Privacy, in plain terms

Drift Dispatch is a river game from Dayplay Games, a brand of Winter Watermelon. It works without an account.

Your stamps stay here

This browser stores your most recent course, delivered-course stamps, fewest launches, whether you delivered the optional parcel, first-try and gentle-landing marks, your best launch count for each recent day’s daily run, your day streak, whether sound is on, and whether you have seen the first-visit tutorial. Trips in progress are not saved. Use “Reset delivery stamps” to clear those records. Stamps do not sync across devices or other game sites. A shared link contains only one fixed course name or the date of a daily run.

Optional leaderboards

Play anonymously, or choose one player name for the Dayplay Games leaderboards. A first-party device cookie remembers your name across our games. You can optionally add a password to log in elsewhere; only a salted password hash is stored, with an optional private account email. Password reset is not available. Completed results post only when you have a name and have not chosen anonymous play. An account email is optional, private, unverified, and separate from game-update subscriptions. Change or remove it at the player page. Delete your name and all scores at Manage your player. Daily scores are kept for 14 days and weekly scores for up to three weeks; names with no scores expire 30 days after creation. Scores are reported by the browser and are for casual competition, with no prizes.

How play counts work

When product analytics are allowed, we also use Google Analytics, based in the United States, to measure visits and named product actions. It uses first-party browser and session cookies, processes connection information such as IP addresses to provide the service, and receives fixed page routes, approved campaign labels and the referring site hostname. We do not send form contents, uploaded files, email addresses or private workspace addresses. Advertising signals and personalization are disabled. The same regional consent, browser privacy signals and turn-off control apply to both analytics services; turning analytics off stops Google collection and removes its cookies. Google analytics event data is retained for up to 14 months. Anonymous totals are not sent to Google.

Outside the EU/EEA, UK and Switzerland, product analytics (PostHog, based in the United States) are on by default to help us improve the game; use the button above to turn them off at any time. Global Privacy Control and Do Not Track are honored automatically and always keep analytics off with no prompt, even if you had allowed analytics on this browser before.

In the EU/EEA, UK and Switzerland, and wherever we cannot tell, we ask first with a small floating card on the game page. Without your permission we keep only anonymous daily totals — page visits, and for this game also course launches, deliveries and deliberate retries, all without a player ID — in Cloudflare D1 (EU jurisdiction). Those totals carry no browser ID, IP address, user agent or referrer, are kept for up to 90 days, and are never sent to PostHog. “Turn off analytics” above stops those too.

If analytics are on, PostHog receives a random browser ID, session ID, fixed course names and milestones: launch, delivery, deliberate retry, next-course choice, first delivery and completion of the whole observed route. Launch counts are grouped into ranges; the optional parcel is a yes/no flag. Events include an SDK session ID and approximate country from the service edge when available; otherwise country is explicitly unknown. Event IP is masked. Later intentional play can help us understand returns.

Only the Dayplay Games hub and GitHub playtest campaign labels are admitted. Original first-touch and current-tab labels stay separate. Coarse browser, operating-system and device types and an available referring site hostname help us understand discovery. A missing referrer is marked unavailable, not assumed to be a direct visit. We do not send aim angles, power settings, trajectories, key presses, arbitrary link parameters, referrer paths, typed text or raw error messages. There is no session recording (replay is opt-in only and not currently offered on this game), no device fingerprinting, no advertising and no sale of data. The purpose is product improvement only.

Hosting and network providers receive the connection information needed to serve requests, including your IP address in their own logs; that is separate from the controls above, which mask IP in analytics events and disable analytics geolocation. That does not mean provider security logs contain no connection information.

Change your choice

Use the button under “How play counts work” above. Turning analytics off immediately removes the stored measurement ID, attribution and activation record from this browser and stops anonymous daily totals; previously delivered events remain. It also stops PostHog right away in any other open tab of the game, and on your next visit here. Allowing analytics again starts with a new ID. Your delivery stamps are separate and stay intact either way.

If browser storage is blocked, choices and stamps last only on the current page. Embedded play keeps no analytics at all.

Questions

Write to hello@dayplaygames.com with a privacy question. Please avoid sensitive information. Updated September 26, 2026.