Legal

Privacy Policy

Last updated: 16 October 2026

The short version: there are no accounts and no ads. We use Google Analytics to learn how the site is used, and it only sets cookies if you say yes. Your settings and scores stay in your own browser.

What we store, and where

To remember your preferences between visits, the site saves a few small values in your browser's local storage:

• your game settings (opponent, difficulty, board size, Fade mode, Coach, match length);
• your light or dark theme choice;
• your win, draw and loss tallies;
• your answer to the analytics question (allow or no thanks).

These values stay on your device and are not sent to us. You can delete them at any time by clearing this site's data in your browser settings. Games themselves — every move, the bot's thinking and the Coach's analysis — run entirely in your browser.

Analytics and cookies

We use Google Analytics 4, a service from Google, to understand how the site is used: which pages people visit, which boards and modes they play, how games end, and whether features like Hint, Undo and the Coach get used. It never receives your name, your email or anything else that identifies you directly.

• Off until you allow it. Analytics cookies are only set if you choose Allow analytics in the banner. Until you do — or if you choose No thanks — Google Analytics receives only cookieless signals (such as "a page was viewed" or "a game ended") with no identifier that links them to you or to your other visits.
• If you allow it, Google Analytics sets first-party cookies (_ga and _ga_<ID>, kept for up to two years) so it can recognise return visits. Google Analytics 4 does not log or store IP addresses.
• Change your mind any time with Cookie settings at the bottom of every page. Choosing No thanks deletes the analytics cookies.
• Analytics data is kept for no more than 14 months, and we use it only to improve the site. Where the law requires a legal basis, ours is your consent.

We don't show ads, don't use advertising cookies, and don't sell or share data for advertising.

Playing online with a friend

When you use Play online or play CLASH online, your browser connects directly to the other players' browsers (using a standard web technology called WebRTC) so your moves can travel between you.

• To find each other, both browsers briefly contact a free connection service run by the PeerJS project, which sees your IP address and a random game code — not your moves.
• Your browser may also ask Cloudflare's or Google's public servers for its public network address, which is needed to connect.
• If a network blocks a direct connection, the game is relayed through Cloudflare's servers instead. The relay sees both players' IP addresses but can't read the game: the connection is encrypted end to end.
• Because the connection is direct, the other player's device can see your IP address, as with any direct connection. Only share game links with people you know.
• In Quick match, everyone plays under a randomly generated name, and games between strangers always go through the relay, so neither player can see the other's IP address.
• Nicknames and moves go only to the other player. We don't receive or store them, and the game disappears when the player who created it closes their tab.

Third-party services

• Hosting. The site is hosted by Vercel. Like any web host, its servers process technical information such as your IP address, browser type and the pages requested, in order to deliver the site and protect it from abuse. See Vercel's privacy policy.
• Analytics. Google Analytics, as described above, under Google's privacy policy.
• Online play. The PeerJS connection service, and Cloudflare's and Google's connection and relay servers, as described above. See peerjs.com.
• Fonts. Our typefaces are served by Google Fonts. When a page loads, your browser requests them from Google's servers, which receive your IP address and browser details. See Google's privacy policy.

Children

TicTacToe.net is suitable for players of all ages. We don't ask for, or knowingly collect, personal information from anyone — including children under 13.

Your rights

We don't hold information that identifies you. You can withdraw analytics consent at any time under Cookie settings, and clearing this site's data in your browser removes everything stored on your device. If you have a question or a request, get in touch and we'll help.

Changes to this policy

If we change how the site handles data, we'll update this page and the date at the top.