Privacy Policy

Data protection officer

The operator, PARK JUNESUNG of Artemis, handles access, correction, deletion, and processing-stop requests.

Contact

clunk@clunk.games

1. Personal information we process

Sections 1 to 9 describe the website and the browser games. Each mobile game app has its own privacy policy; see section 10.

Authentication

• Google or GitHub supplies a user ID, email address, and display name where available.
• We do not create or store passwords.
• An internal identifier for the account and the time you signed up.
• Consent times and optional email-news consent are recorded.

Games and the weekly leaderboard (no sign-in)

• On your first ranked run the browser stores a random player value; the server keeps only its SHA-256 fingerprint.
• The nickname and icon colour you choose, your Gold Block count and refill time, the random code in your shared links, and which new players came through them, whether an invite reward was paid, and the date you last received the feedback reward.
• Ranked runs — season, start and finish times, height (score), blocks stacked, drops and the time of each drop, and the check result. Drop times are used only to confirm a person actually played the run.
• Days played — per Korea-time day: games played, that day's best and which daily missions were done (for missions and the play streak). For signed-in players also the days checked in, streak passes held and used, and weekly mission rewards received.
• A salted hash of the IP address to stop mass creation of players (also used to start later new players from a busy network with no Gold Blocks, and to count how many feedback rewards a network got today; that count is kept for the day only and earlier days are deleted). The IP address itself is not stored.
• If you play while signed in, your account identifier is linked to the player so your nickname carries over to the next season and you play as the same player on every device.
• Public — the weekly leaderboard shows the nickname, icon colour, best height (score) of the week, a signed-in mark (✓) and this month's check-in badge to everyone.
• Anonymous visit statistics — a random visitor value from this browser, the page opened (home or a game), the referring site (domain only), phone or computer, whether a game mode was picked and a game was started, finished or shared, and the time. Used only to see where people stop so we can fix it. No IP address or account is stored with it.
• Page views — the address of the page opened, the referring site (domain only) and the country. Used only to count visits; no cookie, account or IP address is stored with it.
• Send feedback — the face you pick and the message you write, with the page and screen language. Used only to improve the service. A message is not stored together with your player record; to pay the Gold Blocks, the player record keeps only the date you last received the feedback reward.

2. Purposes

• Identify users and keep them signed in.
• Run the weekly leaderboard, count block refills, and check ranked runs for cheating.
• Carry a signed-in player's nickname and records to the next season and to other devices.
• Send optional email about new games and updates.
• Prevent abuse and respond to incidents.

3. Legal basis

Sign-in and service information is processed to perform the contract. News email is sent only with optional consent, which can be withdrawn.

4. Retention and deletion

Account information is kept until deletion is requested. Game player records (nickname, blocks, ranked runs) are also kept until you ask us to delete them (a nickname chosen without signing in is cleared when its season ends; only the last one is kept as a suggestion) — email us with the nickname shown on the leaderboard. Anonymous visit statistics are deleted after 90 days, and feedback is kept for as long as it helps improve the service (at most a year).

Within 30 days of a deletion request, the account and its game records are deleted. Contact clunk@clunk.games.

5. Storage, processors, and overseas transfers

• Cloudflare, Inc. (United States) hosts the service. Accounts and game player and leaderboard records are in Cloudflare D1, in the United States.
• Google LLC and GitHub, Inc. provide sign-in identifiers, emails, and names; Clunk does not send personal information to them.
• On the website and in the browser games, the operator does not give personal information to third parties for any other purpose. Once the app is released, what its ads component sends to Google is in section 10.

This transfer is necessary to perform the service contract. Refusing the Cloudflare transfer prevents service use.

6. Cookies

The website and the browser games use only the authentication cookie clunk_auth_session (up to 7 days) and the language preference cookie clunk_locale. We do not use advertising or behavioral-tracking cookies. Logging out expires the authentication cookie.

The games use browser storage (localStorage) instead of cookies: clunk.player.v1 holds the random player value sent with leaderboard requests, clunk.visitor holds the random visitor value sent with visit statistics and feedback, and clunk.tower.v2, clunk.skin and clunk.shot.v1 keep your practice best, chosen skin and last result image in this browser only. Clearing site data removes them, and the old nickname and records can no longer be used from this browser.

7. Your rights

You may request access, correction, deletion, or restriction by emailing clunk@clunk.games. We process the request and notify you within 10 days where required.

8. Security

• Authentication cookies are inaccessible to scripts and limited cross-site.
• OAuth requests use signed checks.
• The player value and the IP address are stored only as hashes, never as the original value.

9. Age

The games are for everyone, with no age limit. Playing without signing in asks no age, name or contact details. Signing in with Google or GitHub gives us personal information such as an email address, so under Korean law children under 14 need a parent's consent for it; we run no consent process, so children under 14 should play without signing in.

10. The mobile game apps

Clunk's mobile game apps are covered by each app's own privacy policy, not by this one. The apps send our server only what friend invitations need (a random invite code and an anonymous number the app makes); that, and what Google handles for ads, sign-in and payments, is described in those policies.

• Clunk Tower — privacy policy
• Hammerling — privacy policy
• Hexa Garden: Tile Sort — privacy policy
• Glass Harbor: Nonogram Logic — privacy policy

11. Changes

Changes and effective dates are posted at /privacy 7 days ahead, or 30 days ahead for unfavorable changes. This policy is effective from 2026-09-02.