What Grapline keeps

On our server, for the ladders

Nothing is kept about you until you use something that needs it: sending a run to the ladders, a group ladder, a switch in the ladders sheet, daily reminders or a transfer code. Then the game keeps:

• A generated name like Keen Owl 77, and the flag you pick (or none).
• A random key that lets this browser act as that player. The key stays in your browser; the server keeps only a scrambled copy (a hash) it can check against.
• Your submitted runs: the proof code (the course and the timing of every press), the distance, how the run ended, timing figures that tell people from scripts, whether you played by touch or with a mouse or keys, the skin and gear you wore, and the flag it was sent under. Proof codes are removed after 30 days, except for each day’s and each week’s top 100 runs; runs that did not count are deleted after 30 days.
• The network your player was first created from, as the provider’s number (not your address), with any moderation marks, so one person cannot play as many.
• Your choices: whether others may race your ghost, whether your profile page is public, and the group ladders you make or join (a group nobody uses for 90 days is deleted).
• Daily reminders, only if you turn them on: the address your browser’s push service gives us, and the hour you chose.
• A transfer code, only when you ask for one: the code, scrambled, and the progress it carries, for ten minutes.

Count-only statistics

To learn whether a link or a post brings players, Grapline counts per day how many visits each page gets and how many times things happen in the game (the game opened, a run started or finished, a run submitted or shared). Each count is a number that goes up by one, filed under the day, the channel tag of the link you came from (like reddit), the kind of site that sent you, the country your connection comes from, the day you first played and whether you are on the web or the app. There is no name, no ID and no address in them.

To stop them: in the game, open Ladders and switch off Count me in the anonymous statistics. From then on this device sends nothing, and what it had not sent yet is dropped. Page visits are counted on our server as a page is asked for, the same count-only way.

In your browser

The game keeps these on your device, in the site’s own storage (no cookies):

• your settings (sound, motion, flag, skin, gear, the course you last played)
• your progress (best distances, streak, what you have unlocked) and today’s best run, for its ghost
• the player key and name, when you have one, and runs waiting to be sent while you are offline
• the day’s counts not sent yet and your first channel tag, unless you switched the statistics off
• small notes of what you have already seen, so the game does not repeat itself

A service worker also keeps the game’s files so it opens without a connection.

What we never keep

• no email, real name, password or account
• no IP address: a scrambled form of it (salted, so it cannot be turned back) is kept for up to a day, only to limit how much one address can send and to catch abuse
• no location finer than a country, no contacts, no photos, no advertising ID
• no ads, no third-party trackers and no analytics services on the web

The ladders and your profile page show only your generated name, your flag and your runs.

Other services

• Cloudflare runs this site and its server, so every request passes through it.
• Google Fonts serves the Outfit font, so your browser asks Google for it.
• Your browser’s push service delivers daily reminders, if you turn them on.

Delete it

In the game, open Ladders and tap Delete my ladder data, then confirm. Your player, runs, best distances, cup contributions, group memberships, reminders and any transfer code are deleted from our server at once. To remove what your browser keeps, clear this site’s data in your browser’s settings.