Privacy

Hardwood Legends · last updated 18 September 2026

Hardwood Legends is a browser game. There is no account, no sign-in and no server of mine holding your data — there is no backend at all. What follows is everything that leaves your browser or is kept in it.

What is stored on your device

Your progress lives in your own browser's localStorage. It never leaves your device and I cannot read it. Clearing your browser's site data for this domain deletes all of it permanently:

• hw_career — your created player, season and career history
• hw_bank — coins, purchases and daily-reward streak
• hw_settings, hw_binds, hw_mode, hw_pick — options, key bindings and menu choices
• hw_name — the display name you type for multiplayer and park chat
• hw_seen, hw_tutdone, hw_onboard — whether you have seen the controls card, finished the tutorial and set up your first player
• hw_tutpaid — whether the workout's one-time coin reward has been paid

Multiplayer and MyPark

These are peer-to-peer and opt-in: nothing connects until you open the multiplayer panel, create a lobby or join a code. To find each other, the host and guests exchange connection offers through a handful of public nostr relays (for example relay.damus.io and nos.lol). Those offers are encrypted with a key that only people who have your lobby code can work out, so the relays pass them along without being able to read them, and they are sent as short-lived messages that relays do not store.

Once connected, game traffic goes directly between players (WebRTC). As with any direct connection, the people in your lobby can see your IP address, along with the display name you chose. To find your own public address the game asks Google's and Cloudflare's STUN servers, which see your IP but nothing else. If this site is ever set up with a relay server, players whose networks block direct connections go through it instead; it passes game messages between the players in a lobby and keeps nothing. Chat messages go only to the other players in your lobby. None of it is stored by me and none of it is recorded anywhere.

Advertising

The guide page shows ads from Google AdSense. The game itself shows none and loads no advertising code. Google and its partners use cookies and similar technologies to serve and measure those ads, and may use your prior visits to this and other sites to personalise them.

• You can opt out of personalised advertising at Google My Ad Center.
• More options are at aboutads.info/choices and youronlinechoices.eu.
• How Google uses data from sites that use its services: policies.google.com/technologies/partner-sites.

If you are in the EEA, the UK or Switzerland, a consent prompt appears before any personalised ad cookie is set, and you can change your answer at any time from the link in that prompt.

Third parties the page loads

• cdnjs (Cloudflare) — serves the 3D library the game runs on.
• jsDelivr — serves the small signing library multiplayer uses, only if you open multiplayer.
• Public nostr relays and Google / Cloudflare STUN — finding and connecting to other players, only if you open multiplayer or MyPark.
• Google AdSense — ads, only on the guide page. The game itself loads no ads.

Each of these sees your IP address and browser user-agent when the request is made, as is the case for any file a browser fetches.

Children

This site is not directed at children under 13 and does not knowingly collect anything from them.

Contact

Questions, or want something removed? Open an issue at github.com/theloyaltrojan/hardwood.