Privacy & safety

You do not need an account, email address, phone number, payment information, or social-media login to play. Never enter a password or other private information into the game.

What is processed

The app sends each name to its own server for eligibility checking against public Wikimedia data. Completed and abandoned games may store public-figure names, timing, outcome, and limited anti-abuse telemetry. IP addresses and browser identifiers are stored only as salted hashes—not in raw form.

Retention

Expired game sessions are deleted after a short operational grace period (normally within about three hours of creation), and rate-limit records are deleted after two days. Suspicious-submission records are deleted after 30 days. Salted network/browser hashes and any historical display name are removed from attempts after 30 days. Anonymous game results and public-figure names may be retained for aggregate statistics.

Third parties

The server consults Wikidata and Wikipedia to verify public figures. Vercel hosts the application and, like any hosting provider, processes request information such as IP addresses in order to deliver and secure the service. Vercel Web Analytics stores anonymized, aggregated page-view data without third-party cookies. Cloudflare Turnstile processes browser and device signals for automated-abuse protection.

Phishing warning

The public game will never ask for a password, authentication code, wallet connection, payment, or file upload. Treat any page claiming otherwise as fraudulent.