Privacy Policy - PHYSICS LAB
Effective date: 2026-09-23
Contact: projectteamforyou@gmail.com
1. Summary
PHYSICS LAB has no accounts, no advertising and no analytics. The official levels and the level editor work entirely on your device. Two optional online features - the player gallery and the global leaderboards - use our server. When you use them we store the levels you publish, the leaderboard name you choose and your verified times, linked to a random ID your browser creates. We never ask for, and do not store, your email address, real name, phone number or IP address.
2. Information stored on your device
The game saves the following in your browser's localStorage:
| Key | What it holds |
|---|---|
physicslab.progress.v1 | levels unlocked, best time and attempts per level, sound on/off |
physicslab.drafts.v1 | levels you are building in the editor (up to 30 drafts) |
physicslab.custom.v1 | your best times on levels other players shared with you |
physicslab.verify.v1 | a short-lived note that you beat your own level in test play |
physicslab.creator.v1 | the creator name you typed in the editor, to prefill it next time |
physicslab.editor.snap | whether the editor's grid snap is on |
physicslab.device.v1 | a random ID made by your browser for the online features (see section 4) |
physicslab.nickname.v1 | the leaderboard name you chose |
Remove it at any time with the "Clear my records" button on the site, by deleting drafts in the editor, or by clearing your browser's site data for this site. Clearing it also disconnects you from anything you published: the server has no other way to recognise you. The game works normally if storage is unavailable (private browsing, blocked site data) - it simply will not remember anything.
If you install the game as an app, a service worker also caches its own files so it works offline. That cache holds only the game's own assets.
3. Levels you share as a link
When you share a level from the editor, the whole level - its layout, your solution, and the level name, creator name and hint you typed - is packed into the link itself (after the # sign). Sharing a link does not upload anything to us, and the part after # is not sent to any web server when the link is opened.
Anyone who receives the link can read everything in it, and the messaging app, social network or email service you use to send it will handle the link under its own privacy policy. Do not put personal information in level names, creator names, hints or leaderboard names. All of them are optional.
If you use one of the share buttons (for example X, Facebook, WhatsApp, Telegram, LINE or Reddit), your browser opens that service's own page; nothing is sent to it until you choose to post there.
4. Online features: gallery and leaderboards
These features are used only when you open the gallery, publish a level, clear a level while online, like or report a level, or view a leaderboard.
What the server stores
| Data | When | Visible to others |
|---|---|---|
| Published level: layout, your solution, level name, creator name, hint | you press "Publish to gallery" | yes |
| Leaderboard entry: leaderboard name, best time, the piece placement of that run | you clear a level while online | name and time: yes |
| Plays (one per level per day), likes and reports (reason and optional note) | you open, like or report a gallery level | counts only |
Device ID hash: a keyed cryptographic hash of the random ID in physicslab.device.v1 | with each of the above | no |
| Dates and times of the above | with each of the above | partly (publish date) |
The raw device ID never leaves your browser in stored form - the server keeps only its keyed hash, which cannot be turned back into the ID. It is not linked to your identity, is not used for advertising, and is not shared with anyone.
What the server does not store: your email, real name, phone number, any account, your contacts, precise or approximate location, or your IP address. Your IP address is used only in memory, for a short time, to limit abusive request rates, and is never written to our database. Our hosting providers may keep standard technical access logs for a short period for security and operations.
Why (purposes and legal bases)
- to run the gallery and leaderboards you ask to use (performance of the service; GDPR Art. 6(1)(b));
- to keep them fair and safe - replaying runs to stop faked times, limiting request rates, filtering and moderating reported content (legitimate interests; GDPR Art. 6(1)(f)).
Automatic checks: level names, creator names, hints and leaderboard names are screened automatically for offensive words, links and contact details, and a level is hidden automatically after several independent reports until a person reviews it. These checks decide only whether text or a level may be shown; they have no other effect on you.
How long
- Published levels: until you remove them from the editor, or until moderators remove them.
- Leaderboard entries: while the level and the leaderboard exist. A new best time replaces the old one.
- Play records: kept only to count one play per day; they may be deleted after 90 days.
- Reports: until they are resolved, then for up to 12 months as a moderation record.
Who can see it and who processes it
Published levels, leaderboard names and times are public. Our server and database run on Railway (Railway Corporation, United States), and the website is served by Cloudflare (Cloudflare, Inc., United States). They process data on our behalf and under their own security obligations. Using them means data may be transferred to and stored in the United States; where required, such transfers rely on the providers' standard contractual clauses.
5. Network requests
The game loads its own files (HTML, CSS, JavaScript, level data and image assets) from wherever you are running it. The online features described in section 4 send requests to our API server. The landing page also asks the API for the current world records to display them. No request goes to an advertising, analytics or tracking service.
6. Children's privacy
PHYSICS LAB is not directed at children under 13 and asks no one for personal information. Because players can publish levels and choose a public leaderboard name, parents may wish to remind children never to type a real name or other personal details.
7. Third-party services
No third-party advertising, analytics, crash reporting or social SDKs are integrated. The hosting providers named in section 4 are the only processors. Share buttons are plain links to the services named in section 3; those services are only contacted if you tap one.
8. Your rights
Data protection laws such as the GDPR and Korea's Personal Information Protection Act (PIPA) give you rights of access, correction, deletion, restriction, objection and portability.
- Delete a level you published: open it in the editor → Share → Remove.
- Leaderboard entries and anything else: email projectteamforyou@gmail.com with the leaderboard name and the level(s) concerned. Because there are no accounts, we may ask you to show the device ID from your browser so we can find the right entries; we will not ask for anything more.
- You may also lodge a complaint with your local data protection authority.
We answer requests within 30 days.
9. Changes
If we change how data is handled, we will update this policy and its effective date before the change takes effect.
10. Contact
Questions about this policy: projectteamforyou@gmail.com
11. Business operator
| Company | 프로젝트팀포유 (Project Team For You) |
|---|---|
| Representative | 이유상 |
| Business registration number | 495-25-02209 |
| Mail-order business licence | 제2026-경북봉화-0037호 |
| Address | 1166-68 Yebong-ro, Sangun-myeon, Bonghwa-gun, Gyeongsangbuk-do, Republic of Korea |
| Telephone | 070-7620-7256 |
| projectteamforyou@gmail.com |