Privacy and cookie notice
Last updated: 18 October 2026
QUIRK SHOT collects as little as it can. You can play without an account. No ads, no advertising trackers, and we never sell data.
Who is responsible
Wolfgang Dafert, Rua Eng. Francisco Perry Vidal 9, Edifício Living Funchal, Bloco 4, Fracção AM, 9050-068 Funchal, Portugal. Contact: w.dafert@gmail.com, phone +351 925 432 947.
Playing as a guest or with an account
- As a guest you stay anonymous. The game knows you only by a random ID saved in your browser.
- With an account (optional) your credits and remixes are kept across devices. You sign in with Google or with a link sent to your email. We store your email address, an account ID and your credits. If you sign in with Google, your profile picture is shown only in your own browser, straight from Google; we never store your name or photo. You can delete your account at any time with "Delete my account" in the account menu: this deletes your account, its credits, your nickname, your scores and your sign-in. Remixes you made stay in the game, without any link to you. When you sign in, the credits and remixes of your guest ID move into your account.
What we store and why
| What | Why | How long |
|---|---|---|
| A random ID saved in your browser | To count your free remixes and the ones you bought, and to link your play to your guest profile. It is not linked to your name. | Until you clear your browser data. On our side, as long as QUIRK SHOT runs. |
| Your email address and account ID (only if you sign in) | To keep your credits and remixes across devices, and to let you sign in. | Until you delete your account ("Delete my account" in the game, or email us). |
| Your internet address (IP), scrambled before we store it | To limit free remixes per connection and stop abuse. We store a scrambled code, not the address itself. | As long as QUIRK SHOT runs. |
| Your internet address in our hosting provider's request logs | To keep the server running and find errors. | Up to 30 days. |
| What you do in the game: levels started, won and lost, replays, remixes made, links shared, and which shared link brought you here | To understand which levels people like and how the game spreads, and to rank player remixes. Linked to your guest ID or account ID, never to your name. We look at it as totals and as a share tree. | As long as QUIRK SHOT runs. |
| Technical play data: each shot (direction, power, timing, result), errors in your browser, and your device type, browser and screen size | To fix bugs and make levels play better on every device. Linked to your guest ID or account ID, never to your name. No session recording. | As long as QUIRK SHOT runs. |
| Your leaderboard nickname and best scores (only if you sign in) | To show the leaderboards. Your nickname and scores are public. The game picks a fun nickname for you, which you can change; it is never your Google name. | Until you delete your account. |
| Your answers in the short form after you share (why you shared, and one sentence about the game) | To learn why people share the game. Answering is optional. Please do not write personal information there. | As long as QUIRK SHOT runs. |
| Your thumbs up or down on a level | To rank levels and remixes. Other players see only the totals. | As long as QUIRK SHOT runs. |
| The sentence you write for a remix, and the remix itself | To make the remix, to let others play it by link, and to show popular remixes to other players (with play counts, never with your name or email). Other players can build their own remix from your sentence. We also use AI to group the sentences into themes, to see what players ask for. | As long as QUIRK SHOT runs, or until you ask us to delete it. |
| Payment records: your guest ID or account ID, amount and time of the purchase | To give you your remixes and to keep the records tax law requires. | As long as Portuguese tax law requires (usually up to 10 years). |
The legal reasons (under the GDPR, the EU data protection law): giving you the game, your account and the remixes you bought (contract); preventing abuse and improving the game from anonymous play data (our legitimate interest); and keeping tax records (legal duty). You can object to the use of your play data at any time (see "Your rights").
Who else handles the data
- Google Cloud hosts the game and stores the data, in Belgium (EU).
- Google Firebase Authentication handles signing in and sends the sign-in emails. Google may process this data outside the EU, under the EU's standard contract rules. Google's privacy policy: https://policies.google.com/privacy
- OpenAI (USA) receives the sentence you write and the level you remix, to make the new level, to check it for harmful content and to group sentences into themes. Please do not type personal information into the remix box. OpenAI does not use this data to train its models.
- Stripe processes payments. Stripe receives your card details and email address directly; we never see your card. Stripe's privacy policy: https://stripe.com/privacy
Cookies and browser storage
QUIRK SHOT sets no advertising cookies and uses no outside analytics services. Play data goes only to our own server. The game saves a few small items in your browser's storage: the random ID above, the page to return to after a payment, and, if you sign in, the sign-in session from Firebase so you stay signed in. These are needed for the game to work, so we do not ask for consent. Stripe's checkout page and Google's sign-in page may set their own cookies for security and fraud prevention.
Your rights
You can ask us to see, correct or delete your data, to delete your account, or object to how we use it. Email w.dafert@gmail.com. If you play as a guest, we do not know who you are, so please include your browser ID (shown in the game) or your Stripe receipt. If you have an account, please write from its email address. If you are unhappy with our answer, you can complain to the Portuguese data protection authority, CNPD: https://www.cnpd.pt