Privacy policy
Party Wipe is a free browser game by Xaplore LLC. This page explains, in plain words, what is stored when you play, why, and how to delete it. Effective November 4, 2026.
Short version: you never need an account to play, and your progress stays in your browser. If you choose to sign in with Google, you get a cloud save: we store a hashed form of your Google account ID and your save data. We never store your email, your name or your photo, and you can delete everything at any time. Everyone, signed in or not, counts toward anonymous play counts.
Playing as a guest
Your progress is saved only in your browser's local storage on your device, under the key party-wipe:save. Your language, sound and motion settings are kept there too. Clearing your browser data, or private browsing, removes them. When the game runs inside the itch.io page, your browser keeps that progress apart from the progress on party-wipe.xaplore.dev. Use export and import in Settings to move a save between them.
On your first click or key press after the page loads, the game sends one anonymous play count to Xaplore's own stats counter. It contains only the game name, the word "play" and a coarse source class (itch.io, xaplore.dev, a search engine, a social site, or other) worked out in your browser from the referring page. The referring address itself, cookies and identifiers are never sent. See the Xaplore privacy policy.
If you sign in with Google
Signing in is optional, Google is the only option, and it is used only for the cloud save, so you can play the same dungeon on your phone and your computer. Google's sign-in script (Google Identity Services) loads only when the sign-in button is shown. Sign-in is not offered when the game runs inside an itch.io or game-portal frame; open party-wipe.xaplore.dev to sign in.
Google sends the game a signed sign-in token. Our server checks it and then stores only:
- Account ID: a one-way SHA-256 hash of
party-wipe:plus your Google account's subject ID. We don't keep the Google ID itself, your email, your name or your photo. - Session: a SHA-256 hash of a random session token. The token itself lives in an HttpOnly, Secure, SameSite=Strict cookie that lasts 60 days and is used only to keep you signed in.
- Save data: your game progress: your dungeon, gold, fame, relics, pacts, achievements, your Wall of Fame and lifetime totals, along with the time of the last write and a random ID for the browser that wrote it.
- Abuse limits: short-lived rate-limit counters keyed by a hash of your IP address or your account ID.
So the account panel can show which account is signed in, your browser also keeps a masked email (for example pl•••@example.com) in its local storage. Our server works it out from the sign-in token and does not store it.
How we use it
Only to keep your cloud save and keep you signed in. No ads, no selling or sharing of data, no profiling, and no analytics tied to your account. There is no leaderboard and nothing about you is public.
Who processes it
- Cloudflare runs our server (a Worker) and database (D1), reached at
party-wipe.xaplore.dev/api, and stores the data above. Like any web host, it may keep short-lived request logs that include IP address and browser type. - Vercel hosts the game and forwards
/apirequests to Cloudflare. - Google provides sign-in. We receive the sign-in token only when you sign in. Google's own privacy policy applies to your Google account.
How long we keep it
- Sessions expire after 60 days. Rate-limit counters expire after a day.
- Your account and cloud save are kept while you use your account. Accounts inactive for 730 days are deleted automatically, with their save.
Deleting your data
Open the account panel in the game and choose to delete your account. This immediately deletes your account, your sessions and your cloud save. The progress in your current browser stays unless you clear it yourself. You can also email support@xaplore.dev. Sign out only ends the session; your account and data stay.
Children
Party Wipe is not directed at children under 13. If you are under 13, please play as a guest and do not sign in.
Changes
If this policy changes, the new version will be posted here with a new effective date.
Contact
support@xaplore.dev · Xaplore LLC, North Carolina, USA