Privacy policy
Updated: 2026-10-24
Who operates Morphi
Morphi is operated by Ali Gohar.
For privacy questions, account-data requests, or a concern about a child’s information, contact cngohar@gmail.com
About this policy
Morphi offers puzzle games that you can play as a guest without a Google account. The account features described here are being prepared for a later release. When available, signing in lets you save completed rounds across devices and take part in ranked leaderboards.
Information we handle
If you choose Google sign-in, we receive basic identity information from Google. This can include your Google account identifier, name, email address, email-verification status, and profile image. Authentication records also include provider tokens used for sign-in. Morphi does not receive your Google password.
An account has a separate public player name. For completed rounds you save, we store the game type, replay/version information, puzzle seed, moves, result, and timing information. These records support your history, personal bests, and server-checked ranked results.
We handle session and connection information to maintain sign-in and protect the service. This can include IP addresses, browser information, request times, and error records. Ranked-start limits use a keyed hash of the connection address. Moderation records can include an internal account or result reference, the action taken, and its reason.
If you contact us, we receive your email address and the information in your message to review and respond to your request. Please avoid sending unnecessary sensitive information.
How we use information
We use this information to sign you in, keep your account and saved rounds available, check ranked moves and scores, display leaderboards, respond to requests, investigate errors, and prevent abuse.
Google access is limited to basic identity permissions: openid, email, and profile. Morphi does not request access to Gmail, Drive, Calendar, or contacts. We use Google account information for authentication and account management, not advertising, and we do not sell Google user data.
What other players can see
Leaderboards show your chosen player name, eligible ranked scores, and position in the selected game group. Your Google email, Google profile name, authentication records, and private round history are not displayed on the leaderboard. Avoid putting personal information in your public player name.
Cookies and information on your device
Morphi uses cookies needed for sign-in, session security, and the Google return flow. Blocking these cookies can prevent account features from working. Guest games do not require signing in.
Your browser stores settings such as sound and local best scores. When account features are available, it also keeps newly completed rounds waiting to be saved. A pending round records its moves, timing, puzzle information, and an account-scope identifier when it belongs to a signed-in account. Device storage can be cleared by you or your browser.
New guest rounds are sent to an account only when you choose to save them after signing in. They remain unranked. Old browser best-score numbers are not uploaded as verified ranked results. Clearing device data can remove unsaved rounds; it does not delete data already saved to your account.
Service providers and sharing
The public service uses Cloudflare for hosting, network delivery, security, and account/game storage. Google processes the sign-in you choose to start and provides the Gmail mailbox used for privacy requests. These providers process information needed to supply their services and can operate in countries other than your own. Authorized operators can access records needed to maintain the service and review abuse.
Morphi does not currently load Google Analytics, advertising scripts, or marketing cookies. Cloudflare Web Analytics is described below. Google’s own sign-in pages follow Google’s privacy practices. If Morphi changes its data use, this policy and any required choices will be updated before those changes are enabled.
Website analytics
Morphi uses Cloudflare Web Analytics to understand site visits and page performance. Cloudflare’s automatic setup adds an analytics script to delivered pages. Reports can include page views, referring sites, country, device and browser categories, and page-loading measurements. We do not send Google account details, puzzle seeds, moves, or saved round history as custom analytics events.
Cloudflare processes these measurements under its service settings and policies. Its separate analytics reports are not automatically erased by deleting a Morphi account. Hosting and connection information is still processed as described above. This service is separate from Google Analytics.
Retention and deletion
We keep account information and saved rounds while the account exists. Deleting your account removes its linked sign-in records, sessions, public player name, saved history, and ranked entries from Morphi’s active account database.
Sign-in sessions are configured to expire after seven days and can be renewed during use. Signing out ends the current session; it does not delete your account or saved history.
Separate security, rate-limit, moderation, and request records can remain after account deletion where needed for security, resolving requests, or legal obligations. These records do not currently have a universal automatic deletion deadline. The operator reviews their continued need when handling requests. Provider-managed logs and backup recovery copies follow the provider’s applicable settings and policies; deleting an account does not immediately erase those separate copies.
Your choices
You can keep playing as a guest, change your public player name, sign out, or delete your account from Your account. You may be asked to sign in again before deletion. Contact the operator about access, correction, or deletion requests that the account controls do not cover. We may need to verify your identity or authority before acting and will explain the outcome or any applicable limits. Do not email passwords, sign-in codes, or unnecessary identity documents.
You can clear Morphi’s cookies and site storage in your browser. This signs you out and can remove local settings, local bests, and unsaved rounds. On a shared device, sign out when you finish and consider clearing local data.
You can also revoke Morphi’s access through your Google account connections. Revoking Google access and deleting a Morphi account are separate actions; revocation does not itself erase previously saved Morphi records.
Changes to this policy
We will update this page and its updated date when Morphi’s information practices change. Material changes to Google data access or other processing will be explained and any required permission obtained before the new use begins.
Children and families
Morphi is a general-audience puzzle site. Its content, design, and marketing are not specifically directed at children.
Guest play is available without registration. We do not ask guest players for their age or independently verify their age. Guest access still involves the connection and service-provider information described in this policy.
Morphi does not offer a child-account or parental-consent registration service. Google sign-in does not establish a player’s age. If you are a parent or guardian and believe your child has provided personal information, contact the operator listed above. We review the report, verify what is reasonably needed to identify the information and the requester’s authority, and take appropriate action under applicable law, including restricting use or deleting information where required.