cosmicglue
appsgames
more

Privacy Policy

Last updated October 14, 2026

CosmicGlue Inc operates cosmicglue.io, its CTF, and the browser games hosted here. We do not sell personal information or use advertising trackers.

What we collect

  • Contact and blog forms collect the information you submit, such as your name, email address, and message.
  • The CTF stores a public handle, an optional X/Twitter handle, a one-way hash of your recovery phrase, and your solved challenges.
  • First-party analytics record page views, interactions, game events, and basic request information such as IP address and user agent.
  • Optional game cloud saves store game state under a hashed save code. Deadzone saves can include a base location and nearby points of interest.
  • The Glue chat sends your message and the rest of the conversation to an AI provider to produce a reply. No account details, IP address or analytics data are included.

Deadzone location

Deadzone asks before reading your device location. If you choose location-aware play, coordinates are sent directly from your browser to an Overpass API using OpenStreetMap data for nearby places and Open-Meteo for weather. They remain in your browser and are included in a CosmicGlue cloud save only if you enable cloud saving. You can instead use a procedurally generated location.

Service providers

We use JamWidgets for site forms, blog features and first-party product analytics; PostHog for error reports, which have email addresses, web addresses and credentials removed and are not linked to you, and to choose which provider handles Glue chat (it receives no chat content); Amazon Bedrock and Concentrate to run the open-weight gpt-oss models behind Glue chat; and infrastructure providers to host and protect the service. Google Fonts receives ordinary browser request information when fonts load. Public CTF avatars may be requested from unavatar.io when a player supplies an X/Twitter handle. Those providers process data to deliver their services under their own terms and policies.

Retention and control

We keep submissions, CTF profiles, analytics, and cloud saves only as long as needed to run and protect the services. Save codes and CTF recovery phrases act like passwords: anyone who has one can access the associated data. To request access, correction, or deletion, email[email protected]. Include the relevant email, handle, or save code so we can locate the record.

Security and changes

We use reasonable technical and organizational safeguards, but no internet service is perfectly secure. We may update this policy as the site changes and will publish the new date here.

Contact

Questions can be sent to [email protected].