DINORIS

Privacy and contact. The same text is in the game itself, under OPTIONS → INFO.

The short version

Dinoris is a browser game. You can play all of it without an account. Signing in exists for one reason: the WORLD leaderboard is a ranking of people, so it has to know which person. No email address is stored anywhere, and nothing is sent to any third party — the game loads no fonts, scripts, analytics or advertising from anyone else's servers.

What is kept when you sign in

• An id from your sign-in provider — the subject identifier only, in the form google:<id>. Your email address and profile picture are not requested and not read, even where the provider offers them.
• The display name you choose, plus a normalised copy of it used to keep names unique, and whether you have picked one yet.
• When the account was created.
• Your runs — score, level, lines, time, and the recorded input of the run itself, which is what lets the server re-check a submitted score instead of trusting it.
• Your own play history and jewels, and the display preferences attached to them.
• How each of your runs went — the same figures the result card shows you at the end of a run (best combo, T-spins, quads, back-to-back, the line-clear breakdown and the finesse counts), how the run ended, and the control and display settings it was played with. This is kept so the game can be balanced against how it is actually played. It is never shown to other players, and nothing on the WORLD board reads it.
• What you played it on — whether that run used a keyboard, a game controller or the on-screen touch buttons, and the size of the browser window it was played in (its width, height and pixel density). The game scales itself to fit the window, so a short screen ends up smaller than a narrow one; this is kept so those screens can be checked against real ones instead of guesses. It is a measurement of the window, not of the device: no device name, no model, no operating system, no address, and nothing that could be used to recognise you somewhere else.

What is not kept

• No email address, at any point.
• No IP addresses. They are not written down anywhere.
• No tracking pixels, no advertising, no third-party embeds, and no analytics service of any kind — nothing about you is sent anywhere else.
• Nothing is posted anywhere on your behalf.

Without signing in, nothing about you is stored on the server — settings and records stay in your own browser.

The server keeps two things, and neither is about anyone in particular.

A daily tally of how many times the page was opened, and which site linked here — the linking site's name only (example.com), never the full address you came from. An announcement link may also carry a short label such as ?from=x, which is recorded in place of the linking site; the labels are a fixed, short list, and anything else is counted as other. There is no cookie, no identifier and no address behind those numbers, so they cannot tell one person opening the page ten times from ten people opening it once. It exists so it is possible to know whether anyone is playing at all.

Crash reports, when the game hits an error in your browser. One holds the error message, where in the code it happened, and the name your browser gives for itself (Chrome 140 on Android and the like) — no address, no cookie, no account, nothing that connects it to you, and nothing you have typed. They are kept for 30 days at most, and only the most recent few hundred. They exist because a fault that only appears on somebody else's phone is otherwise invisible — and fixing it is the only thing they are used for.

Feedback you send from inside the game. The game has a box under OPTIONS → INFO for reporting something broken or asking for something. If you use it, what you wrote is kept, and with it: your most recent run (so the run a report is about can be watched), the mode and screen you were on, your handling settings, the size of the browser window, the name your browser gives for itself, and which account sent it, if you were signed in — so that a reply, and the runs it is about, can be found. Signed out, the message is kept with no account on it. Nothing else is attached, and nothing you have not typed. It is read only by the person who makes the game, is used only to fix and build it, and is deleted along with everything else if you ask for your account to be deleted.

Cookies

One cookie, set only after you sign in. It holds a signed session identifier and nothing else, lasts 30 days, and is marked HttpOnly, Secure and SameSite=Lax. Signing out clears it.

What other players can see

The WORLD board shows the name you chose, your jewel badge, and the score and run that earned the place. That is all of it — the board has no route to anything else about you.

Deleting your data

Write to the address below. You will be sent a short code and asked to change your display name to it. Since no email address is kept, the message arriving from any particular inbox proves nothing about who owns an account — being able to change the name on it is the only proof of ownership that exists here. Once the name matches, everything stored under the account is deleted.

A name on WORLD

The board shows names other players picked. If one is abusive, or pretends to be someone, report it at the same address. The name is what gets reviewed, so you do not need an account to report one.

Contact

[email protected]

Last updated 23 August 2026. Back to the game.