Privacy Policy

Last updated: November 7, 2026

splatpunk is a browser game. You do not make an account, we show no ads, and we set no cookies. The only statistics we keep are anonymous visit counts from Cloudflare Web Analytics. What you paint stays on your device. This page explains the little information that is involved, and where it goes.

1. What stays on your device

The game keeps a few things in your browser's own storage so it works the way you left it. None of it is sent to us.

• Settings (local storage): the language you picked, the last wall you opened, your game settings (what is shown on screen, vibration, shake-to-refill), and which introductions the game has already shown you, such as the language banner.
• This visit only (session storage): whether the language banner has already been shown.
• Your walls (IndexedDB): pages you capture yourself are saved as a picture and a map of their text and buttons, so you can play them again. You can delete one with its delete button under "My walls".

To remove all of it, clear this site's data in your browser settings.

Motion sensors: on a phone, shaking the device refills the spray can. The game reads the phone's motion sensors only while you play, only to notice a shake, and never stores or sends the readings. On iPhone and iPad the browser asks for your permission first; you can turn it off in the game's pause menu.

2. Your paintings and photos

Painting, the photo at the end of a round and the share picture are all made in your browser. We do not receive them. They leave your device only if you save or share them yourself.

3. Capturing a website

When you type the address of a page that is not one of the built-in walls, and the capture service is available, this is what happens:

• Your browser sends us the address you typed. Our server opens that public page, takes a screenshot and reads where its text and buttons are, then sends the result back to your browser. We do not keep the screenshot.
• We use your IP address to limit how many captures can be made in a short time, and to check with Cloudflare Turnstile that the request comes from a person and not a bot. Turnstile runs a short check in your browser, only when you submit an address to capture (opening the site or playing the built-in walls never loads it); see Cloudflare's privacy policy.
• Our own log of each capture records the website's host name (not the full address), whether the capture worked and how long it took. It does not record your IP address.

4. Services we rely on

• Cloudflare hosts and delivers the site and runs the capture service. Like any web host, its systems handle standard request data (such as your IP address, the time and your browser type) to deliver the site and protect it from abuse, and may keep it for a limited time. See Cloudflare's privacy policy.
• Cloudflare Web Analytics: a small script counts page views and measures how fast pages load, so we can see how many people visit and from which countries. It sets no cookies, does not fingerprint your device, and gives us only aggregate numbers, not data about you. See Cloudflare Web Analytics.
• Google Fonts: your browser downloads the game's fonts from Google's servers, so Google receives your IP address and browser information. See Google's privacy policy.
• Sharing: the share buttons open X, LINE, Weibo or Naver with a link and a short text filled in, or your device's own share sheet. What you post there is between you and that service, under its own policies. We receive nothing back.

5. What we do not do

We do not sell or rent information, build advertising profiles, or track you across other websites.

6. Children

splatpunk is not directed at children under 13, and we do not knowingly collect personal information from them.

7. Changes

If this policy changes, we will update this page and the date at the top.