Last updated: 11 November 2026.
The short version
- No accounts, no email addresses, no passwords.
- No advertising, no ad-tech, no cross-site advertising profiles. We do not sell or share personal data.
- Two aggregate measurement tags: Google Tag Manager container
GTM-N2JDLXLM, which loads Google Analytics 4, and Cloudflare's automatic Web Analytics beacon, which is injected by the host and measures aggregate page performance without cookies. GA4 counts page views and aggregate traffic (device, browser, approximate region and referrer) and may set first-party analytics cookies. Google processes that data as our processor — see Google's privacy policy and how Google uses data from sites that use its services. - Your scores, streak, badges, settings and drawings are stored in your browser's local storage and are never uploaded.
- The site is static and hosted on Cloudflare; the only network requests it makes are for its own files plus the two analytics requests described below.
What is stored on your device
The game keeps one local-storage key, extraplot:v1. It contains your scores, streak, badges, settings (sound, theme, motion) and resume state for a run in progress. That data never leaves your browser and is not sent to us or anyone else. It is used only to make the game work from one visit to the next. Your drawing is scored in the browser; the line you draw is not uploaded.
You can delete it at any time by clearing site data for extraplot.cloud in your browser settings. The charts and the archive keep working; you simply start a fresh profile.
Analytics
We use Google Tag Manager (container GTM-N2JDLXLM) to load Google Analytics 4. Its job is to answer simple product questions: how many people visit, which pages they read, which devices and browsers they use, and roughly which country or region a visit comes from (derived from the request IP by Google). Page URLs, referrer, device and browser information and interaction events configured in the container may be sent to Google.
Cloudflare Web Analytics is the host's automatic, cookieless measurement layer: it reports aggregate page performance and traffic without setting cookies or building a profile. It cannot be disabled per visitor, but it collects no personal data beyond standard request metadata. GA4 is loaded from Google Tag Manager; we do not send your scores, drawings, local profile, email address or any other personal data to it. Reports for both are viewed in aggregate and are not used to identify individuals, run advertising or build cross-site profiles. You can block the GA4 tag with a content blocker, browser privacy setting or Google's Analytics opt-out add-on; the game works exactly the same without it.
Google Analytics 4 may set first-party cookies such as _ga and _ga_<container> to distinguish sessions. The site sets no advertising cookies and has no advertising or remarketing tags. You can clear these cookies through your browser's site-data controls.
What we do not collect
- No account information, because there are no accounts.
- No advertising identifiers, no ad-tech pixels and no cross-site advertising profiles.
- No sale or rental of personal data — there is no data to sell.
- No third-party embeds, fonts, images or CDNs. Fonts, icons and charts are served from extraplot.cloud.
- No upload of your drawings. They are compared with the truth in your browser.
Server logs and hosting
Extraplot is hosted on Cloudflare Workers. Cloudflare processes requests to deliver the site and to protect it from abuse, which means its systems may record standard request metadata such as IP address, user agent and the requested URL. This is infrastructure-level logging. The site has no backend application code, no database of players and no way to link a request to a game profile.
A tiny edge worker redirects www.extraplot.cloud and HTTP requests to the canonical https://extraplot.cloud URL before assets are served. It does not read, store or log request bodies, scores or drawings. Cloudflare's handling is described in its own privacy policy.
If you email hello@extraplot.cloud, your email provider and ours will process the message and its contents so that we can read and answer it. We use it only to reply. Do not send personal information you would not want in an inbox.
Children
The game is suitable for general audiences and does not knowingly collect personal information from anyone, including children. The analytics tag measures aggregate traffic and is not used for advertising or profiling.
Your choices and rights
You can play without analytics by blocking the tag; no feature depends on it. Depending on where you live, you may have rights to access, correct, delete or object to processing of personal data, and to lodge a complaint with a supervisory authority. Because the game itself stores no personal data on our side, most requests will concern analytics data processed by Google; contact us at the address below and we will help.
Changes
If the way the site handles data ever changes, this page will be updated and the date above changed. Material changes will be described in plain language rather than hidden in a revision history.
Questions about privacy? Email hello@extraplot.cloud. See also the terms of use.