Privacy policy

Contact and operator details

PlayNib is operated by Anahit Pty Ltd, based in South Australia, Australia.

Privacy questions and contact requests can be sent through the contact page or directly to [email protected].

No account needed for core play

PlayNib is designed so core games work without user accounts. Players can use guest display names, room codes, local browser storage, and local device identifiers for game play. The site does not ask players to create passwords or enter email addresses for basic play.

Optional Challenge Club membership, when separately enabled, can save eligible challenge results. It never gates core play. Optional organizer accounts and billing are still not available.

Information stored on your device

PlayNib may use localStorage, cookies, or similar browser storage to remember guest IDs, game preferences, room participation, daily puzzle results, win streaks, quiz edit tokens, and basic settings. These features help games work without accounts.

Local stats are specific to the browser and device where they were created. Clearing browser data, switching browsers, or using private browsing can remove those stats.

When Challenge Club is enabled, PlayNib may store the ID of the last known Club challenge visited and an ISO visit timestamp so it can measure a return to a later challenge. This marker contains no name, email address, room code, game answer, drawing, or free-text response.

Challenge Club membership

Core Challenge Club play does not require an account. Optional membership can save eligible private results and streaks. Membership is intended for people aged 16 and over. Players who do not meet the membership age policy can still use suitable PlayNib games as guests through supervised family or classroom play.

Club analytics use only reviewed challenge or event IDs, game slugs, placements, source/campaign labels, return status, and broad device type after optional analytics consent. They exclude display names, guest IDs, emails, room codes or URLs, answers, quiz or drawing content, free text, and student information.

If you choose optional Club membership, passwordless authentication processes an email address privately and stores a secure session. The private Club profile contains a non-identifying nickname, a private-by-default leaderboard choice, policy acceptance timestamps and versions, account status, and basic timestamps. PlayNib also stores server-validated challenge attempts, spoiler-free result summaries, streak data, separate reminder consent, and limited moderation or abuse-prevention records. There are no public member profile pages or member directory. Public standings are disabled. Email addresses, account IDs, guest IDs, IP addresses, and private result evidence are not made public.

Club membership is intended for people aged 16 and over. PlayNib records only an age-policy attestation and version, not an exact date of birth. Younger players can continue suitable supervised guest play without joining. PlayNib does not request a legal name, school, phone number, address, suburb, precise location, gender, biography, or profile image for Club membership. Public standings remain disabled; any future visibility would be opt-in and subject to a separate release review.

Authentication codes are service messages only and are not marketing consent. Weekly challenge reminders require a separate affirmative choice. A saved reminder preference does not cause email to be sent while delivery is disabled. Before reminders are enabled, PlayNib must provide a working unsubscribe process and maintain a suppression record. PlayNib uses Cloudflare infrastructure and Resend email delivery for account operations; those providers process the minimum data needed to provide and protect their services under their own terms and retention controls.

An authenticated member can delete the Club account without deleting local game access. Deletion ends Club sessions, removes the nickname, profile, preferences and authentication identity from active systems, and irreversibly disconnects retained challenge aggregates from the member. Deleted Club history and streaks are not restored. A keyed non-public deleted-identity record blocks recreation for 90 days; after it expires, the same address may create a completely new account with no recovered data. Ordinary abuse-prevention records are retained for no more than 90 days unless an active safety, fraud, or legal issue requires a reviewed longer period. Provider backups and legally required records may expire on separate reviewed schedules.

Limited rollout: optional private Club accounts are active under an owner-approved limited rollout. Reminder delivery and public standings remain disabled. Appropriate privacy/legal review of this disclosure, retention, deletion, age policy and provider terms is still pending; this policy does not itself certify legal compliance.

Multiplayer rooms and guest display names

Multiplayer games use room codes, guest display names, and local guest IDs so players can join the same room. Display names are visible to other people in the room. Do not use full real names, student names, emails, phone numbers, school identifiers, or private information as display names.

Doodle Drift drawings are private room artifacts by default. Hosts can choose a drawing retention period of 1 day, 7 days, or 30 days, with 7 days as the default. After the room is complete and the retention period expires, scheduled or admin cleanup can delete private drawing artifacts and mark the room expired. Reports and moderation records may be kept longer when needed for safety review or legal compliance.

Doodle Drift rooms are joined by private room code and do not require login. Prompts, guesses, drawings, and room albums are private and unlisted by default, and there is no public Doodle Drift gallery at launch. Players can report room content, and a room owner or admin can hide or delete content when needed for safety or moderation.

Doodle Drift Kids Safe Mode is designed for family and classroom rooms. It uses curated prompt packs by default, does not need real names, and players should use nicknames instead of real names. Teachers and hosts should not enter student personal information, school rosters, classroom records, or precise location details.

Mind Lab and Mind Party

Mind Lab stores daily progress, recent completions, and detailed personal results in local browser storage where practical. These activities are games and demonstrations, not medical, psychological, IQ, attention, memory, personality, or mental-health assessments. PlayNib does not create public cognitive profiles or provide a diagnosis.

Mind Party uses private room codes, guest display names, and local guest IDs. Use a nickname rather than a real name. Short-text Same Page responses, when a host enables them, are filtered, temporary, private to the room, and are not placed in a public directory.

Minimal room results or aggregated events may be retained for room operation, abuse prevention, and general product improvement. PlayNib does not need raw answers, nicknames, personal text, or psychological labels in analytics.

Policy owner review required: review this Mind Lab disclosure before public launch and whenever result storage, analytics, or room text handling materially changes.

Letter Mission

Letter Mission stores locale preferences, puzzle progress, found-word metadata, mission progress, hints, completion states, streaks, statistics, recent practice puzzles, and completed daily keys in localStorage. A local guest ID supports no-login room play and abuse prevention; it is not a request for a real name.

Submitted words are sent to the server for private answer-list validation. Current accepted-answer sets stay server-side. Private multiplayer rooms process nicknames, submitted words, scores, hints, room settings, and shared cooperative progress to run the match, but room URLs are unlisted and noindex. Players should use non-identifying nicknames and must not enter real student names or other personal information.

A missing-word suggestion stores the puzzle, locale, normalized suggested word, optional reason, status, timestamps, and a one-way guest or request-identity hash. Suggestions are rate-limited, deduplicated, and reviewed by an owner or editor; they do not change the current score or guarantee future acceptance. Do not put names, school details, contact information, or other personal information in a suggestion reason.

Letter Mission word and definition data retains source and licence provenance. Public attribution shows only production-approved sources on the word-data attribution page; internal file paths and unapproved sources are not published.

Letter Mission analytics use only limited gameplay context: mode, locale, difficulty, accepted status, rejection category, word length, all-letter status, mission type, room-size range, duration, and completion. Actual words, nicknames, room codes, guest IDs, and suggestion reasons are excluded from analytics.

Policy owner review required: review this Letter Mission disclosure before public launch and whenever suggestion retention, room persistence, word-source attribution, analytics fields, or answer validation materially changes.

Trick & Tell

Trick & Tell stores nickname-only learner profiles, lesson progress, mastery marks, Daily Trick completions, and streaks in local browser storage. Core lessons, Daily Trick, and Trick Detective do not require an account or send detailed solo progress to PlayNib.

Trick Party uses a local guest ID, a nickname, and a private room code for membership and reconnection. Room state is temporary and private to invited players. For Always Five, the 1089 Mystery, and the 37 Surprise, secret starting numbers stay on each player’s device; only a final result and structured reasoning choice are sent to operate the round.

Trick & Tell analytics are limited to mode, difficulty, reviewed trick ID, lesson stage, completion state, and room-size range. Raw answers, secret numbers, nicknames, guest IDs, room codes, and free text are excluded. Tell It cards do not collect audio, video, or written explanations.

Policy owner review required: review this disclosure before Trick & Tell launches and whenever room retention, analytics, learner-profile storage, or party submissions materially change.

Quiz creation and AI tools

Quiz creation tools may allow users to enter topics, questions, answers, explanations, or pasted source notes. If AI generation is enabled, prompts and source text are sent to the server and then to the configured AI provider for generation.

Do not paste student names, private records, addresses, emails, phone numbers, school rosters, medical information, financial information, or other sensitive information. AI-generated content can be inaccurate and should be reviewed before classroom, family, study, or public-library use.

If Doodle Drift AI prompt packs are enabled, topics should stay broad and should not include private information, real names, school details, workplace secrets, addresses, contact details, or other sensitive information. Manual curated prompt packs should remain available so Doodle Drift can work with AI disabled.

Public and unlisted content

Saved quizzes may be private, unlisted, or public depending on the feature used. Unlisted content may be available to anyone with the direct link. Public quizzes can be indexed, listed, reported, moderated, hidden, rejected, or removed if they are unsafe, inaccurate, spammy, infringing, private, or inappropriate.

Cookies and consent

Necessary browser storage supports gameplay and no-login features. Optional analytics cookies are disabled until the visitor accepts optional cookies through the cookie banner. Advertising consent may also be handled by Google AdSense Privacy & messaging or another Google-certified consent management platform where required by Google policy.

You can reject optional cookies and still play. Read the cookie policy to see the storage categories and reset your choice.

Analytics

PlayNib currently uses Google Analytics in production. It loads only after optional cookie consent and may be used to understand page views, broad device/browser information, and general site usage so the site can be improved. Visitors can reject optional analytics and continue using core games.

Cloudflare Web Analytics may also be used to understand aggregate site traffic and performance. Analytics tools are used for product operation and improvement, not to require accounts for core play.

Mind Lab analytics use limited context such as activity, audience, difficulty, content version, completion state, and a room-size range. Raw answers, nicknames, personal room text, and psychological labels are excluded.

Advertising and AdSense

Google AdSense is disabled by default. If AdSense is enabled after approval, third-party vendors, including Google, may use cookies or similar technologies to serve ads, measure ads, prevent fraud, and personalize ads where permitted.

Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to PlayNib or other websites. Google's use of advertising cookies enables Google and its partners to serve ads based on visits to PlayNib and other sites on the Internet.

Other third-party vendors or ad networks may also use cookies to serve ads if they are enabled through Google advertising services. Visitors can review Google's advertising controls, opt out of personalized advertising, and learn about broader third-party ad choices using the links below.

Doodle Drift does not place ads inside active rooms, near the drawing canvas, drawing tools, prompt input, guess input, reveal carousel, voting flow, or private album carousel. Any Doodle Drift ads should appear only on non-gameplay pages, below useful landing-page content, or below fully completed results with generous spacing when ads are enabled.

Mind Lab does not place ads inside active activities, Daily Mind Mix, Mind Party, or near response controls. A static-page or completed-result ad may appear only below useful content, outside the game component, with safe spacing and only when consent and any room ad-free entitlement allow it.

Letter Mission does not place ads inside daily or practice gameplay, room lobbies, active matches, reveals, room results, or near the letter ribbon, word input, missions, hints, timers, or reveal controls. Letter Mission room pages suppress advertising scripts, and any future completed-result placement must remain outside the game component and respect consent and ad-free entitlements.

Trick & Tell does not place ads inside active lessons, Daily Trick, Trick Detective, Trick Party lobbies, rounds, explanations, or results. Party room pages suppress advertising scripts. Any future static-page or completed-result ad must remain outside the game component with safe spacing and respect consent and ad-free room entitlements.

Users can review or opt out of personalized advertising using Google Ads Settings. Users can also learn about choices for some third-party advertising cookies at aboutads.info.

Before serving ads to visitors in the European Economic Area, the UK, or Switzerland, PlayNib will use a Google-certified consent management platform where required by Google policy. Until that is configured, AdSense should remain disabled for those regions. Consent is stored per browser or device because PlayNib does not require user accounts.

Children and school use

PlayNib is a general-audience, family-friendly games site. It may include learning, classroom, quiz, worksheet, or family-use content, but it is not directed to children under 13 and is not designed to collect personal information from children.

Children should use PlayNib with help from a parent, guardian, teacher, or other responsible adult where appropriate. Do not enter child personal information, student records, classroom rosters, school identifiers, precise location details, or other sensitive information.

If PlayNib later becomes child-directed, school-directed, or intentionally collects personal information from children, this policy and the product will need appropriate children's privacy handling, parental or school notice and consent where required, and advertising restrictions such as non-personalized ads where required. Other regions may have different child privacy rules.

Service providers

PlayNib uses Cloudflare for hosting, Workers, Durable Objects, D1, and security; Better Auth as the maintained passwordless authentication library; and Resend for transactional one-time-code delivery for optional Club membership. PlayNib may also use Google for Analytics, Search Console, and AdSense when enabled; Wikipedia/Wikimedia for public place photos in geography games; and a server-side AI provider if AI generation is enabled. Provider credentials stay server-side and are not exposed in the browser.

These providers may process or store information outside Australia, including in the United States and other locations used by their current subprocessors. Provider locations and subprocessors may change. Contact PlayNib for current information relevant to a privacy request before providing personal information if this matters to you.

Security and abuse prevention

The site may process logs, rate-limit signals, guest IDs, quiz reports, moderation records, and usage events to protect rooms, reduce spam, monitor AI-generation costs, investigate abuse, and operate the service.

Retention

Local browser data remains until the user clears it or the browser removes it. Server-side records such as public quizzes, reports, room history, usage events, and moderation records are kept only as long as needed for gameplay, product operation, safety, legal compliance, or analytics.

Doodle Drift drawing artifacts use room-level retention and do not live forever by default. Completed rooms expire according to the host-selected retention period, while active rooms are not cleaned up by the expired-room cleanup job.

Your choices, access, correction, and complaints

You can clear local browser data, reject optional cookies, reset cookie choices, avoid entering personal information, and delete an optional Club account through its settings. Depending on your location, you may also have rights to access, correct, delete, object to, or restrict certain personal information processing.

To request access or correction, or to make a privacy complaint, use the contact details below. Describe the request and provide only enough information for PlayNib to locate the relevant record and verify that it belongs to you. PlayNib will acknowledge the request, investigate it, and respond within a reasonable period. If access or correction is refused, PlayNib will explain the reason where it is lawful and appropriate to do so and identify available review or complaint options. If an Australian privacy complaint remains unresolved and the Privacy Act applies, you may contact the Office of the Australian Information Commissioner.

Contact

PlayNib is operated by Anahit Pty Ltd in South Australia, Australia. Privacy questions can be sent to [email protected].

Changes

This policy will be updated when payments, live ads, new analytics providers, AI providers, school features, or other material data uses are added or when optional Club account handling changes.