Privacy

Last updated: September 2026

LOCKWORK is a set of browser puzzle games. This page describes everything we collect and why. It is deliberately short, because we deliberately collect very little.

What we collect

• Nothing, if you just play. Every room runs in your browser. Your puzzle progress is stored on your own device (localStorage) unless you create an account.
• Your email address, if you give it to us, by joining the mailing list or creating an account. A name too, if you choose to add one.
• Account save data. If you create an account, your game progress and streaks are stored on our server so they can follow you across devices. This is the whole point of an account. Your credit balance, the rooms you've unlocked, and which invite link (if any) brought you here are kept with it.
• Purchase records. If you buy a credit pack we keep the order (what, when, how much) so we can honour refunds and answer questions. Stripe handles the payment itself and keeps your card details; we never see them.
• First-party usage counts. We count page views, game starts, and game completions against a random first-party identifier so we can tell which rooms people enjoy. This never leaves our own server, is never joined with advertising data, and is never shared or sold. There are no third-party trackers, pixels, or analytics scripts anywhere on this site.

Cookies

Three, all ours, all boring: lw_session (keeps you signed in), lw_anon (a random id so the usage counts above aren't double-counted), and lw_sub (a yes/no marker that you've already given us an email, so we never ask you again). No advertising cookies. No cross-site anything.

Email

The daily VAULT never asks for an email address. If you give us one (on the mailing-list form, or by creating an account) we send you what the form promised: new rooms, the daily lock, first word on the big one, and nothing else. Every email carries an unsubscribe link, and unsubscribing works immediately (it doesn't affect your access to the rooms). We comply with the Australian Spam Act 2003: consent first, identify ourselves, honour unsubscribes.

What we never do

• Sell, rent, or share your data with anyone.
• Run third-party ads or trackers.
• Ask for more than the minimum (an email and a password are all an account needs; a name is optional).

Payments

Credit packs are paid for through Stripe, on Stripe's own checkout pages; your card number never touches our servers. Stripe's handling of your payment details is covered by Stripe's privacy policy.

Account emails

Separately from the mailing list, an account can receive a few transactional emails (confirming your address, resetting your password) because the account can't work without them. They carry no marketing and aren't affected by unsubscribing.

Your rights

Email us to see, correct, or delete everything we hold about you; deletion requests are honoured within 30 days. We're based in Australia and honour the Australian Privacy Principles, and GDPR rights for visitors in the EU/UK.

Contact

hello@lockwork.rooms (the address goes live with the domain)