Wreck the Web — Privacy policy
What WreckTheWeb is
WreckTheWeb is a browser extension that turns the web page you're looking at into a game you can smash up. Nothing is really damaged: the game draws over a picture of the page, and leaving the game puts the page back exactly as it was.
Single player: nothing leaves your computer
To play, the extension takes screenshots of the current tab and reads the page's layout (where elements are and what kind they are). This happens only on the tab where you start the game, only after you click the extension, and stays on your computer. Nothing is sent to us or anyone else.
The extension saves a few settings in your browser's own extension storage: whether sound is muted, whether you've seen the welcome card, your multiplayer nickname, colour and outfit, and your best Time Attack score per site. Best scores are stored under a scrambled key made from the site's address, so the stored data never spells out which sites you visited. You can clear all of it by removing the extension.
Multiplayer: what is sent, and why
Multiplayer rooms run on our room server (hosted by Cloudflare). While you are in a room, the extension sends:
| What | Why |
|---|---|
| Your nickname, colour and outfit | So other players can see who you are. |
| Your position, aim and weapon in the game; your shots and emotes; hits you take | So everyone sees the same game. |
| A random room code and a random reconnect token | To put you in the right room and let you back in if your connection drops. |
| Host only: a picture of the shared page (screenshots of it, top to bottom) and its layout (element positions and sizes, tag and class names, short CSS paths, and one-way hashes of element text — not the text itself) | So every player in the room plays on the same page. Joining players never visit the site themselves. |
The page picture shows whatever was on screen, including any text visible on it. Before a room is created, the extension asks the host to confirm sharing the page, and it refuses to host rooms on email, banking, health and government sites. Please don't host on a page that shows private information.
How long it's kept
Everything a room holds — the shared page, the players, the shots — is kept only in the room server's memory while the room is open, and is deleted when the last player has left (or been disconnected for 30 seconds). Nothing is written to a database. There are no accounts and no profiles.
Like any website, Cloudflare handles the connection itself and may process your IP address and basic request information to deliver it and protect the service, under Cloudflare's privacy policy. We don't use it to identify or track you.
What we don't do
- No analytics, no tracking, no ads, no cookies.
- We don't sell or share data with anyone, and don't use it for anything but running the game.
- We don't read pages in tabs where you haven't started the game.
- The extension doesn't load or run code from the internet.
Children
WreckTheWeb isn't directed at children under 13 and doesn't knowingly collect their personal information.
Changes and contact
If this policy changes, the new version will be posted here with a new date. Questions: contact us through the support email shown on the WreckTheWeb Chrome Web Store listing.