VUELTAR BACK TO THE GAME ↗

YOUR RUN, YOUR CHOICE

Game privacy.

Your settings, personal bests, and career progress stay in this browser. Optional sharing is your choice.

Friend challenge links

A challenge link contains the selected mode, shared seed, CPU pace when relevant, and score target. It does not contain your name, room code, account, or local profile. If you choose Include my paddle path, the link also carries a compact, approximate paddle path in its URL fragment. The browser does not send that fragment in the request that loads Vueltar, and Vueltar does not store it. Anyone who receives the complete link can view the path.

Supporter Kit purchases and restoration

If the Supporter Kit offer is available, checkout is handled by Stripe. Stripe receives the email and payment details you enter at checkout. Vueltar does not store card numbers or security codes. To confirm a purchase, restore the kit, and apply refund or dispute updates, Vueltar stores Stripe payment and checkout session IDs, a keyed one-way hash of the purchase email, purchase status, and event times. The purchase ledger has no automatic expiry in the current implementation. Separate checkout-operation records are eligible for cleanup after 90 days and are removed when another checkout runs.

If you request restoration, Vueltar sends the address you enter and a one-time restore link through Resend. The link expires after 30 minutes. Vueltar stores keyed hashes of the email and code, a keyed email-hash rate-limit counter, the email-delivery receipt ID, operation status and times, and hashes of restored access tokens. Restore-operation records are eligible for cleanup after 90 days and are removed when a later restore request runs; the rate-limit counter has no scheduled cleanup. Up to 10 recent token hashes are kept per purchase email hash, and older ones are removed when another restore code is redeemed. Stripe and Resend handle data under their own privacy policies.

For purchase questions or to ask about access or deletion, use the Support contact shown with the Supporter Kit offer. Deleting Vueltar purchase records can prevent future restoration; it does not delete records held independently by Stripe or Resend.

Optional Daily Run score posting

Daily Run scores stay on your device unless you choose Post my score anonymously after a completed run.

What posting sends

When you post, Vueltar sends the current day’s replay inputs so the server can reproduce the shared Daily Run and check the score. The replay is processed for verification and discarded; it is not kept as a recording of your play.

The browser creates a random identifier for that UTC day. Vueltar stores a one-way hash of it, a generated tag, your best verified score, your best streak, and the time that score was set. No name, email address, account, or cross-day player profile is required. The public board shows the generated tag, score, and streak. If you remove a posted score, its hash is kept until that day’s board expires so a delayed retry cannot restore the entry.

How long scores stay up

Daily board entries and their retry receipts are automatically removed within 30 days. You can remove your entry sooner with Remove my score from today’s board on the Daily Run result screen. The random identifier is kept in this browser’s local storage for that day so a retry or improved score updates the same entry; posting on a later day replaces it. Clearing browser storage also removes that local identifier and your local game progress. If you clear it after posting, you may lose the identifier needed to remove that score yourself; the entry will otherwise expire within 30 days.

Service protection

Cloudflare processes the connection details needed to serve and rate-limit score submissions. Vueltar does not store a raw IP address with a Daily Run score. Cloudflare’s own handling of connection data is described in its privacy policy.

Vueltar has no advertisements or ad tracking. Gameplay settings, personal bests, and career progress are stored in your browser. Optional score posting is separate from play and can be skipped without losing your local result.