integration has a separate plugin privacy notice and plugin use terms.
Contact
Email hello@coronet.one. Operator: Coronet Arcade at coronet.one.