Privacy policy

Daily Grapple · last updated 09/30/2026

Daily Grapple is a free browser game run by efematttt. This page says what the game keeps about you and what you can do about it. It also covers the ads shown on this site's guide pages. Questions: matifinochio@gmail.com.

Signing in is optional

You can play everything without ever giving an email address, and most people do. The game does not store IP addresses, device fingerprints or your location, and it has no passwords.

Your times belong to a random id kept in one browser, and browsers do not share that id across sites — so playing on itch.io and playing here would otherwise count as two different people. Signing in is the way to be one person on both. You give an address, you type back the six digits that arrive, and that is the whole of it.

We do not keep your address. The server stores a one-way hash of it (the address mixed with a secret and scrambled, which cannot be turned back) next to the player id it stands for. That is enough to recognise you when you sign in again, and useless as a mailing list. The address itself passes through the server only to hand to the company that sends the email, and is not written to any log. You will never get anything from us but a sign-in code.

The code is stored scrambled too. It expires after 15 minutes, works once, and stops working after five wrong guesses. Signing in joins the times from this browser to your account, keeping your faster time on each day. Signing out makes this browser a new, empty player and deletes nothing — sign in again and it all comes back. To have an account deleted, write to us from the address it uses.

Linking Discord is optional

If you link your Discord account (the Discord icon on the menu, then /link in our server), we keep your Discord user id next to your random player id. That lets our bot give you champion roles and answer /me. We keep nothing else about your Discord account: no name, picture or messages. Unlinking, in the game or with /unlink, deletes it. If you link again from another browser or device, that browser becomes your player again, with your times and maps (anything it played before comes along). Uploading a map needs a linked Discord account.

Once linked, our bot sends you a Discord message when someone beats your time on the podium (turn this off with /alerts off; we keep that choice), and gives or takes back roles such as a streak or the weekly podium. Your name shows in Discord's colour on the leaderboards, so others can see you linked. A new #1 on today's course or the weekly is posted in our server with the name and time, as on the leaderboard.

Clips: SAVE A CLIP records your run from the game's own picture in your browser and saves it as a file on your device. The game never uploads it. Posting on Reddit opens Reddit with your post filled in; you decide whether to post it.

What your browser keeps

The game saves these in your browser's local storage, and they stay on your device:

• a random player id, made up by the game, and the name you choose;
• your best times, the days you played and your settings (sound, music, keys);
• your best Endless run and how many Endless runs and maps you have played;
• the replay of your latest best run (your positions during the run), for ghosts;
• your friend code and a copy of your friends' codes, for the friends leaderboards;
• the address you signed in with, if you signed in, so the account screen can show it;
• if you first came through one of our short links (such as dailygrapple.io/tt), which one, so the game can tell us once that a new player arrived from it and once that they finished a run;
• whether you did the tutorial, and, if you were new, which of the steps below the game has already counted.
• whether your account has the Supporter Pack, if you signed in;
• whether you opened the donation page.

Clearing your browser's site data for this site removes all of it.

What the leaderboard keeps

When you finish a ranked run, the game sends the server your random player id, your name, the time and the run's replay. The server keeps your best run on each board, runs held for review, runs you chose to share with a link, which of your times beat your own earlier one on a board (for SHARE ON DISCORD, which posts your name, time and place in our Discord when you press it), and your friend code (made when you open the Friends screen, or when another player adds you as a friend from a leaderboard). The leaderboards show names and times, never the player id. If you have signed in, the server also keeps the hash described above and the player id it belongs to. While you play with live ghosts on, your name and position are passed to the other players on the same map and are not stored. You can turn live ghosts off in Settings.

In Endless mode, the server keeps each run you start with your random player id (the maps you cleared and the time you used), and your best run of the week with your name, for the weekly Endless leaderboard. It checks each map you clear with its replay, then discards the replay.

Friends: when you add someone, the server keeps your request until they accept or decline it; once they accept, it keeps that you are friends. It also keeps the name you last used, to show on your friends' lists. Your friends can see whether you are online (the game is open with chat on). Messages you send to a friend are kept for 30 days, so a friend who is offline gets them later, and then deleted; removing a friend deletes your messages with them at once. Other players only ever see your friend code and name, never your player id.

While chat is on (you can turn it off in Settings), your name and the messages you send are passed to the other players in that chat. The chat server keeps the last 50 messages of the public channel and of each room in its memory only, and stores none of them; only messages to friends are kept, as above. Messages are filtered for rude words and links. If you report someone, their last few messages, their name and friend code, and yours, are sent to us so we can act on it; a player we ban from chat is remembered by their player id until the ban is lifted.

Maps you share: when you press SHARE on a map you made, the server keeps the map, its name, your name, your time on it and that run's replay, with your random player id (so the same map shared again keeps its code, and so only you can post it on Discord). Anyone with the map's code or link sees the map, its name, your name and your time, never your player id. Runs on a shared map are kept like any other leaderboard run. If you report a map, the server keeps your player id with that map, so each player reports it once; the report we receive names the map and its author only.

To learn which of our videos bring new players, the server counts, per day, how many people opened each of our short links (such as dailygrapple.io/yt), how many new players arrived through them and how many of those finished a run. It keeps only those totals: nothing that says who you are.

To learn where new players get stuck, a browser that had never played reports, once each, the steps it reaches (such as finishing the tutorial's first map, or a first finished run), with whether it plays on a phone or a computer and on which site. The server keeps only daily totals per step: nothing that says who you are. On Poki, the same steps are also passed to Poki's own game statistics.

The game and its server run on Cloudflare, which processes requests to deliver the site. See Cloudflare's privacy policy.

Visit statistics

On dailygrapple.io, the page uses Google Analytics to count visits: how many people play, from which country and kind of device, and which site or link brought them. It is added to the page, not to the game, so it does not see your player id, your name, your times or your chat. Google Analytics does not keep IP addresses. We have turned off Google signals and ad personalization for it. See how Google uses information from sites that use its services.

In the European Economic Area, the UK and Switzerland, it sets no cookies unless you agree to them in Google's consent message. If your browser sends a Global Privacy Control signal, it is not loaded at all. You can also block it with the Google Analytics opt-out add-on. It is not used on Poki or CrazyGames.

Ads

The game itself shows no ads. Ads appear only on this site's guide pages (how to play, the daily course archive, the devlog and similar pages), never in the game. They are provided by Google AdSense. Google and its partners use cookies to show ads, including ads based on your previous visits to this and other websites. You can turn off personalized ads in Google's My Ad Center, and read how Google uses information from sites that use its services. Other ad vendors' cookies can be turned off at aboutads.info.

If you are in the European Economic Area, the UK or Switzerland, a consent message from Google asks for your choice before any ad cookies are used. You can change it later from the privacy settings link that message provides.

If you turn the ads off in the game, the ad code is not loaded at all in your browser.

The Supporter Pack

The Supporter Pack is a one-time purchase on Ko-fi (ko-fi.com), opened in a new tab from the game. You need to be signed in first, so the pack belongs to your account. Ko-fi handles the payment under its own privacy policy, and then tells our server about the order with the email address you typed at Ko-fi. We keep only the order's Ko-fi id, when it arrived, and a one-way hash of that address (made the same way as an account's), so the order can find your account. We never store the address itself, your name, a message or the amount. If you paid with a different address than your account's, the game sends a code to that address to confirm it is yours. Supporters get a heart by their name on the leaderboards, which everyone can see, and, if they linked Discord, a Supporter role there. In your browser the game remembers whether your account is a supporter (dg.supporter), and forgets it when you sign out. To have the order record deleted, write to us from the address you paid with.

Donations

The "Support" button opens ko-fi.com in a new tab. Anything you enter there is handled by that site under its own privacy policy. The game is not told whether you donated.

Playing on Poki, CrazyGames and other game sites

On game sites that host their own copy of the game (Poki and CrazyGames), the game talks to dailygrapple.io for the same things as here: the random player id, the name you chose, your times and replays, while live ghosts are on, your position in the run, and on CrazyGames, while chat is on, your chat messages. There is no chat on Poki. It sends nothing else. There is no sign-in on those sites and no link out of the game except this page, and the game shows none of our own ads there: any ads come from the game site itself, under its own privacy policy.

Children

Daily Grapple is made to be played by anyone, and asks no one for personal information. The name on the leaderboards is anything you choose (names that are rude are replaced with "Racer"), and it is the only thing other players see apart from chat messages. Chat is filtered for rude words and links, can be turned off in Settings, lets players block and report each other, and is not offered at all on Poki. Signing in with an email address is only offered on dailygrapple.io, is optional, and is meant for players 13 and over; we do not knowingly keep personal information from younger children. A parent can ask us to delete a player's times and name at matifinochio@gmail.com.

Changes

If this policy changes, the date at the top changes too.