Privacy
Last updated:
This page says what Choc.co keeps about you, where, and how to get rid of it. It describes the game and website as they are today. It will change before purchases or ads are added, and the date above will change with it.
Playing without signing in
You can play with no account. Then your progress stays in your browser, on your device, and goes nowhere else. The game and wiki store these small items in your browser's local storage:
- Your save: your factory, robots, chocolates, beans, foil, artifacts, ships, choices such as the theme, how long you have played and when you last played. The game needs it to carry on where you left off and to work out what was made while you were away.
- Your sound volumes, the size you chose for the build button, and a note that you have seen the story intro, so it does not play again.
- On the wiki, whether you switched on Show everything.
- If you have signed in on this device: a note that you are signed in, a note while a sign-in is under way, and the id of the account this device last saved to.
- If a promo code has turned on admin mode: a note that admin mode is on for this device.
- In the iPhone app only: a copy of the sign-in cookies (Clerk's, see below), kept so you stay signed in after closing the app. Signing out deletes it.
None of this is sent to us or anyone else unless you sign in.
Signing in
Signing in is optional. It keeps your progress online so you can carry on from another device. You can sign in with email or with a Google, Apple or Discord account.
Two outside services handle it:
- Clerk runs the sign-in. It receives the email address you sign in with. If you use Google, Apple or Discord, it receives what that service passes on, such as your name and email address. Clerk sets its own cookies in your browser to remember that you are signed in. The game loads Clerk's code only when you sign in, or if you were signed in before. To keep out automated sign-ups, Clerk checks your browser and device when you create an account, and a sign-up that looks automated or comes through a VPN, Tor or a proxy gets a short "are you human" check from Cloudflare. After failed sign-ins Clerk may lock an account for a while, and it may ask for a second step when you sign in with a password on a new device. The game uses your email address or name only to show you who is signed in. It does not put either in your save.
- Neon holds the online save in a database hosted on Amazon Web Services in Germany (Frankfurt). Each save is one row with three fields: your Clerk account id, your save (the same progress as above), and when it was last saved. The database allows each signed-in player to read and change only their own row. Your email address is not stored in that row.
While you are signed in, the game saves online about once a minute and whenever you leave or hide the page. If you choose Google, Apple or Discord, you also go to that service's own sign-in page, and its privacy rules apply there.
If you enter a promo code, the code and your account id go to the same database, which records that your account used the code and when.
Ads, analytics and trackers
The site and the game show no ads and set no advertising or analytics cookies. Every page, picture, sound and font they use is served from playchocco.tech. They contain no analytics or tracking scripts, no outside fonts and no social media buttons. The only code from elsewhere is Clerk's sign-in code, which is fetched only when you sign in or were signed in before, as described above.
The site is served by Cloudflare. As with any web host, Cloudflare sees the internet address of whoever asks for a page.
Deleting what is kept
- Your save in this browser. Open Settings in the game and choose Delete save and start again. Clearing this site's data in your browser settings removes everything listed above, including the notes about signing in.
- Signing out. Settings has a Sign out button. It saves once more, signs you out, and keeps your progress on the device.
- Your online save. If you are signed in when you delete your save, the new empty save replaces the online one the next time the game saves online, which it does about once a minute while it is open.
- Your account and online save. Settings, when you are signed in, has Delete account. After you confirm, it deletes your online save and your promo-code records, then your account with Clerk, and signs you out. Your Apple sign-in access is revoked too; if Apple refuses, the game tells you how to remove Choc.co in your Apple account settings. The progress on this device stays; use Delete save and start again to remove that too. If you can no longer sign in, write to [email protected] from the email address on your account and we will delete your account and your online save.
Changes
If what the game keeps changes, this page changes first, and the date at the top shows when.