Privacy

Short version: we store as little as a game with a friend needs, and we do not sell anything about you.

Playing without an account

You can play without signing up. Your browser keeps a random player token so you return to your seat after a reload. Game rooms live on our servers for one day after the last move and are then deleted. We keep anonymous counts of rooms created, friends joined and games finished to see whether the game is working.

With an account

If you sign up we store your email address, a hashed password (never the password itself) or the identifier Google gives us, your game statistics and the badges you earn. Signing in with Google shares your email address and name with us; we ask for nothing else.

We send email only to confirm your address and to reset your password. No newsletters.

Cookies and analytics

One cookie keeps you signed in. We also use Google Analytics to learn which games people enjoy and where they give up; it sets its own cookies and shows us anonymous, aggregated statistics. No advertising cookies. If you are in the European Economic Area, the United Kingdom or Switzerland, analytics stays off until you allow it in the bar at the bottom of the page.

Where it lives

Play XO runs on Cloudflare. Email is sent through Amazon Web Services. Both process data on our behalf only.

Your choices

You can delete your account, statistics and badges at any time from your account page. Questions: hello@playxo.com.

Last updated 29 August 2026.