MEGACORP.CARDS - SITE DOCUMENT

Privacy Policy

Last updated: 2026-07-22

megacorp.cards is a free browser game. It has no accounts, no logins, and no user-generated content. This page describes, factually, what data the site handles.

Analytics (PostHog)

The site uses PostHog for anonymous product analytics, configured deliberately narrowly:

• No cookies and no persistent identifiers: analytics state is kept in memory only and is discarded when you close the tab.
• IP addresses are anonymized; we do not receive or store your IP in analytics data.
• No user profiles: we never identify visitors, so no person profiles are created.
• No automatic capture: session recording, surveys, autocapture, and automatic pageview tracking are all disabled.
• Only explicit, typed events are sent (for example: page viewed, run started, run won or lost), each carrying the app version and small, whitelisted properties.
• Every property passes a sanitization layer that redacts anything resembling emails, tokens, keys, or other secrets before it leaves your browser.

Error reports (sanitized, rate-limited crash information) are sent through the same pipeline to help fix bugs.

Cloudflare Zaraz and Google Analytics

The site uses Cloudflare Zaraz to deliver the same explicit page and game events to Google Analytics 4. A direct Google tag is also loaded for configuration and diagnostics, with automatic pageview collection disabled; application events are not sent through the Google tag. Cloudflare and Google may process event, device, and approximate-location data under their respective privacy policies.

Other analytics services

Beyond PostHog, Cloudflare Zaraz, and Google Analytics as described above, no advertising pixels or other third-party trackers are integrated. If that changes, this page will be updated first.

Opting out

Analytics only runs when the browser session loads it successfully; content blockers and browser tracking protections may block the direct Google tag, Zaraz, or the first-party PostHog endpoint independently, and the site works normally without them. For PostHog, no identifiers or cookies are stored, so there is nothing to delete after you leave — closing the tab discards the session's analytics state.

Hosting

The site is served from infrastructure that produces standard technical server logs (request path, status code, timestamps) used for operating and securing the service.

Contact

Questions about this policy: see the registry record for project information.