Privacy Policy

Last updated 14 September 2026

Goatacorn is a game made by Blondee Games. It is free to play, and it has no ads, no accounts, and no third-party tracking of any kind. This page explains exactly what the game does with data — which is very little.

What stays on your device

Your progress is saved locally — in your browser's storage on the web, and in the app's own private storage in the iOS app. That includes:

• your best score and your best score for each day
• sprinkles (the in-game currency), and which characters, trails and auras you own and have equipped
• sound on/off, your daily streak, and a few gameplay flags
• the leaderboard player name you joined with, if you joined

On the web this is also copied to our server so that goatacorn.com and supergoatacorn.com share one save — see “Keeping one save across our two web addresses” below. In the iOS app it is sent nowhere. Clearing your browser's site data, or deleting the app, erases it. The backup code feature builds a code from this data entirely on your device — we never receive it.

What gets sent to our server

Two things. The first is the daily leaderboard, which is optional and works like this:

• Opening RANKS asks our server for that day's board (a list of player names and scores). That request carries the date and nothing about you, apart from the IP address every web request carries (see “IP addresses” below).
• Tapping JOIN THE BOARD keeps the player name shown on your device. The name comes from our own list of made-up names — a word, a word and two digits, such as SkyGoat42 — and nothing else can be used: our server refuses any name that is not on the list, so a real name cannot appear on the board. From then on, each time you finish a Daily Challenge run, the game automatically sends that name, the date and your best Daily score of the day to our server, and sends them again when you open RANKS. The name and score are shown to every player on that day's board.
• Tapping LEAVE forgets the name on your device and stops all further sending. Rows already on the board age off as described next, or email us to remove one sooner.

Each entry is one row on that day's board: the player name and the score. The entry contains no device identifier, email address, account or advertising ID. Our server keeps the boards for today and the 13 days before it and deletes older days; that clean-up runs at start-up and every hour.

The second is your saved progress, described next.

Keeping one save across our two web addresses

The games live at two addresses — goatacorn.com and supergoatacorn.com — and a web browser keeps saved data separately for each one. Without help, playing at the second address would look like starting a brand new game, with none of your sprinkles, characters or stickers. So on the web (not in the iOS app) the game keeps a copy of your progress on our server and both addresses read from it.

• What is stored: exactly what a backup code contains — your sprinkles, best score, which characters, trails and auras you own and have equipped, your daily streak, your Super Goatacorn levels, golden acorns and stickers, and the nickname you last used for the leaderboard.
• How it is labelled: with a random string your browser makes up the first time it is needed. It is not an account. There is no email, no password, no age, no location, and nothing that says who you are.
• Who can read it: anyone holding that random string, which is kept in your browser's storage — the same as anyone holding your printed backup code. Don't share either one.
• How long: for as long as you keep playing. Clearing your browser's site data at both addresses cuts the link and your browser makes a new one next time; email us if you would like the stored copy deleted too.

None of this applies to the iOS app, which has a single home and sends no progress anywhere.

Anonymous visit counting (website only)

So we can tell whether anyone is playing, the website at goatacorn.com sends a few tiny events to our own server: that the page loaded, that a run started or ended and what the score was, which character was flown, which level of Super Goatacorn was played and whether it was finished, and — in Goatacorn Kombat, the separate game for mature audiences at /kombat — which mode and fighters were chosen, who won the bout, how long it lasted and whether a finisher was performed. Every event also carries whether the game was installed or shared, and the general kind of device (for example phone, tablet, Chromebook, or desktop) and the site you came from, if any. The server adds these up into daily totals — "120 visits, 900 runs" — and stores only the totals. All three games count into those same daily totals, and none of them sends anything about who you are.

• No cookies, no device or advertising identifiers, and nothing is stored in your browser for this purpose.
• To count how many different people visit in a day, the server combines your IP address and browser type with a secret that changes every day. The result is kept in the server's memory only until midnight (UTC), is never written to disk, cannot be turned back into you, and cannot connect your visit on one day with a visit on another.
• No third party is involved: nothing goes to Google, Meta, or any analytics company.
• The iOS app does not send any of these events.

IP addresses

Every request to our server carries your IP address, as any web request does. Our own server uses it in two ways, both in memory only: to rate-limit score submissions (counted per address, and per address-and-player-name pair, for one hour at a time), which is what stops the board from being spammed, and for the visit counting above. Those counters are never written to disk and are gone within the hour and whenever the server restarts. A leaderboard row never stores an IP address; only the player name and score are kept. Our server writes no request log of its own. Our hosting provider, Fly.io, carries the connection and may keep standard connection logs for a short time under its own privacy policy.

Cookies and tracking

Goatacorn sets no cookies. It contains no advertising, attribution or crash-reporting SDKs, no third-party analytics, and nothing you do in the game is tracked across other apps or websites. We do not sell or share data, because there is nothing to sell or share.

Children

Goatacorn is made to be suitable for all ages, and it is deliberately built so that it collects no personal information from anyone — children included. There is no free text anywhere in the game: leaderboard names come from our own list of made-up names, so a child's real name cannot be entered or shown. If a name on the board should not be there, use the “Report a name” link under the board or email us and we will remove it.

Your choices

• Remove your on-device data: clear your browser's site data for goatacorn.com, or delete the app.
• Stop sharing scores: tap LEAVE under the board. Nothing more is sent from then on.
• Remove a leaderboard entry: email us with the player name and the date, and we'll delete that row. Otherwise it ages off the board within 14 days.
• Play without sending anything: don't join the board and don't open RANKS. Everything else in the game works offline.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new date at the top.

Contact

Questions, deletion requests, or anything else: contact@goatacorn.com — Blondee Games.