Privacy Policy

Last updated September 23, 2026

THERISKR makes Rhythm Swimmin', currently in browser beta. This page explains what we collect when you play or visit theriskr.com, and why. We keep this list short on purpose: if it isn't here, we don't collect it.

The short version

Playing Rhythm Swimmin' doesn't require an account. You get a random device ID and can play, save progress, and race under a claimed display name without ever giving us your email. If you choose to sign in with Google, we store your Google account ID and email so you can keep your progress across devices. We never store your raw IP address — only a one-way hash of it, used briefly to slow down abuse. We don't run any third-party analytics or advertising trackers.

What we store when you play

• A random client ID. A 24-character ID generated on your device and kept in your browser's localStorage. This is how the server recognizes you without an account.
• A claimed display name. The name you pick, tied to your client ID, so it can't be taken by someone else while you hold it.
• Race results. Your event, physics version, finish time, and the replay data ("tape") the server uses to verify that time — we never trust a time your device reports without replaying it server-side.
• Career stats. Strength, technique, endurance, and similar training attributes tied to your client ID.
• Affiliation. The team or nation badge you swim under, if you pick one, shown on world-board rows.
• Friends list. The display names you've added as friends, tied to your client ID (never the reverse).
• Feedback you submit. The category and text of beta feedback posts, and votes on other players' posts, tied to your client ID.
• A hashed IP address, briefly. When you submit a vote on our "what's next" poll or certain rate-limited actions, we hash your IP address (a one-way transformation — the original address is not recoverable or stored) to damp abuse from a single address. We never store your actual IP.

Guest ("Walk-On") play works entirely off the client ID above. Guest times are never posted to public or world leaderboards — only claimed names can appear on public boards.

If you sign in with Google

Signing in is optional and only changes what's linked to your account:

• Your Google account ID (a stable identifier Google calls "sub"), so your account survives even if you change your Gmail address.
• Your email address, stored for display and account recovery only — never sold, never emailed to marketers.
• Session and refresh tokens. We store a hash of your refresh token, not the token itself, along with when a session was created, last used, and its expiry, so we can keep you signed in and let you sign out remotely.

We request only the minimum Google OAuth scopes needed to identify you (your Google account ID and email) — we do not request access to your Gmail, Drive, Contacts, or any other Google data.

Your browser's local storage

Separately from anything sent to our server, your browser stores some things locally, on your device only:

• Local game saves and progress, so you don't lose a run on reload.
• Whether you're playing as a guest ("Walk-On").
• Your vote ID for the site's "what's next" poll.
• Marketing attribution (which link brought you here, e.g. a UTM tag), used only to understand which of our own posts are working.

None of this local storage is shared with us unless the relevant feature (like submitting a run or a vote) explicitly sends it.

Analytics and tracking

We do not currently run any third-party analytics, advertising, or tracking service — no Google Analytics, no Meta Pixel, no ad networks. The site's marketing code dispatches a local browser event when you interact with certain buttons, but nothing is sent anywhere; no analytics provider is connected today. If that changes, we'll update this page first.

Cookies

We don't use tracking cookies. Sign-in relies on tokens held in your browser, not third-party cookies.

How long we keep data

Game and account data is kept for as long as your account or client ID is active. This is a beta: we may reset leaderboards, career progress, or accounts during development, and a full data wipe has already happened once during the beta. Refresh tokens expire automatically (currently 60 days) and are rotated on use.

Sharing

We don't sell your data. We don't share it with third parties except infrastructure providers that run our servers and database (currently Cloudflare), who process it only to run the service.

Your choices

You can play entirely as a guest and never create an account. You can stop playing and clear your browser's local storage at any time. If you signed in with Google and want your account or its data removed, email us and we'll take care of it.

Children

Rhythm Swimmin' is intended for players 13 and older. We don't knowingly collect data from children under 13.

Changes

We may update this policy as the game develops. We'll update the date at the top when we do.

Contact

Questions about this policy or your data: davidbaxfinney@gmail.com