Baper Rasta privacy policy

Updated 28 October 2026. This policy covers the independent browser game at baperrasta.app. No email address, phone number or social login is required to play.

Device storage and essential sessions

Your best scores, recent results and sound preferences are stored in your browser. A functional HttpOnly cookie identifies an anonymous player session. Its secret is stored as a hash on the server. Clearing browser storage removes device records and may create a new player identity; it does not automatically remove earlier server scores.

Leaderboards and invitations

Cloudflare D1 stores a random public player ID, optional nickname, run scores, timing, hit counts, run-token hashes and invitation participation. Your nickname and ranked run statistics are public on the leaderboard. Do not use a real name or contact details as your nickname if you do not want them displayed. Invitations record which anonymous players started a run through a link; the game does not automatically send messages or upload your contacts.

Google Analytics 4

The public site uses Google Analytics 4 to understand page visits, device/browser information, approximate location, referrals, engagement and game actions such as starting or finishing a run, charging, collisions and creating a challenge. Google may use analytics cookies and process this information on its infrastructure. Enhanced measurement includes supported scroll, outbound-link, site-search, video, file-download and form-interaction events.

We do not send nicknames, session secrets, invitation codes, email addresses or free-form input as custom analytics event parameters. Local development and preview hostnames do not load our Google tag. Your browser’s privacy controls, extensions and Google settings can affect measurement. Read Google’s privacy policy and its Analytics opt-out information.

Hosting and operational logs

Cloudflare hosts the site, serves static assets and processes network requests. Operational logs can include request metadata, errors, IP addresses and security signals. These help run and protect the service. See Cloudflare’s privacy policy.

Run cards and replay clips

Images and compatible ending recordings are generated on your device from the game canvas and synthesized game audio. The game does not request your camera, microphone or screen. A file is shared only through an action and destination you choose.

Retention and requests

Server scores, nicknames and invitation records can persist until removed for maintenance or at a verified player’s request. Invitations expire after 30 days for new participation. To ask about your data or request removal, contact support@baperrasta.app with the relevant public player ID or nickname and city. Do not email session cookies or passwords.