Watertight privacy, safe in the deep

Privacy

Last updated: 23 September 2026

Who we are

This site, 585816335.com, and its game Reefwell are run by the operator of 585816335.com. For anything about privacy, write to info@585816335.com.

Playing needs no personal data

You can play Reefwell without telling us anything about yourself. There are no accounts, no fingerprinting, no social widgets and no embedded content from other companies. We do not profile anyone, make automated decisions about anyone, or send marketing email.

The leaderboard, only if you choose

After a game you may type a nickname (1 to 16 letters or digits) and press Save. Only then does our server store:

• the nickname you typed;
• your score, the layers you cleared and your level;
• the time it was saved, and the time between starting the game and saving it (used only for plausibility checks, never shown).

Nickname, score, layers, level and save time are public: anyone can see them in the Top 100 and Recent 100 lists. An entry is kept only while it appears in one of those lists; older entries are deleted automatically when new scores are saved. Please do not use your real name or anything else that identifies you. We also keep a running total of games started, with nothing about who played them.

Fair play and protection

To check that a score is plausible, each game gets a random game token and a start time. The token says nothing about you. A game can be saved only within six hours of starting; after that the token is removed by our hourly clean-up.

To stop floods of requests, our server turns your IP address into a salted, one-way hash that changes every day. Your IP address itself is never stored. The hash is used only as the key of short-lived request counters. They expire after 10 seconds to 1 hour; our hourly clean-up deletes the expired ones. Because the hash changes every day, it cannot link your visits from one day to the next.

What stays on your device

We set no cookies. The game uses your browser's local storage, which stays on your device:

• bw.name: the last nickname you saved, so you do not have to type it again. It reaches us only when you press Save.
• bw.howto: whether the How to play panel is open or closed.

You can delete both at any time in your browser settings.

Hosting and security partners

The site runs on Cloudflare, Inc. Like any web host, Cloudflare handles technical connection data, such as your IP address, your browser's user agent and the page you ask for, to deliver the site and to block attacks. Its security features may run a brief automatic bot check in your browser and may set a strictly necessary security cookie (for example __cf_bm, which expires after 30 minutes). Browsers may also send Cloudflare reports about network errors. Cloudflare's privacy policy applies to this processing. Its network is worldwide, so this data may be handled outside your country, under Cloudflare's safeguards for international transfers.

If you write to us

If you email info@585816335.com, we receive your email address and your message. We use them only to answer you and delete them once the matter is closed. The mailbox is hosted by Tuta (Tutanota).

Why we may do this

A leaderboard entry is saved because you ask for it (GDPR Article 6(1)(b)). Fair-play checks, request limits and security rest on our legitimate interest in a safe and fair game (Article 6(1)(f)). Answering your email rests on the same legitimate interest, or on your request.

Your rights

Under the GDPR and the UK GDPR you can ask for access to your personal data, and for its correction or deletion. You can also object to processing, and complain to your data protection authority. We hold no identities, so we cannot link a leaderboard entry to a person ourselves. To have an entry removed or corrected, email info@585816335.com with the name, the score and roughly when it was saved. For California residents: we do not sell or share personal information.

Children

Reefwell suits all ages and needs no personal data. Children should not type their real name on the leaderboard.

Security

The site runs on HTTPS only, with HSTS, and a strict Content Security Policy blocks every script we have not approved. IP addresses are never stored, only a salted daily hash. We collect as little as we can, because data we do not hold cannot leak. We use technical measures designed to protect the service and reduce abuse; no website or network can be guaranteed completely secure.

Changes

If this policy changes, we update this page and the date at the top.