Privacy Policy
Brainrot Gem Quest · Effective October 17, 2026 · Updated October 18, 2026 (the game's own website on Cloudflare, optional reward ads on CrazyGames, cloud saves, anonymous crash reports and the clock check)
The short version (for parents too)
- No accounts with personal details. We never ask for a name, email, phone number, birthday, photo or location.
- No chat and no free text. Online player names are picked at random by the game from a fixed word list.
- No purchases. The game has no real-money purchases.
- Ads only on CrazyGames, and only if you choose. When you play on CrazyGames, you can pick to watch a short video for a reward (at most 8 a day). Those ads come from CrazyGames, under CrazyGames' privacy policy. Anywhere else the game shows no ads.
- No tracking or analytics of our own. We don't sell or share data and we don't build profiles.
- Your progress is saved on your own device, with a backup copy on our server so you don't lose it. Online battles keep a game record there too. All of it is linked to a random ID, not to you.
- If the game crashes, it sends us an anonymous crash report (what went wrong, not who it happened to) so we can fix the bug.
Who we are
Brainrot Gem Quest is an independent game made by a solo developer in the United States. In this policy, "we" and "us" mean that developer. For anything about privacy, email ryan@getvigil.health.
What stays on your device
The game saves these in your browser's local storage. They never leave your device unless noted:
- Your game save: gems, crew, levels, progress and settings. A backup copy also goes to our server (see "Cloud saves" below).
- Settings: your sound on/off choice and visual theme.
- Error notes: if the game hits a bug it keeps the last five error messages, along with your browser type, so you can show them on the in-game "Error report" screen if you ask for help. Each new error is also sent to us as an anonymous crash report (see below).
- Your online key: if you play online battles, a random secret key that lets your device sign in to the battle server (see below).
The game's Start over option erases your save and your online key. To remove everything, including settings and error notes, clear your browser's data for the game's website.
What goes to our battle server
Online battles (Brainrot Brawl) use our server, which runs on Cloudflare. The first time you open online battles the server creates an anonymous online profile. Only this goes into it:
| Information | Why |
|---|---|
| A random player ID and a scrambled (hashed) copy of your device's secret key | To recognize your device. We never keep the key itself. |
| A random name (like "Turbo Tralalero 42") and badge | Shown to other players on battles and leaderboards. The game picks it from a fixed list, so it can't contain anything personal. |
| Trophies, wins, losses and your saved defense team | Matchmaking, leaderboards, and letting other players battle your defense. |
| Battle records: the two teams, the taps you made and the result | To check results are fair and to show replays in your battle history. |
| Times you signed up, last played and battled | Matchmaking, ending unfinished battles and "you were attacked" notices. |
Cloud saves and restore codes
So you don't lose your progress, the game backs up a copy of your game save to our server, linked to your random player ID. We keep the newest copy and the one before it. The copy never includes your device's secret key.
To move your game to a new device, the game can show a restore code: 8 letters and numbers that work once, for 24 hours. Typing it on the new device signs that device in to the same online profile and brings your save across. We store only a scrambled (hashed) copy of the code, and you can use it only a few times an hour. Anyone with the code can take your save, so don't share it.
A backup is kept until you delete it, or for 12 months after the last backup if you stop playing. You can delete it at any time (see "Deleting your online profile" below).
Anonymous crash reports
When the game hits a bug, it sends a short crash report to our server so we can find and fix it. A report contains only:
- the error message and the first lines of where it happened in the game's code (web addresses are removed before it's stored);
- which screen was open, the game's version, and the device type (iPhone/iPad, Android or computer);
- the time it happened.
It contains no player ID, no online name, no secret key, nothing from your save, and no network address, so it can't be linked to you or your profile. A device sends at most 20 reports per play session, and our server accepts at most 30 an hour from one network (checked using a scrambled, hashed copy of the address, deleted after about a day). We keep only the newest 2,000 reports, and none longer than 30 days.
The clock check
To keep timers fair (for example the daily spin), the game asks our server for the current time. Nothing is stored when it does.
Network (IP) addresses
Like every website, our server sees your device's network address when it connects. We use it only to stop abuse, such as limiting how many new profiles one network can make in an hour. We never store the address itself: the sign-up and crash-report limits store only a scrambled (hashed) version, and it's deleted after about a day.
What other players can see
Your random name, badge, trophy count and rank, plus your defense team when they battle it. Nothing else.
What we never collect
- Names, email addresses, phone numbers, birthdays, home addresses or school names
- Photos, voice, contacts or precise location
- Messages of any kind (there is no chat)
- Payment information (there are no purchases)
- Advertising IDs or cross-site tracking (we don't; on CrazyGames, see "Reward ads on CrazyGames" below for what CrazyGames does)
Reward ads on CrazyGames
When you play Brainrot Gem Quest on CrazyGames, the game can offer you a short video ad in exchange for an in-game reward. It's always your choice: no ad plays unless you tap to watch one, and you can watch at most 8 a day. The game works the same if you never watch any.
These ads are chosen and shown by CrazyGames and its advertising partners, through the CrazyGames software kit (SDK) built into the game. We send CrazyGames no personal information, and we don't have any. The game only tells the SDK when you start and stop playing, and when something exciting happens, so CrazyGames knows when not to interrupt. What CrazyGames and its partners collect, and whether ads are personalised, is up to CrazyGames and your choices in its consent pop-up, under CrazyGames' privacy policy. That policy says the main CrazyGames site is for players 13 and older and that CrazyGames does not allow personalised ads on its Kids site.
Outside CrazyGames (for example our own web address), the game shows no ads. Your browser still downloads the CrazyGames SDK file from CrazyGames' servers when the game opens, which, like any download, lets CrazyGames see your network address, but the game doesn't use it there.
Services that help run the game
These companies process limited technical data, such as your network address and browser type, to deliver the game. They don't receive anything from your save or online profile beyond what's described above.
- CrazyGames supplies the SDK file the game loads, and shows the optional reward ads when you play on CrazyGames. CrazyGames privacy policy
- Cloudflare hosts the game itself at brainrot-gem-quest.illinimd.workers.dev, and our battle server and its database. Cloudflare privacy policy
- GitHub Pages may also host a copy of the game's files. GitHub privacy statement
- Google Fonts supplies the game's title font. Your browser downloads it from Google. Google Fonts privacy FAQ
If you play on a game website (for example a games portal) instead of our own page, that website has its own privacy policy, which covers what it collects.
How long we keep things
- Battle records and replays: about 30 days, then deleted automatically.
- Hashed sign-up and crash-report addresses: about one day.
- Anonymous crash reports: the newest 2,000, and none longer than 30 days.
- Cloud save backups: the newest two copies, until you delete them or 12 months after the last backup.
- Restore codes: 24 hours, or until used.
- Your online profile (random name, trophies, defense team): until you ask us to delete it.
- Everything on your device: until you erase it.
Children
Many of our players are kids, and the game is built for that. It doesn't ask for or collect personal information from anyone, has no chat or free text, no purchases, and no tracking of its own. The only ads are the optional reward videos on CrazyGames, which CrazyGames chooses and shows under its own rules for age and child safety (see "Reward ads on CrazyGames" above); the game shows none anywhere else. The online ID and network address are used only to run the game and keep it fair and safe, never to contact a player, build a profile or show ads. Crash reports are anonymous and are used only to fix bugs.
If you're a parent or guardian and want your child's online profile deleted, or have any question, email ryan@getvigil.health.
Deleting your online profile
Email ryan@getvigil.health with the random name shown on your Brawl screen (and your trophy count, if you can). We'll delete the profile, its battle records and its cloud save within 30 days. Erasing the game on your device removes your key, so that device can no longer use the old profile.
Security
The game talks to our server over encrypted connections (HTTPS). Device keys are stored only in hashed form, and the server checks every battle result before it counts. No system is perfect, but we keep as little as we can so there's very little to protect.
Changes to this policy
If the game changes what it collects (for example if purchases are ever added, or ads beyond the optional CrazyGames rewards), we'll update this page and the date at the top before the change goes live.