You can play without creating an account. On your first visit, choose a nickname or skip to use a random player ID.
Your browser stores a random player ID and private guest credential, chosen nickname, game preferences and tutorial progress. The game sends your player ID, nickname, submitted scores and challenge activity to its Cloudflare backend.
Google sign-in verifies who you are and provides a consistent player identity across devices. The backend validates Google's ID token and uses a hashed account identifier. When you sign in, scores from your verified guest identity are merged into your Google player profile, keeping the best score in each mode. It stores your chosen nickname with that identity; it does not store your Google email address, name, profile photo or the ID token in the game database. The browser keeps the sign-in token in session storage until it expires or you sign out. Signing out starts a fresh guest identity.
Your submitted scores and nickname appear on the public leaderboard. If you do not choose a nickname, an abbreviated player ID is shown. Participants in a challenge can see player nicknames, readiness and scores. Scores are kept as personal bests; challenges expire after 24 hours and are removed when accessed after expiry.
The game uses Cloudflare Pages, Workers and D1 for hosting and data storage. Google Identity Services supplies the optional sign-in button and authentication. These providers may process network and security logs under their own privacy policies. Sum Tiles does not request access to your Gmail, Drive, contacts or calendar.
You can change or clear your nickname in the game, sign out of Google, or clear this site's browser storage. Clearing browser storage removes your local guest identity but does not remove scores already submitted to the server. For questions about stored game data, use the support address shown on the Google sign-in consent screen.