Privacy notice.

Last updated: 12 October 2026

Who we are

Fewest Shots is run by Mitesh Chauhan, based in the United Kingdom. We are responsible for the personal data described here. You can reach us at fewestshots@gmail.com.

What we collect and why

Username and display name: when you first post a score or save your details, we give you a username, such as SteadyCue42. You can also choose a display name. Both are shown publicly next to your scores on the board.
Email and password, if you create an email login. We use your email only to sign you in; we don't send you email. Your password is never stored: we keep only a salted, one-way hash of it (PBKDF2-SHA256).
Google account ID, if you sign in with Google. We store only the permanent ID Google gives your account, so we can recognise you next time. We don't store your Google name, email or photo.
Scores: for each table you post, the date, your shot count, your shot card and the raw shots you played, so the server can check the score. Posted scores are public on that day's board.
Sign-in sessions: a random token that keeps you signed in on each device, shared by every Fewest Shots game. We store only a hash of it.

We use this data to run the game: to create and secure your account, check and rank scores, and keep the board fair. Under UK data protection law (UK GDPR), the legal basis is that it's needed to provide the game you've asked to use, and our legitimate interest in preventing cheating and abuse.

Stored on your device

Fewest Shots sets one cookie of its own, fs_session, which keeps you signed in. It's shared by every Fewest Shots game on this site's domain, lasts up to 400 days, and can't be read by the page's scripts. It's needed for the game to work, so there's nothing to opt into. Signing out, or clearing your browser's cookies, removes it.

The game also saves your game history and stats, and any round in progress, in your browser's local storage. These stay on your device until you clear your browser data. Your personal stats are calculated from this history and aren't sent to us.

We don't use analytics, advertising or tracking of any kind.

Services we rely on

Cloudflare hosts the website and the database. Like any web host, it processes your IP address and request details to deliver the site and protect it from attacks. Data may be processed in countries other than your own, under Cloudflare's data protection terms.
Google Fonts serves the page's fonts, so Google receives your IP address when the page loads.
Google sign-in: the page loads Google's sign-in script, so Google receives your IP address and browser details, and may set its own cookies. If you choose to sign in with Google, Google shares your account ID with us. Google's use of this data is covered by Google's own privacy policy.
Buy Me a Coffee: the "Buy me a coffee" button image is loaded from Buy Me a Coffee's servers when it's shown, so they receive your IP address and browser details. If you choose to support us, you do that on their site, under their own privacy policy, and we never see your payment details.

We don't sell your data or share it with anyone else, unless the law requires it.

How long we keep it

We keep your account and scores while your account exists. A sign-in session is deleted when you sign out on that device. To delete your account and everything linked to it, email us and we'll do it within 30 days.

Your rights

You can ask to see the data we hold about you, correct it, delete it, receive a copy of it, or object to how we use it. Email fewestshots@gmail.com. If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office (ico.org.uk), or to the data protection authority where you live.

Children

Fewest Shots isn't intended for children under 13, and we don't knowingly collect their data. If you think a child has created an account, contact us and we'll delete it.

Changes

If we change this notice, we'll update the date at the top. Significant changes will also appear on What's new.

Back to the table