swooshplay

Privacy

Updated October 25, 2026.

Who is responsible

The data controller is Swooshplay. Contact: info@swooshplay.com.

No cookies, no ads

This site sets no cookies – unless you choose to sign in with email, see below – shows no ads and does no cross-site tracking. Fonts and images come from the site itself. Scripts do too, except for the optional sign-in, which loads from Clerk, jsDelivr and Google Firebase. We use GoatCounter for visitor statistics and Cloudflare for anonymous counting of popular content. Other outside services are the optional sign-in (Google or email) and the game servers for the multiplayer games, all described below.

Visitor statistics

We count visits with GoatCounter (goatcounter.com). When a page loads, your browser sends GoatCounter the page address, the page you came from, your screen width and, as with any web request, your IP address and browser information. According to GoatCounter's privacy policy, it stores only hourly or daily totals (page views, referrers, browser and system, screen width, country and language), does not store IP addresses or the full browser string, and uses no cookies or other storage in your browser. To avoid counting repeat visits twice, it keeps your IP address and browser information in memory for up to 8 hours. The data is stored with Hetzner in Finland and Germany, and GoatCounter is run from Ireland. We use the statistics only to see how many people visit and which pages they like.

Anonymous counting of popular content. To show the most popular items first, we count how often games, videos, stories, sleep sounds and news items are viewed, clicked and started. We only keep totals per item. We use no cookies and store no IP addresses or other personal data, and the counting is not linked to any account. To prevent abuse, a temporary check based on a hashed IP address is kept only in working memory for a few minutes and never stored. Counting runs on Cloudflare (EU/US). Questions: info@swooshplay.com.

Hosting

The site and the games are hosted by Surge (surge.sh). Like any web server, Surge receives your IP address and browser information when you visit. According to its privacy policy, Surge uses these logs to run the service and stop abuse, usually only for a short time. We don't receive or use these logs.

Saved in your browser

We use no cookies, except the sign-in cookies Clerk sets if you sign in with email. This is everything the site and the games may save in your browser. None of it is used for ads or tracking, and most of it never leaves your device:

  • Language choice (lang) in local storage on swooshplay.com – saved only if you switch language.
  • Sign-in – only if you sign in: Firebase keeps your sign-in in your browser's storage (IndexedDB), and a marker (sp_auth) in local storage notes that you are signed in. Both are removed when you sign out. If you answer yes to the question whether you are at least 13, the answer (sp_13) is saved in local storage so we don't ask again.
  • Email sign-in – only if you sign in with email: Clerk sets sign-in cookies (__session and __client_uat on swooshplay.com, __client on clerk.swooshplay.com) that are needed to keep you signed in, and a marker (sp_clerk) in local storage. The cookies are removed or expire when you sign out.
  • Game settings and top lists – in local storage on each game's own address, such as sound on/off, language and nickname.
  • Offline game files – the games may keep their own files on your device so they work without a connection.

You can delete it all at any time by clearing the site data for swooshplay.com and the game addresses in your browser.

Embedded games

All the games on /spela/ are made or adapted by us and live on their own Surge addresses: Candy Rain (godisregn.surge.sh), Hop Hop (hoppsan.surge.sh), Animal Merge (djurmerge.surge.sh), Raccoon Sort (tvattis-sorterar.surge.sh), Echo Heist (ekokupp.surge.sh), Animal 2048 (djur2048.surge.sh), Hop Animal (hoppdjur.surge.sh), A Dark Room 2 (morkrum.surge.sh), Animal Hex (djurhex.surge.sh), Animal Puzzles (djurpussel.surge.sh), Wiggle Worms (slingris.surge.sh), Sumo Blobs (sumoblobs.surge.sh), One-Bullet Western (enkula.surge.sh) and Awkward Co-op Delivery (glasbarare.surge.sh). No ads and no in-game purchases. They are shown in an embedded frame and save settings and top lists only in your browser. The single-player games (Candy Rain, Hop Hop, Animal Merge, Raccoon Sort, Echo Heist, Animal 2048, Hop Animal, A Dark Room 2, Animal Hex and Animal Puzzles) send nothing to us or anyone else. The multiplayer games (Wiggle Worms, Sumo Blobs, One-Bullet Western and Awkward Co-op Delivery) send the nickname you type and your moves in real time to the game's server on Cloudflare, so the other players can see you: slingris.swoosh-8bf.workers.dev, sumoblobs.swoosh-8bf.workers.dev, enkula.swoosh-8bf.workers.dev and glasbarare2.swoosh-8bf.workers.dev. Wiggle Worms also sends the face you pick. The servers keep this data only while the match is running. Like any web server, Cloudflare also receives your IP address (Cloudflare's privacy policy). Tip: use a made-up nickname, not your real name.

Comments

Under games and videos you can read comments without signing in. To write a comment you need to sign in with Google or email. We save the name you type (optional), the text, the page and the time with Cloudflare (kommentaris.swoosh-8bf.workers.dev). Every comment is checked by a grown-up before it shows up. A comment that is not approved is deleted automatically after 30 days. An approved comment stays until we remove it or you ask us to remove it. To stop spam we save a scrambled (hashed) code for your account with the comment, and count your comments for 10 minutes. We never save your email or your IP address.

Rules and reporting

Be kind: no bullying, threats, hate, swearing, ads, links or personal info. A filter stops some words and links, and a grown-up reads everything before it shows up. See a comment that breaks the rules or the law? Press Report next to it or email info@swooshplay.com. We read every report and remove comments that break the rules. A report is kept for at most 90 days. Point of contact for authorities and users under the EU Digital Services Act (DSA): info@swooshplay.com, in Swedish or English.

Children

The site is made for all ages. You don't need to sign in or give any personal info to play, watch or read comments. To write a comment you need to sign in. Sign-in (with Google or email) is for people aged 13 or older. If you are younger, ask a grown-up first. Parents can ask us at any time to delete anything their child has written.

Why we may process the data

  • Visitor statistics, hosting, game servers and spam protection: our legitimate interest in running a safe site that works (GDPR art. 6(1)(f)).
  • Comments, reports and sign-in: you choose to use them, and we need the data to give you the feature (art. 6(1)(b) and (f)).
  • Email: our legitimate interest in being able to reply to you (art. 6(1)(f)).

Who helps us

Surge (hosting), GoatCounter (visitor statistics), Cloudflare (comments, game servers and anonymous counting of popular content), Google Firebase (Google sign-in, only if you sign in), Clerk (email sign-in, only if you sign in with email) and Strato (email). Cloudflare, Google and Clerk may process data in the US. The transfer is protected by the EU standard contractual clauses, and Cloudflare and Google are also covered by the EU-US Data Privacy Framework. We never sell data and don't share it with anyone else.

Copyright and licenses

The games, videos and texts are made by Swooshplay. All videos are AI-generated and labelled as such on their page. The Fredoka font is used under the SIL Open Font License 1.1. Sign-in uses the Firebase JavaScript SDK from Google under the Apache License 2.0. Animal 2048 is based on the game 2048 by Gabriele Cirulli (© 2014, MIT License). The game engine in Hop Animal is based on t-rex-runner by wayou (© 2022), which is based on code © 2014 The Chromium Authors (BSD 3-Clause License). A Dark Room 2 is a new take on A Dark Room by Michael Townsend, Amir Rajan and contributors (Doublespeak Games, Mozilla Public License 2.0), and the whole game's source code is in source.zip. Animal Hex is based on Hextris by Logan Engstrom, Garrett Finucane, Noah Moroze and Michael Yang (© 2014, GNU GPL version 3), and the complete source code is in source.zip. The puzzles in Animal Puzzles come from Simon Tatham's Portable Puzzle Collection (© 2004–2024 Simon Tatham and contributors, MIT License). The license texts are also under About in the games. The other games, and the graphics and sound in the games unless stated above, are our own.

Email

If you email us, we use your address and message only to reply, and delete them when they're no longer needed. Email to info@swooshplay.com is received by Strato (swooshplay.com).

Optional sign-in

You only need to sign in if you want to write a comment. Everything else on the site works without signing in. Sign-in is for people aged 13 or older. If you are younger, ask a grown-up first.

  • What data: If you sign in with Google, Google Firebase gets your name, email address, profile picture and a user ID. If you sign in with email, Clerk gets your email address and a user ID. When you write a comment, we save the name you choose (optional), the text, the page and the time, plus a scrambled (hashed) code worked out from your user ID. Your email address, your real user ID and your IP address are never saved with the comment.
  • Where it is stored: Your account is stored by Google Firebase or Clerk (both in the US; Firebase has servers in the EU and the US). Comments are stored on Cloudflare.
  • What we use it for: only so you can sign in and comment, and so we can check comments and stop spam and abuse. Never for ads.
  • Deleting: To have your account and your comments deleted, write to info@swooshplay.com.

Sign in with Google

You can choose to sign in with your Google account. You only need to sign in if you want to write a comment. If you sign in, Google sends your name, email address, profile picture and a user ID to Firebase. Your first name is suggested as the name shown with your comment, and you can change it. Sign-in is handled by Firebase Authentication from Google, with servers in the EU and the US (Firebase and privacy). We use this data only for signing in and for checking comments – never for ads. The Firebase scripts are loaded from Google (gstatic.com) only when you touch the sign-in button, and your sign-in is saved in your browser's storage until you sign out. To have your account and your comments deleted, write to info@swooshplay.com.

Sign in with email

You can also sign in with your email address instead of Google. We then send a one-time code to your email. Sign-in is handled by Clerk (Clerk, Inc., USA, Clerk's privacy policy) as our data processor. Clerk stores your email address, an account ID and sign-in times, plus IP address and browser information for security and to stop abuse. The data may be processed in the US, and the transfer is protected by the EU standard contractual clauses in Clerk's data processing agreement. Clerk's scripts are loaded from clerk.swooshplay.com and the language texts from jsDelivr only when you press the email sign-in button. We never store your email address with comments – with a comment we only save a scrambled (hashed) code for the account, so that we can stop abuse. To have your account and your comments deleted, write to info@swooshplay.com.

Your rights

You can ask what data we have about you, ask us to correct or delete it, restrict or object to how we use it, and get it in a common format. We reply within one month. Write to info@swooshplay.com. You can also complain to the Swedish Authority for Privacy Protection (IMY), imy.se.

← Back to home