Privacy
Last updated: September 2026
LOCKWORK is a set of browser puzzle games operated by Service Systems Pty Ltd (ABN 78 696 238 516), which is responsible for the information described here. This page describes everything we collect and why. It is deliberately short, because we deliberately collect very little.
What we collect
- Nothing, if you just play. Every room runs in your browser. Your puzzle progress is stored on your own device (localStorage) unless you create an account.
- Your email address, if you give it to us, by joining the mailing list or creating an account. A name too, if you choose to add one.
- Account save data. If you create an account, your game progress and streaks are stored on our server so they can follow you across devices. This is the whole point of an account. Your credit balance, the rooms you've unlocked, and which invite link (if any) brought you here are kept with it.
- A fingerprint of where you signed up. When you create an account we keep a scrambled, one-way fingerprint of your internet connection (never the address itself), and a tidied copy of your email address. Both are used for one thing only: spotting many accounts made by one person to collect invite credits.
- Purchase records. If you buy a credit pack we keep the order (what, when, how much) so we can honour refunds and answer questions. Stripe handles the payment itself and keeps your card details; we never see them.
- First-party usage counts. We count page views, game starts, and game completions against a random first-party identifier so we can tell which rooms people enjoy. This never leaves our own server, is never joined with advertising data, and is never shared or sold. There are no third-party trackers, pixels, or analytics scripts anywhere on this site.
Cookies
Three, all ours, all boring: lw_session (keeps you signed in),
lw_anon (a random id so the usage counts above aren't double-counted), and
lw_sub (a yes/no marker that you've already given us an email, so we never
ask you again). No advertising cookies. No cross-site anything.
LOCKED and VAULT never ask for an email address. If you give us one for the mailing list (the signal form, a room that asks, or the box you can tick when you create an account) we send you what the form promised: one email when a new room opens, and nothing else. Every email carries an unsubscribe link, and unsubscribing works immediately (it doesn't affect your access to the rooms). The few emails an account needs to work, confirming your address and resetting a password, are covered under Account emails below. We comply with the Australian Spam Act 2003: consent first, identify ourselves, honour unsubscribes.
What we never do
- Sell, rent, or share your data with anyone.
- Run third-party ads or trackers.
- Ask for more than the minimum (an email and a password are all an account needs; a name is optional).
Payments
Credit packs are paid for through Stripe, on Stripe's own checkout pages; your card number never touches our servers. Stripe's handling of your payment details is covered by Stripe's privacy policy.
Account emails
Separately from the mailing list, an account can receive a few transactional emails (confirming your address, resetting your password) because the account can't work without them. They carry no marketing and aren't affected by unsubscribing.
Your rights
Email us to see, correct, or delete everything we hold about you; deletion requests are honoured within 30 days. We're based in Australia and honour the Australian Privacy Principles, and GDPR rights for visitors in the EU/UK.
Contact
Service Systems Pty Ltd (ABN 78 696 238 516), Victoria, Australia · hello@lockworkgames.com