Privacy

Reading the site

Reading sets no cookie and stores nothing in your browser. Visits are counted with Cloudflare Web Analytics, a small script Cloudflare adds to each page; Cloudflare says it uses no cookie and does not follow you from site to site. The site sees page views and where visitors came from, not who they are. The site is served by Cloudflare, which handles your IP address to deliver the pages (Cloudflare’s privacy policy). The fonts come from Google Fonts, so your browser asks Google for them (Google’s privacy policy). Forms to add or correct a project are GitHub issues: what you write there is public and GitHub’s privacy statement applies.

Voting on Most wanted

To vote you sign in with Google, asking for the least it allows: openid, which gives the site your account number and nothing else. No name, email address, picture or access token is ever stored.

The account number itself is not kept either. The site keeps a fingerprint of it: a keyed hash (HMAC-SHA-256) of the number, made with a secret key. The same account always gives the same fingerprint, which is how the site knows your votes when you come back.

What is stored

• In the vote database (Cloudflare D1): your fingerprint, the games you voted for and when, and a count of the changes you made today.
• In your browser: the cookie wv_session, which holds your fingerprint, signed, for 90 days. During sign-in, the cookie wv_state holds a random value for up to 10 minutes, to check that the answer comes from the sign-in you started.

What is shown

The page shows everyone how many votes each game has. It never shows who voted.

Taking it back

Taking a vote back on the page deletes it from the database. Once all your votes are taken back, only your fingerprint and today’s change count remain, with no game attached. Signing out deletes the cookie. For any question, open an issue.