THPARTS uses information to provide accounts, games, saved progress and player controls. Optional Google Analytics measures page visits only after you accept Analytics. The Google tag loads with optional storage denied and may send limited cookieless consent signals.
Creating and securing an account.
Registration stores a display name, email address, creation time and Argon2id password hash. The plain password is not stored. Session tokens are stored as hashes and expire after fourteen days.
The application records your declaration of UK residency and age 18+, your acceptance of the current Terms and the date. It requests neither identity documents nor a date of birth. Eligibility is self-declared. A chosen account-break end time is stored separately.
Keeping play in its proper place.
Account records include game identifiers, mode results, compatible unfinished rounds and achievements. Wonderworks saves are validated by replaying their legal moves. Automatic previews do not produce personal records.
Favourites, guest results and control preferences use browser storage. Signing in does not silently import earlier guest progress. Removing browser data does not remove server-held account saves.
Asking for a hand.
A support request stores its email, topic, message, reference and time, together with the account identifier if signed in. Send only information relevant to the request. Local support submissions are stored without email delivery.
The report-preparation tool formats text on your device. It does not submit that text. Choosing Copy writes the prepared text to your clipboard; submitting the support form is a separate action.
Essential operation.
Cookies maintain sessions, protect requests and remember eligibility. Their names and lifetimes are listed on Storage & cookies. Fonts and artwork are served by this application. No payment service or advertising network is connected. Optional Google Analytics measures page visits only with your consent; its tag loads with optional storage denied and may send limited cookieless consent signals.
The host may keep operational access logs with request paths, times, browser details and IP addresses. Short-lived hashed rate-limit keys help protect forms. Password hashing and access controls reduce risk without guaranteeing perfect security.
Your choices.
Account and game records remain while the account is active. Support information remains for handling and necessary follow-up. Routine account operations remove expired sessions and eligibility visits.
Use Contact to request access, correction or deletion. Account ownership may need to be checked. Clear this device only removes local site records. Email is not used for marketing, and personal information is not sold.
Updated 21 October 2026
Optional Google Analytics.
Google Analytics 4 is provided by Google. Its tag loads with optional storage denied and may send limited cookieless consent signals. Page-visit measurement and analytics cookies begin only after you accept analytics. The _ga and _ga_* cookies can last up to two years. Google may process information outside the UK, including in the United States. We send page paths without query strings or fragments and exclude recovery and account sign-in pages. Account details, passwords and game outcomes are not sent.
You can decline or withdraw consent at any time; this stops future page measurement.
Optional Microsoft Clarity.
After you accept analytics, Microsoft Clarity helps us understand public-page navigation through interaction recordings and heatmaps. Clarity is not loaded before your choice or after you decline. Account, recovery and game pages, and URLs containing query strings or fragments, are excluded. Page text is masked, and we do not send account identifiers to Clarity. Advertising storage remains denied.
Clarity uses optional analytics cookies. Microsoft may process information outside the UK, including in the United States. Read Microsoft's privacy statement. You can decline or withdraw analytics through Cookie preferences; withdrawal stops the recording and reloads the page.