1. Overview
Plokk ("we", "our", "the game") is a free-to-play browser puzzle game available at plokk.ratatalabs.com and as a Progressive Web App. This policy describes what data we collect, why, and how it is used.
2. Data We Collect
Game progress (local storage)
Username, avatar selection, score, stats, gems, owned themes, and achievements are stored in your browser's local storage. This data never leaves your device unless you create an account.
Account data (optional)
If you sign in with Google or email/password, we store your email address, chosen username, avatar, and game stats in Firebase Firestore. This enables cloud save and cross-device sync. Sign-in is entirely optional.
Leaderboard data
Your username and high score are written to a public leaderboard stored in Firebase Realtime Database. This is visible to all players. You can use any username; we recommend not using your real name.
Usage analytics (only after consent)
We use Firebase Analytics to collect anonymised data about how the game is played (sessions, screen views, events). Analytics only runs after you accept the analytics category in our cookie banner. No personally identifiable information is sent to analytics.
3. Third-Party Services
- Firebase (Google)Authentication, database, cloud sync, analytics
- reCAPTCHA v3 (Google)Bot protection via App Check — runs on every visit as a strictly-necessary security measure to protect the leaderboard from abuse. Invisible, no user interaction required.
- Google AdSense H5 Games AdsInterstitial ads on game over and rewarded video ads for optional in-game actions such as Undo, Shuffle, and Continue when gems are low. Runs under Consent Mode v2.
- Cross-promo bannerShows other games we make — iframe loaded from cross-promo.sliceof.games only after marketing consent
Fonts are self-hosted from our own server, so no requests are made to Google Fonts. Google AdSense H5 Games Ads may load as described above, with Consent Mode v2 defaults applied before the ad script is requested. Rewarded ads are optional: the player chooses whether to watch one, and the in-game reward is granted only after the ad provider reports the ad as viewed.
Each third-party service is subject to its own privacy policy. We encourage you to review Google's Privacy Policy.
4. Cookies & Consent
On your first visit we show a consent banner asking which categories of cookies and tracking you allow. Your choice is stored in a cookie named cc_cookie (retention: 182 days). You can change your mind at any time via Profile → Settings → Manage Cookies. See the cookie policy for a shorter category summary.
Necessary (always on)
Local storage for username, avatar, game progress, gems, owned themes, language, and audio preferences. The cc_cookie that stores your consent choice. reCAPTCHA v3 _grecaptcha cookies used to verify you are a real player so we can protect the leaderboard from abuse — these are strictly necessary for the game to function safely.
Analytics (optional)
Firebase / Google Analytics _ga* cookies. Used to understand how the game is played. When disabled, we apply Google's Consent Mode v2 denied defaults so no identifiers are sent.
Marketing (optional)
Enables Google AdSense H5 Games Ads, including interstitial ads on game over and rewarded video ads for optional actions such as Undo, Shuffle, and Continue when gems are low. It also loads the cross-promo banner from cross-promo.sliceof.games. These services may use cookies or local storage for ad delivery, measurement, personalisation, frequency capping, and abuse prevention. If disabled, Google Consent Mode v2 keeps ad storage, ad user data, and ad personalisation denied unless you later accept marketing. The cross-promo iframe is replaced by a placeholder and not requested at all.
5. Children's Privacy
Plokk is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal data, please contact us and we will delete it.
6. Your Rights
You may request deletion of your account and associated data at any time by contacting us at ratatalabs@gmail.com. Guest players can clear all local data by clearing their browser's local storage for this site.
7. Contact
For privacy questions or data deletion requests, contact us at ratatalabs@gmail.com or use the contact page.