Privacy

Last updated 4 November 2026.

Who runs nobolab

nobolab.com is run by nobolab. Write to hello@nobolab.com about anything on this page.

When you play as a guest

Your browser sends us small events: which game and level you opened, started, finished or failed, how long it took and how many hints you used, plus where the link came from (for example a video). Each browser gets a random id so we can count returning players. It isn't linked to your name. Your game progress itself stays in your browser.

When you make an account

We keep your email address, the player name you choose (shown on the leaderboards), your password if you set one (only as a salted hash, never in plain text), whether you want emails about new games, and the levels you've solved with your times. Levels you solved as a guest on the same browser are added to your account when you sign in.

Feedback and requests

If you send feedback or ask for more, we keep what you wrote, the page, the kind of device (phone, tablet or computer), and your email if you give it.

Cookies and storage on your device

• nb_session: one cookie, only once you sign in. It keeps you signed in for 90 days, and it's deleted when you sign out.
• In your browser's storage: lab.vid (the random id), lab.src (where your latest link came from), lab.played.* and lab.won.* (levels you opened and solved as a guest), lab.more.* (games you asked more of), each game's own progress and settings (fort.*, movein.*, drawroom.* and similar), and whether the music is on.

No advertising or tracking cookies, and no outside analytics.

Who helps us run it

• Render hosts the site and its database, on servers in the United States.
• Cloudflare sits in front of the site and passes your visits on to it, so it sees your IP address.
• Resend sends the sign-in code emails, so it sees your email address.

The fonts come from nobolab.com itself, not from Google. Our server uses your IP address for a minute or so to stop abuse (too many tries at once) and doesn't store it; Render and Cloudflare may keep it for a short time in their own logs.

What we use it for

To run your account and the leaderboards, to see which games and levels people enjoy, and to reply to you. We only email you sign-in codes, and news about new games if you ticked that box. We don't sell data or show ads.

How long we keep it

• Your account, your results and your place on the leaderboards: until you delete your account.
• Feedback and requests: two years.
• The sign-in cookie: 90 days, or until you sign out.
• A sign-in code you didn't use, and the email address it went to: deleted within two hours.

Age

nobolab is for people 13 and over. If you're under 13, please play as a guest and don't make an account.

Getting or deleting your data

You can delete your account, your results and your place on the leaderboards at any time on My stats. To get a copy of what we keep about you, or for anything else, write to hello@nobolab.com. Clearing this site's data in your browser resets your random id and your guest progress.