Play today's puzzle

Privacy policy

Last updated November 4, 2026

The short version: Tato Dig collects as little as it can. You don't need an account, and we never ask for your name, email or age to play.

Who we are

Tato Dig (tatodig.com) is a small independent game. In this policy, "we" means Tato Dig. You can reach us at hello@tatodig.com.

What we collect and why

A random player ID

The first time you play, your browser makes up a random player ID: a long string of letters and numbers. It isn't linked to your name, your email or your device. It's saved in your browser and sent with your scores.

Your scores and runs

When you finish a round, your browser sends us the puzzle number, the round, your moves, your player ID and the version of the game rules you played. The timed round also sends the time of each move, so we can work out your time; the least moves round sends only the moves. Our server replays the moves to check the run and works out your move count, your medal and, for the timed round, your time.

We store your scores together with your random player ID for as long as you keep playing, for player counts and so a round counts only once. Once a year goes by without you submitting a score, we delete all of them. The player ID isn't linked to your name, your email or your device. Each day's charts, which hold only counts and aren't linked to anyone, and its best path are kept, so past puzzles keep their charts.

Sync codes

If you choose Move to another device, your browser uploads your stats (your results, your player ID and whether you've finished the tutorial), and we store them under a random 12-character code. Anyone with that code can read and change those stats and use that player ID, so only use it on your own devices. We delete a code and its stats after a year without an update.

Anonymous usage events

Your browser also sends anonymous events, like "tutorial skipped", to show us which parts of the game work. Our server adds only the country your connection comes from and whether you're on a phone or a computer. They don't include your player ID or IP address, and Cloudflare keeps them for three months.

Cloudflare Web Analytics

We use Cloudflare Web Analytics to count visits and page views, and to see which sites sent people here, which countries they're in, what devices and browsers they use, and how fast our pages load. It doesn't use cookies.

Ko-fi supporters

If you donate on Ko-fi, Ko-fi handles the payment and sends us a notice that includes your email address. We don't store that email. Instead, we turn it straight into a scrambled code (an HMAC, made with a secret key) and store only that code, so we can recognize you later without keeping your email. We don't keep your name, your message or the amount, and we don't log the notice, only Ko-fi's ID for the payment. We keep the code while you're a supporter, or until you ask us to delete it.

To turn off ads, you type the email Ko-fi has for your donation on our support page. We make the same scrambled code to look you up and, if you're a supporter, Cloudflare's email service sends a one-time code to that address. We store only a scrambled version of the one-time code, and it expires after 10 minutes. We also note which scrambled email codes we sent one to and when, so no one can flood an inbox, and delete those notes within two days. When you enter the code, your device gets an ad-free pass that's saved in your browser.

Ko-fi's own privacy policy covers what you share with Ko-fi.

Emails you send us

If you email hello@tatodig.com, we get your email address and whatever you write. Cloudflare Email Routing forwards it to our inbox. We use it only to answer you, and keep it only as long as we need to help you.

Puzzles you send in

If you design a puzzle on Design a puzzle and send it in, we store the board, the moves you beat it with, the puzzle name you give and, unless you submit anonymously, the name you give to credit. We don't store your player ID or your IP address with it. Please use a nickname rather than your full name, since the name you give is shown publicly if the puzzle is picked.

We use it only to review it for the daily puzzles. Puzzles we don't pick are deleted 90 days after we review them. A puzzle we pick joins the puzzle bank and is kept for as long as Tato Dig runs, shown with its name and "Puzzle by" the name you gave, or "Anonymous".

What our host sees

Tato Dig runs on Cloudflare, which handles your IP address to deliver pages and stop attacks, and counts requests from each IP address (or, on the support page, each scrambled email code) for a minute to limit abuse. We don't store IP addresses. When something goes wrong on our server, it writes a short error note (like which page failed) to Cloudflare's logs, as it does for a few routine events like a donation arriving, with no IP address, player ID or email in it, and Cloudflare keeps those for up to a week.

Ads

Google AdSense

Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to a website or other websites. Google's advertising cookies let Google and its partners serve ads to people based on their visits to this and other sites, which may include personalized ads. Google also uses cookies or similar technology to limit how often you see the same ad, count ads and stop fraud. Other ad companies that Google certifies may also show ads through AdSense. Google's own policy, How Google uses information from sites that use its services, explains what it does with this.

Your consent: in the European Economic Area, the UK and Switzerland, Google's consent message asks you before your first ad whether ads may use your data. You can change your answer any time with Privacy choices at the bottom of any page with ads. Without your consent you may still see ads that aren't personalized.

US states: where a state's privacy law gives you the right to opt out of the "sale" or "sharing" of personal information for targeted ads, Google shows a Do not sell or share my personal information link on pages with ads.

Ad-free supporters

On a device with a supporter's ad-free pass, Tato Dig doesn't load Google's ad code at all.

What's saved on your device

Tato Dig saves these in your browser's local storage, on your device:

Tato Dig itself doesn't set cookies. Everything above stays on your device until you clear your browser's data for tatodig.com. Safari on iPhone and iPad may also clear it after 7 days without a visit, unless you've added Tato Dig to your home screen.

Google's ads can set cookies of their own. Your browser's settings let you block or clear them, and ads still show without them; they just won't be personalized.

Who we share it with

We only share information with the services that run Tato Dig:

We may also share information if the law requires it.

We don't sell your information to anyone for money. Personalized ads can count as "sharing" under some US state laws, which is why Google offers the opt-out described above.

Where it's handled

Cloudflare and Google run servers around the world, so your information may be handled outside the country you live in, including in the United States. Both use the safeguards the law asks for when data leaves Europe or the UK, such as the European Commission's standard contractual clauses.

Why we use your information

Privacy laws in Europe and the UK ask us to say what each use rests on:

Children

Tato Dig is a general-audience game. It isn't directed at children under 13, and we don't knowingly collect personal information from them. You never need to give us personal information to play. Parents: if you think your child has sent us personal information, email us and we'll delete it.

Your choices and deleting your data

The daily charts only hold counts, and events have no player ID, so neither can be traced back to you. That also means we can't pick your entries out of them.

Your rights

In Europe and the UK, you can ask us for a copy of the information we hold about you, ask us to correct or delete it, ask us to stop or limit using it, object to how we use it, and ask for it in a form you can take elsewhere. Where we rely on your consent, you can withdraw it at any time. You can also complain to your local data protection authority.

In US states with privacy laws (like California), you can ask what information we collect, use and share, ask us to delete it, and opt out of the "sale" or "sharing" of it for targeted ads. We won't treat you any differently for using these rights.

To use any of them, email hello@tatodig.com. Since we don't know who you are, we'll need your sync code (or, for a supporter record, an email from your Ko-fi address) to find your information. We'll answer within a month.

Changes to this policy

If we change this policy, we'll update this page and the date at the top.

Contact

Questions about privacy? Email hello@tatodig.com.

Privacy · Terms · Feedback