PRIVACY
What Hashigo keeps.
Last updated 24 September 2026
The short version
- No account, no email, no ads. The only permission Hashigo ever asks for is notifications, and only if you turn on the morning reminder.
- It records how you play — your moves and how long you pause — to run the leaderboard and make the game better.
- The only thing anyone else sees is the name you choose, next to your Daily score.
- The website and the game are not the same thing. This website counts its visitors with Google Analytics, like most websites do, and while an advert is running its home page carries Google’s advert tag as well. The game does not: it sends nothing to Google or to anybody else, only your scores and how the game was played, and only to Hashigo’s own server.
On your phone
Your best score, your Daily streak, a Daily you haven't finished yet, and your settings are kept on your phone. They never leave it, except as described below. Deleting the app deletes them.
What the app sends
Hashigo sends these things to its own server. All are tied to a random ID created on your phone the first time it's needed. That ID is not an account and says nothing about who you are; it exists so a Daily score can be yours rather than anyone's.
| When | What | Why |
|---|---|---|
| You post a Daily score | The display name you chose, your score, the moves you made, how long you played, and the random ID. | To put you on the leaderboard. Your moves are replayed to check the score is real before it's accepted. |
| You finish or leave any game | The moves you made, which deck you played, the mode and date, the pause before each move, total play time, when the game started, the app version, and the random ID. | To understand how the game is played — how long a Daily takes, where people get stuck, which days are too hard — and to fix what isn't working. |
| You turn on the morning reminder | A notification token from Apple, your phone's time zone (for example Europe/London), and the random ID. | To send one notification each morning at nine your time: yesterday's Daily result and that today's is ready. Turn the reminder off and the token is switched off. |
| You start or join a crawl | The crawl's name, that you're in it, and the random ID. If you joined through someone's invite link, whose link it was and whether you were new to Hashigo. | To show a private board for the people in the crawl, and to see who brings new Climbers in, so they can be thanked. |
| You share a crawl invite | Your invite reference: a short code in the link, made for sharing. It isn't your random ID and doesn't identify you on its own. | So a join through your link can be credited to you. |
| You report a name | The name as you saw it, why you reported it, and the random ID. | So it can be reviewed and, if needed, hidden. One report per name per Climber. |
Scores, clears and the rest are worked out on the server by replaying your moves, not taken from the app. Play time is counted only while the app is open, and any single pause is counted as two minutes at most.
What Hashigo never collects
- Your real name, email address, phone number or contacts
- Your location, photos, microphone or camera
- Your device's advertising identifier
- Anything about what you do in other apps or on other websites
There are no adverts, no advertising partners, and no third-party analytics in the app. Nothing is sold, and nothing is used to track you.
Who sees it
Everyone can see the display names and scores on the Daily leaderboard, along with ladders cleared, perfects and sweeps. Your moves are never shown: a set of moves is a winning line for that day's deck.
Names are checked before they go on the board, and offensive names, links and adverts are refused. If one gets through, Hashigo can hide it: your score stays, and your name is replaced with a neutral one like "Climber 3F9A".
People in a crawl see each other's display names and Daily scores on the crawl's board. Anyone with a crawl's invite link can see its name and how many Climbers are in it.
Each day, the top Daily score, with its display name, may be posted to Hashigo's account on Bluesky, along with how many Climbers played.
Anyone can report a name they see, and block a Climber so they don't appear on their own boards. Blocks are kept only on your phone; the blocked Climber isn't told.
Only Hashigo can see everything else. It is stored with these providers, who handle it only to provide their service:
- Supabase — the database. Stored in Frankfurt, Germany, within the EU.
- Vercel — hosts this website.
- Apple — distributes the app and delivers notifications, under Apple's own privacy policy.
This website
This website is measured with Google Analytics, which records which pages were viewed and roughly where in the world from. That is how anyone here knows whether the site is doing its job. Visits are counted whatever you choose — a page address and nothing else, kept on nothing, with no way back to you. What the bar at the bottom asks for is the cookie: say yes and Google Analytics may keep one in your browser, so a second visit isn’t read as a stranger; say no and it never does. Google Signals is switched off either way, so none of this builds a profile of you, and your answer is remembered on your own device so you are asked once. While an advert for Hashigo is running, the home page also carries Google’s advert tag, so Google can tell whether an advert it sold brought anybody here. It is held to the same denial as everything else on this page — no cookie, no identifier, nothing personalised — because the bar below asks about the analytics cookie and nothing else, and a question about one thing is not permission for another. To change your mind, clear this site’s data in your browser. The admin page and crawl invites are left out of it entirely. Everything else here — the fonts, the images — is served from this site. Vercel, which hosts it, keeps standard server logs, including IP addresses, for security and to keep the site running.
If you leave an email address on the home page to be told when Android is ready, that address is all that is kept, alongside the fact that you asked and when. It is used once, for that one email, and for nothing else — no newsletter, no sharing, no advertising. Ask at help@hashigo.ing and it is deleted.
The game is a different matter, and deliberately so. Nothing in the app goes to Google, or to any other company. It records what is listed above — your scores, your moves, how long you played — and sends it only to Hashigo’s own server, to run the leaderboard and to understand how the game is played. There is no analytics kit, no advertising kit, and no third-party code of any sort inside it.
How long it's kept
Scores and game records are kept for as long as Hashigo runs, so leaderboards and history keep working. You can ask for yours to be deleted at any time.
Your rights
Under UK and EU data protection law you can ask to see what's held about you, have it corrected or deleted, or object to it being used. Hashigo relies on its legitimate interest in running a fair leaderboard and improving the game; your display name is something you choose to give.
To ask, email help@hashigo.ing with your display name and roughly when you played. If you're not happy with the answer, you can complain to the Information Commissioner's Office at ico.org.uk.
Children
Hashigo is a number puzzle anyone can play, but it isn't aimed at children under 13 and doesn't knowingly collect personal information from them. Please use a nickname rather than your real name on the leaderboard — especially if you're young.
Changes
If this changes, the date at the top will too.
Who runs Hashigo
Hashigo is made by Pete Trainor, who is responsible for your data. Contact: help@hashigo.ing.