Privacy Policy

Last updated: 26 August 2026

This page describes what M2048 collects, why, and who else sees it. It reflects what the service actually does rather than what a template assumes.

What we collect

• Account: your username, password (stored only as a salted hash — never in readable form), and, if you provide one, your email address and country. Guest accounts store a device identifier so the same browser can resume the same guest, and are given a placeholder address that receives no mail.
• Gameplay: scores, ratings for each mode and time control, match replays, friends, tournament membership, and messages you send in room or tournament chat.
• Technical: your IP address and request details appear in server logs, which are kept for diagnosing faults and abuse. Purchases record what was bought and when.

Who else sees it

We do not sell your information or share it for anyone else's marketing. It does reach the services M2048 is built on:

• Cloudflare carries all traffic to the site and therefore sees your IP address and requests.
• PayPal handles payment if you buy anything. Your card details go to PayPal and are never seen or stored by M2048; we keep only the record of the purchase.
• Google AdSense, and only if you press "Accept" on the cookie banner. Ads are not loaded before that.

We may also disclose information where it is necessary to comply with the law or legal process, to protect the rights or property of M2048, or to enforce these terms.

Cookies

Essential cookies and browser storage keep you signed in, remember which tab owns a game, and record your cookie choice. These cannot be turned off without breaking sign-in. If you accept advertising, Google and its partners may set their own cookies and use your device information, including your IP address and approximate location, to show and measure ads. You can review your choices at Google Ads & Privacy and the Google Privacy Policy, and withdraw consent at any time by clearing this site's browser storage.

Your choices

You can change your country, email address and password from your profile page. To request a copy of your data, correction of it, or deletion of your account, write to [email protected] — there is no self-service delete button yet, so these requests are handled by hand. Deleting an account removes its profile, ratings and saved games; replays of matches you played against others may be retained, since they are also the other player's record. Requests about content removal under section 8 of the Terms of Service go to the same address.