Privacy policy
No accounts, no logins, and nothing you play is sent to us. Here is exactly what happens with data on this site.
Last updated: 9 August 2026. This is the privacy policy for upheadsgame.com. It explains what the site collects, what it does not, and how to reach us.
The short version
upheads has no accounts, no logins and no server-side game data. You do not tell us who you are, and the game never sends what you played to us. What we do use is standard website measurement (Google Analytics) and advertising (Google AdSense), both of which set cookies. Anything you type into the game — your own custom word deck — stays in your browser on your device.
Who we are
upheads is an independent party game published at upheadsgame.com. It is not affiliated with, endorsed by or connected to any other game or app of a similar name. You can reach us any time through the contact form; that is also the address for any privacy request described below.
What stays on your device
The game stores two things in your browser's local storage, and neither is ever transmitted to us:
- Your language choice (
upheads_lang) so the site opens in the language you picked last time. - Your custom words (
upheads_custom) if you build your own deck. These are yours; they never leave your device and we cannot see them.
Clearing your browser data removes both. There is nothing to delete on our side because there is nothing on our side.
Analytics
We use Google Analytics 4 to understand how the game is used — how many people play, which decks are popular, whether new features get used. It records events such as a round starting and ending, along with the deck name, round length and language. It also records the usual website measurements: an approximate location derived from your IP address (city level, not an address), device and browser type, and how you arrived at the site.
Google Analytics sets cookies to distinguish visitors. We do not upload anything that identifies you personally, and we do not try to work out who you are. Event data is retained for 14 months, after which Google deletes it.
If you would rather not be counted, you can use the Google Analytics opt-out add-on, block analytics cookies in your browser, or use a browser or extension that blocks trackers. The game works exactly the same either way.
Advertising
The site loads Google AdSense so the game can stay free. Google and its partners may use cookies and similar identifiers to serve and measure ads. Depending on your settings and where you are, ads may be personalised or non-personalised.
You can control this: visit Google My Ad Center to manage ad personalisation, or aboutads.info and Your Online Choices for industry-wide opt-outs. If you are in the EEA, the UK or Switzerland, you will be asked for consent before personalised advertising cookies are used, and you can change that choice at any time from the consent link on the page.
Hosting
The site is hosted on Vercel. Like any web host, their servers record standard request logs — IP address, user agent, requested page and timestamp — which are used to deliver the site, keep it available and protect it from abuse.
The contact form
If you write to us, the form sends your name, email address and message to our inbox through Web3Forms, a form delivery service. Those details are used only to read and reply to your message. We do not add you to a mailing list and we do not sell or share your details. Messages stay in our inbox until they are no longer needed.
What we deliberately avoid
There are no social media buttons or embedded third-party widgets on the game page. The fonts are served from our own domain rather than a font network, so loading the page does not tell anyone else that you visited. There is no chat, no user profiles and no way for players to send each other anything.
Children
upheads is family-friendly and includes a deck written for children, but it is not directed at children under 13 and we do not knowingly collect personal information from them. The game asks for no personal details from anyone. If you believe a child has sent us personal information through the contact form, write to us and we will delete it.
International transfers
Our service providers (Google, Vercel, Web3Forms) are based in or process data in the United States and other countries. They rely on standard contractual clauses and equivalent safeguards for transfers out of the EEA and the UK.
Your rights
Depending on where you live, you may have the right to access the personal data held about you, to have it corrected or deleted, to object to or restrict processing, to withdraw consent, and to complain to your data protection authority. Because we hold no account data, in practice this usually concerns analytics or advertising identifiers, or a message you sent us.
To exercise any of these, use the contact form. We will respond within one month.
Changes
If this policy changes, the date at the top of this page changes with it. Material changes will be noted on the page rather than made quietly.