Wigglum
Privacy & your progress
Last updated: 8 November 2026. Wigglum is operated by Stanislav Dian. Contact stanmastr@gmail.com for support, privacy questions, or a name report.
What the game stores
- A random player ID, a public player tag, your chosen display name, and when your profile was created.
- Your scores, daily results, medals, and recorded tap timing used to verify submitted runs.
- If you choose Google login, the Google account’s unique identifier. The game does not receive your Google password or request your email, contacts, or files. Google handles sign-in under its own privacy terms.
- A necessary browser session cookie keeps you signed in. It expires after one year. Local storage remembers only the sound setting. There are no advertising or analytics trackers in this release.
- IP addresses and request paths appear in server security logs. Query strings are excluded from the main game access log. Rate limits use temporary hashes of IP addresses.
How information is used
Player identities and sessions provide gameplay and account access. Scores and replay data support leaderboards and fair competition. Operational logs help protect and repair the service. Display names, player tags, rankings and medals are public; Google identifiers and sessions are private. Data is stored on the operator’s Hetzner server. Google receives information when you choose to sign in.
Retention and controls
Scores and medals remain while the service operates, unless removed for moderation. Replay input data is kept for up to 30 days; non-best run records can be removed after two days. Expired sessions and sign-in requests are cleared daily. Server access logs rotate daily and retain 14 rotations. Daily local backups retain 14 days.
Use Account → Your data to export your progress or delete your account. Deletion unlinks Google, invalidates sessions, removes the name, and clears retained tap recordings. Historical leaderboard scores remain under “Deleted player”; the random public tag remains attached to those anonymous results. Deleted information may remain in existing backups until those expire. Clearing your browser data does not itself delete your server record and can make an unlinked guest account unrecoverable.
You can contact the operator to request access, correction, deletion, or discuss an objection to processing. If you are in Ireland, you may also contact the Data Protection Commission. This page describes the implemented service; the operator must keep it current if hosting, analytics, advertising, or data practices change.
Fair play
One person should use one competitive identity. Automated play, fabricated submissions, exploiting bugs and offensive names may lead to removal of results or suspension. Medals and points are virtual achievements with no cash value.