Privacy policy
Last updated: 22 May 2026.
The short version
- No account. There is no signup, and we don't ask for your name or email.
- Your game data lives in your browser. Scores, streaks, theme, language, and difficulty preferences are stored in your browser's
localStorage. They never leave your device. - Online matches are peer-to-peer. Moves travel directly between your browser and your opponent's — we never see them.
- Third-party services may apply. We may use analytics and advertising providers to keep the site funded and improving. Details below.
What stays in your browser
Your scores, streaks, theme, language, and difficulty preferences are stored
in your browser's localStorage. They survive a page reload, they
never reach our servers, and clearing your browser data clears them too.
Online matches
Online tic tac toe 2 player matches connect peer-to-peer via WebRTC. We use the public PeerJS signalling broker only for the initial handshake; once the connection is established, your moves travel directly between your browser and your opponent's. No match data is stored anywhere. When the match ends, nothing remains.
Analytics and advertising
We may use third-party analytics providers (for example Google Analytics, Plausible, or similar) to understand how the game is used and where to spend engineering time. We may also display advertising from third-party networks to help cover hosting costs. When either feature is active, the relevant scripts are loaded on the page and the third-party providers may set cookies or collect technical data such as your IP address, user agent, and approximate location. We keep these third-party scripts minimal and prefer providers with strong privacy track records.
If you're in the EU/UK or another region with consent rules, a cookie banner will appear on first visit so you can accept or reject non-essential cookies. You can change your choice at any time through the same banner. Most browsers also let you block third-party cookies entirely in their settings, and "Do Not Track" / "Global Privacy Control" signals are respected where technically possible.
Cookies we may set
- Strictly necessary — small cookies set by our hosting provider (Vercel) to deliver the site. These don't track you across sites.
- Preferences — your language, theme, and difficulty are stored in
localStorage(not cookies). They never leave your browser. - Analytics & advertising — set by third-party providers when those features are active, and only after your consent where required by law.
Your rights
If you're in a region with data-protection law — GDPR in the EU, UK GDPR, CCPA / CPRA in California, LGPD in Brazil, PIPEDA in Canada, the EU AI Act's relevant provisions, and similar regimes elsewhere — you have the right to access, correct, delete, or export the data we hold about you, and to withdraw consent. We don't operate user accounts, so in practice there's very little data tied to you, but if you ever have a request, email us at the address on the contact page.
Children
The game is suitable for all ages. We don't knowingly collect data from children. If you're a parent or guardian and have a concern, reach out through the contact page.
Changes to this policy
When we change this policy in a meaningful way, we'll update the date at the top and, where required by law, surface a notice on the site. Continued use of the game after a change means you accept the updated terms.
Contact
Privacy questions, takedown requests, or feedback: see the contact page.