2048 Number Puzzle Privacy Policy

1. No accounts are created

2048 Number Puzzle requires no sign-up or login. Therefore, we do not collect personal information such as names, dates of birth, phone numbers, addresses, emails, or payment methods, nor do we request social login or access to your device's contacts, photos, or location.

You can start using the service immediately by opening your browser, and to stop using it, simply close the tab. There is no withdrawal process because there is no registration process in the first place.

2. Information sent to the server -- only when you choose to register for the leaderboard

Submitting your score to the leaderboard is entirely optional. The items below are sent to the server only at the moment you type a nickname and press the submit button. If you do not press the button, nothing is transmitted.

• Nickname -- a display name you enter at that time. It does not need to be your real name, and we do not encourage the use of real names.
• Score data -- score, highest tile reached, number of moves, board type (standard/variant) and board date.
• Anonymous identifier (client_id) -- a random string stored in your browser's localStorage. It is generated on your device when you first register, has no connection to your name, email, or device serial number, and cannot identify any individual on its own. It is used solely to let the same person edit or delete their own records and to filter out duplicate submissions.
• Submission time -- used to divide daily, weekly, and monthly leaderboards.

Board generation and score calculation are performed entirely in the browser. If you do not submit to the leaderboard, no data is sent to the server.

3. Original IP addresses are not stored

To prevent one person from flooding the leaderboard or submitting records through automated programs, we need a minimal clue to distinguish requests. When a score submission comes in, we hash the IP address with a server-side secret (salt) using SHA-256 and store only the hash result.

• What is stored is an irreversible hash string; the original IP address is never stored.
• The original IP cannot be recovered from the hash, and without the salt, comparison is impossible.
• The sole purpose is to block repeated submissions within a short period (rate limiting). It is not used for user tracking or advertising.

4. Information that stays on your device

The following information is stored only in your browser's localStorage and is not sent to the server.

• State of the board in play (tile positions, score, move history)
• High score and recent score statistics
• Display theme, sound, and control settings

If you clear this site's stored data in your browser settings, all of it is deleted immediately. If you use a private (incognito) window, everything disappears when you close the window. Please note, however, that your progress and records will also be lost.

5. Advertising and cookies

This site displays advertisements through Google AdSense (publisher ID: ca-pub-6819874382039664) and is funded by advertising revenue.

Data collector: Google LLC (United States). Google and its partners may use cookies and advertising identifiers to display personalized ads based on your browsing history on this and other sites. Collected items include cookies, advertising identifiers, IP addresses, device/browser information, and page usage data. The purpose is ad delivery, measurement, and personalization; retention periods follow Google's privacy policy.

• You can disable personalized ads in Google Ad Settings (https://adssettings.google.com).
• How Google uses cookies for advertising is described at policies.google.com/technologies/ads.
• You can opt out of ad-related data collection by blocking cookies in your browser settings. However, some features may be limited.

6. Usage analytics

We use Google Analytics 4 (measurement ID: G-Y04SLJX4BW) to understand which pages are used and how often.

Data collector: Google LLC (United States). Collected items: cookies, IP address (used for approximate geographic estimation and then discarded), device/browser information, page usage data. Purpose: usage analytics. Retention period: according to Google's data retention policy. Collected information is provided to the operator only in aggregate form and does not directly identify individuals.

• To opt out of GA4 data collection, install the Google-provided opt-out browser extension (https://tools.google.com/dlpage/gaoptout) or block cookies in your browser settings.

7. Third-party disclosure and processing delegation

We do not sell or provide collected information to third parties. However, we use the infrastructure of the following providers to operate the service.

• Vercel Inc. (United States) -- website hosting and deployment. Server access logs may be retained temporarily.
• Neon Inc. (United States) -- database for leaderboard records (nickname, score data, anonymous identifier, IP hash).
• Google LLC (United States) -- advertising (AdSense: cookies, advertising identifiers, usage data) and usage analytics (GA4: cookies, IP, device information, page usage data).

The servers of the above providers are located overseas, including the United States, and the relevant data is transferred abroad for processing and storage (cross-border transfer). No other disclosure occurs except when required by legitimate legal procedures (such as a warrant).

8. Retention period and disposal

• Leaderboard records (nickname, score data, anonymous identifier, submission time): retained for 12 months from the date of registration and then deleted.
• IP hash: deleted once the rate-limiting purpose is fulfilled, and never retained for more than 30 days.
• Information stored only on your device: remains until you delete it. The operator cannot access it.

If you wish to have your data deleted, please contact us at the address below with your nickname and the approximate time of submission. We will verify and delete it. However, since a nickname alone may not distinguish your records from others, it is more accurate if you make the request from the device and browser used for registration.

9. Your rights

You may request access to, correction of, deletion of, or suspension of processing of your personal information at any time. Contact us at the address below and we will process your request without delay and inform you of the result. We do not intentionally collect personal information from children under 14 years of age; if such information is identified, we will delete it immediately.

If you need assistance regarding a personal information breach, you may contact the Korea Internet & Security Agency Privacy Center (privacy.kisa.or.kr, 118), Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972), Supreme Prosecutors' Office Cyber Investigation Division (spo.go.kr, 1301), or National Police Agency Cyber Bureau (ecrm.police.go.kr, 182).

10. Contact and policy changes

Operator: 에비듀 | Representative: 김준우 | Business registration no. 719-08-02864

For privacy-related inquiries or deletion requests, please email bs0707664@naver.com. A response may take several days.

This policy is effective from September 19, 2026. If the policy changes, we will post the changes and the new effective date on this page before the effective date. Changes that expand the scope of data processing will always be reflected before they take effect.

Revision history: 2026-09-19 Updated advertising, cookies, usage analytics, third-party disclosure, and cross-border transfer sections following the implementation of Google Analytics 4 and Google AdSense.