Privacy
Effective October 17, 2026 · Last updated October 17, 2026
This policy explains what the daily game Half Full (the website and the game on it) collects, why we collect it, who receives it, how long we keep it, and what you can do about it. It's written to be read, not skimmed past. If something isn't clear, email us at hello@playhalffull.com.
The short version
- No account, no sign-in. We never ask for your name, email or location.
- Your device makes a random player ID. We use it to keep your streak and to compare your score with everyone else's.
- When you finish the day's glasses, your 5 scores go to our database with that ID. We also count a few simple game events, like opening the game or sharing. You can turn those event counts off, and in Europe, the UK and Switzerland they stay off unless you say yes.
- No ads, no analytics companies, and we never sell or share your information for advertising.
- Scores and events are deleted automatically after 24 months. You can ask us to delete them sooner.
- Not made for kids under 13.
1. Who we are
Half Full is run by Tyson Tucker, an individual based in Florida, USA (“we”, “us”, “our”). We decide what information the game collects and why, which makes us the “controller” or “business” responsible for it under privacy laws.
Contact for anything privacy-related: hello@playhalffull.com.
2. What we collect
Stored only on your device
The game saves these in your browser's local storage so it works the next time you visit. They stay on your device and aren't sent to us, except for the player ID and the scores described below.
- A random player ID your browser makes the first time you play (a long string of letters and numbers like
3f2a…). It isn't based on your name, device, or anything else about you. - Your scores for each day you've played, and your streak.
- Your settings: sound on or off, whether you've seen the how-to-play guide, and your usage-stats choice.
- The name you type in when you send a challenge link, if you choose to type one (see section 5).
Sent to our database
- Daily results: when you finish the day's 5 glasses, we receive your player ID, the puzzle number, your 5 scores, your total, and the time we got them. This is how the game can tell you how you did against everyone else. A replayed past day is never sent.
- Usage stats (unless turned off; see section 8): a short record each time one of these happens: you open the game, start the day's puzzle, finish it, share a result, or open a friend's challenge link. Each record holds your player ID, the puzzle number, the type of event and the time. Nothing else: no clicks, no mouse movements, no screen recordings.
Collected automatically when your browser loads the site
Like every website, the companies that host Half Full and its database receive your IP address, basic browser and device details (the “user agent”), and the address of the page or file being requested. Your IP address can show your approximate location, usually your city or region. The site's fonts and code come from our own site, not from font or code-library companies. We don't store IP addresses in our own database. Section 4 covers what each company receives and how long its logs last.
When you email us
If you email us, we receive your email address, whatever you write, and any player ID you include.
What we don't collect
We don't collect your name (other than an optional challenge name, which stays on your device and in the links you send), email (unless you write to us), phone number, precise location, contacts, photos, payment details, or anything from other websites you visit. We don't use fingerprinting, session recording, or analytics or advertising companies.
3. How we use it
We use this information only to:
- Run the game: keep your progress and streak, and show you how your score compares with everyone else's. Other players only ever see totals and a histogram, never your ID or individual results.
- Understand whether the game works: for example how many people play each day and how many come back the next day or the next week. We look at these as overall numbers.
- Keep it fair and running: spot broken or abusive submissions, fix bugs and protect the service.
- Answer you: respond to your emails and privacy requests, and keep a record that we did.
- Follow the law: meet legal duties and respond to valid legal requests.
We don't use your information to build advertising profiles, we don't make decisions about you that have legal or similarly significant effects, and we don't collect, use or sell personal information to train large language models. If we ever want to use information for a purpose that doesn't fit this list, we'll update this policy first and ask for your consent where the law requires it.
4. Who receives it
We don't sell your personal information or share it with anyone for advertising. These service providers handle it for us, under contracts that let them use it only to provide their service:
| Provider | What it does | What it receives |
|---|---|---|
| Cloudflare, Inc. (USA) | Hosts and delivers the website, including its fonts and code, and protects it from attacks. Forwards email sent to our address. | IP address, browser details, the pages and files requested (including any challenge-link details in the address), and emails you send us as they pass through. |
| Supabase, Inc. (USA) | Runs our database, which stores daily results and usage stats. | Player ID, scores and events. Its request logs also record IP address, browser details and approximate location, which are kept for about 1 day. |
| Our email provider | Stores emails you send us. | Your email address and message. |
Tips
The results screen has a Support Half Full button. It's a plain link to our tip page on Ko-fi (ko-fi.com/route4): the game doesn't load anything from Ko-fi or send it anything, and nothing happens unless you tap it. If you tip, Ko-fi and its payment processors (Stripe or PayPal) handle the payment under their own privacy policies. We never see your card details. We see what Ko-fi shows creators, such as the name you enter, the amount, any message, and possibly your email address, and we use it only to thank you, handle problems with a tip, and keep tax records.
We may also disclose information when the law requires it (for example a valid court order), to protect people's safety or our legal rights, to professional advisers such as lawyers and accountants who are bound by confidentiality, or as part of selling or transferring Half Full. If Half Full is sold or transferred, the new owner has to follow this policy for the information it receives, or give you notice before any change.
6. Cookies and device storage
Half Full doesn't set cookies. It uses your browser's local storage for the items in section 2, which the game needs in order to work: your progress, streak, settings and player ID. Cloudflare may set a short-lived security cookie if traffic to the site looks automated or suspicious. That cookie is used only to protect the site.
To remove the game's data from your device, go to Your data → Erase my data on this device in the game, or clear this site's data in your browser settings. Either way, this only deletes what's on your device. It doesn't delete copies already in our database (see section 8 for that). The next time you play, the game makes a new player ID.
7. How long we keep it
| Information | How long |
|---|---|
| Data on your device | Until you erase it in the game or clear it in your browser. |
| Daily results and usage stats in our database | 24 months after we receive them. They're then deleted automatically by a job that runs every night. We delete them sooner if you ask. |
| Supabase request logs (IP address, approximate location) | About 1 day. |
| Cloudflare's logs | Set by Cloudflare for running and securing its service. We don't receive these logs or use them to identify players. |
| Emails | Up to 24 months after the conversation ends, unless we need them longer for a legal reason. |
| Tip records (from Ko-fi) | As long as tax law requires us to keep income records, usually up to 7 years. |
| Records of privacy requests | 24 months, to show we handled them, as many state laws require. |
| Blocked player IDs (see section 12) | As long as needed to keep blocking new data from that ID. |
8. Your choices and rights
In the game
Open Your data from the results screen or the ? guide. There you can:
- see and copy your player ID,
- switch usage stats on or off (turning them off stops new usage records from being sent from that browser, though daily results are still sent so the score comparison works),
- erase the game's data from your device.
Your rights
Wherever you live, you can ask us to:
- confirm whether we have personal information about you, and give you a copy in a common, portable format,
- tell you which categories of information we have, where it came from, why we use it, and who receives it (also listed in this policy),
- correct it if it's wrong,
- delete it,
- stop or limit how we use it, or object to a particular use,
- withdraw consent you've given, which doesn't affect what we did before you withdrew it.
We don't sell or share personal information for targeted advertising, and we don't profile people in ways that produce legal or similarly significant effects. So there's nothing to opt out of today. If that ever changes, we'll offer an opt-out first. We'll never treat you differently, or give you a worse game, for using your rights.
How to make a request
- In the game, open Your data and tap Copy player ID to copy your player ID. Your ID is the only thing that links data in our database to you, because we don't know your name or email. Each browser or device you play on has its own ID.
- Email it to hello@playhalffull.com and tell us what you'd like us to do.
Checking it's you: since we never learn who you are, a player ID is all we can verify a request against. Treat your ID as private, because anyone who has it can make requests about its data. We may ask you to send the request again from the same device or confirm details only the player would know (such as scores on a certain day) before giving out a copy. We'll use whatever you send us to verify you only for that purpose.
Someone acting for you: an authorized agent can make a request for you with your signed permission, or with a power of attorney. We may ask you to confirm the request directly.
Timing: we'll confirm we got your request within 10 business days and respond within 30 days. If a request is complicated, we may take up to 45 more days, and we'll tell you why. Requests are free, unless they're clearly unfounded or excessive.
Appeals: if we decline your request, we'll explain why. You can appeal by replying with the word “Appeal”, and we'll give you a written decision within 45 days. If you're still not satisfied, you can complain to your state attorney general, or to the data protection authority where you live (see section 10).
9. US state notices
These notices are for residents of California and of other states with privacy laws, including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia. The rights in section 8 are open to everyone, whether or not your state's law requires them.
California notice at collection (past 12 months)
| Category | What it is | Sold or shared? |
|---|---|---|
| Identifiers | Random player ID; IP address (received by our service providers); email address if you write to us | No |
| Internet or other electronic network activity | Daily results and the game events in section 2; browser details | No |
| Geolocation | Approximate location from an IP address, only in Supabase's short-lived request logs. Not precise location. | No |
| Sensitive personal information | None | No |
We get this information from you and your device. The purposes are in section 3, the recipients in section 4, and how long we keep it in section 7. We have not sold or shared personal information (as California law defines “sell” and “share”) in the past 12 months. We don't sell or share personal information of people under 16, or of anyone we know is under 18. We don't use or disclose sensitive personal information. Half Full isn't a data broker.
Opt-out signals, including Global Privacy Control and Do Not Track
We don't track you across other websites, and we don't sell or share personal information. So signals like Global Privacy Control (GPC) and Do Not Track have nothing to switch off on Half Full today. If we ever start an activity these signals apply to, we'll treat a GPC signal as a valid opt-out for that browser.
Nevada
We don't sell covered information as Nevada law defines it. You can still send an opt-out request to hello@playhalffull.com, and we'll record it.
California “Shine the Light”
We don't disclose personal information to others for their own direct marketing.
10. Europe, UK and Switzerland
If you're in the European Economic Area, the United Kingdom or Switzerland, data protection law (the GDPR, the UK GDPR and the Swiss FADP) gives you the rights in section 8, plus these details.
Why we're allowed to use your information (legal bases)
- Saving your game on your device (player ID, scores, streak, settings): this is strictly necessary for the game you chose to play, so no consent is needed. Our legal basis is our legitimate interest in providing the game you asked for.
- Daily results and the score comparison: our legitimate interest in providing that core feature (seeing how you did against everyone else) and keeping it fair. Other players never see your individual data, and results are deleted after 24 months.
- Usage stats: your consent. In these regions they're off until you tap Allow, and you can turn them off again any time in Your data. We pick this by your device's time zone, so if you're in one of these regions and the game didn't ask you, please turn usage stats off in Your data or email us.
- Security logs at our providers: our legitimate interest in keeping the service safe and running.
- Emails and privacy requests: our legitimate interest in answering you, plus our legal duty to handle and record your requests.
- Tips: our legal duty to keep tax records, and our legitimate interest in thanking supporters and sorting out problems with a tip.
When we rely on legitimate interests, you can object, and we'll stop unless we have compelling grounds or need the data for a legal claim. You're never required to give us personal information, but the game can't save your progress or compare your score without the items above.
Complaints
You can complain to the data protection authority where you live or work, or where you think a breach happened. In the UK, that's the Information Commissioner's Office (ico.org.uk). In Switzerland, it's the FDPIC. We'd appreciate the chance to fix things first, so please email us.
Representative
We haven't appointed a representative in the EU or UK. You can always contact us directly at hello@playhalffull.com.
11. International transfers
We're in the United States, and so are our service providers. If you play from anywhere else, your information goes to the US and possibly other countries where those providers run their systems. Those countries may not have the same data protection laws as yours. Where your law requires it, these transfers rely on safeguards in the providers' data processing terms, such as the European Commission's Standard Contractual Clauses and the UK and Swiss equivalents, or on a provider's certification under the EU-US Data Privacy Framework and its UK and Swiss extensions. You can email us for more information about these safeguards.
12. Children and teens
Half Full is a general-audience game for players 13 and older. It isn't directed to children under 13, and we don't knowingly collect personal information from them. The game doesn't ask your age.
If you're a parent or guardian and think your child under 13 has played: open Your data on that device, copy the player ID, and email it to us. We'll delete everything in our database for that ID, and block it so our database refuses any new data from it. You can also erase the device copy with Your data → Erase my data on this device. If we learn some other way that we've collected information from a child under 13, we'll delete it.
We don't sell or share personal information, and we don't target ads, to anyone, including anyone we know is under 18.
13. Security
The site only loads over an encrypted connection (HTTPS). Database rules let the game add new results and events but never read anyone's individual rows. The only thing anyone can get back is the anonymous totals behind the score comparison. Only we can access the stored data, and our accounts are protected. No system is perfectly secure, though. If a breach affects your personal information, we'll notify you and the authorities as the law requires.
14. Changes, including ads
Half Full has no ads today. If we add ads, or make any other change to what we collect or who receives it, we'll update this policy and show a notice in the game at least 7 days before the change takes effect. Where the law requires it, we'll also ask for your consent before the change applies to you. We won't use information we've already collected in a materially different way without your consent.
We review this policy at least once a year. The date at the top shows when it last changed. Smaller changes, like clearer wording, take effect when they're posted.
15. Contact
Tyson Tucker, Half Full
Florida, USA
Email: hello@playhalffull.com
We usually reply within a few days.