Privacy Policy

Fruitbox Plus is a Chrome extension that adds board analysis, auto-reset, and a leaderboard to the Fruitbox puzzle game at gamesaien.com. This page explains what information the extension collects, how it is used, and how it is stored.

The leaderboard feature requires creating an account. Everything else — board analysis, auto-reset, settings — works without one and collects no data.

Account data

What you provide when creating an account

• Username — a name you choose. It appears publicly on the leaderboard. Do not use your real name if you prefer to stay anonymous.
• Password — sent to the server over HTTPS and immediately hashed using PBKDF2 (100,000 iterations, SHA-256, random salt). The original password is never stored.

Game data

What is recorded when you play

• Game score — the number of apples you cleared.
• Completion time — only recorded for perfect scores (all 170 apples cleared).
• Board layout — the starting arrangement of numbers on the board, as a 170-digit array. Used to verify scores were achieved on a legitimately dealt board.
• Timestamp — when the game ended.

Only your best score appears on the public leaderboard. All extension users can see your username and best score.

Local storage

What stays in your browser

The extension stores the following in your browser's localStorage. This data never leaves your device unless noted:

• Session token — a random string that keeps you logged in. Also stored on the server to verify your identity.
• Username — stored locally so your name can be displayed in the overlay.
• Pending score queue — scores waiting to upload if your connection dropped. Cleared once uploaded.
• Settings — your board threshold and max-nines values. Never sent to the server.

Infrastructure

Where data is stored

Account data, scores, and session tokens are stored in Cloudflare Workers KV, a distributed key-value store operated by Cloudflare, Inc. Data may be replicated globally across Cloudflare's network as part of normal KV operation.

Cloudflare's privacy policy is available at cloudflare.com/privacypolicy.

No other third parties receive your data. There is no analytics, no advertising, and no data sharing.

Retention

How long data is kept

• Account and score data: kept indefinitely until you request deletion.
• Session tokens: kept until you log out or your account is deleted.
• Board commit tokens: automatically deleted after 3 minutes.
• Rate-limit counters: automatically deleted after 2 hours.

Your rights

Accessing and deleting your data

You can request deletion of your account and all associated data at any time by emailing the address below. Include the username you registered with. Accounts are typically deleted within 48 hours.

To remove locally stored data, open DevTools on the game page, go to Application → Local Storage, and delete the keys prefixed with fruitbox_. Uninstalling the extension also clears this data.

Contact