Push Crate is a two-player maze strategy game on a fixed 9×9 board.
Reach one of the two black star tiles, or your opponent's home tile, to win.
Each turn you either move one step, or place a crate — never both.
| # | Player | Rating | W / L |
|---|
Reach a black star tile, or your opponent's home tile.
First one there wins.
Each turn, either move one step, or place a crate — not both.
Push a crate by walking into it, if the space behind it is open.
Jump over your opponent if they're right next to you.
These Terms govern your use of Push Crate (the "Service"), operated by Team Push Crate, a small independent team based in the Republic of Korea ("we", "us"). By using the Service you agree to these Terms. If you do not agree, please do not use the Service.
You agree not to:
Questions, complaints or appeals: pushcrate.game@gmail.com
We take your privacy seriously and collect only the minimum information needed to run the Service.
| Operator | Team Push Crate |
|---|---|
| Data protection contact | Team Push Crate (operations) |
| Contact | pushcrate.game@gmail.com |
2.1 Playing as a Guest — we collect nothing. If you play Casual matches
without signing in, we store no personal data about you at all. The temporary name shown to your
opponent (for example Guest123456) is generated for that session and never saved.
2.2 If you create an account
| Data | Required? | Purpose |
|---|---|---|
| Username | Required | Signing in |
| Password | Required | Authentication. Never stored in readable form — only a salted one-way hash. |
| Optional | Password reset only | |
| Nickname | Auto-generated, editable | Shown to other players |
2.3 Created automatically as you play: match records (result, reason, rating change, timestamp, opponent identifier); statistics (wins, losses, rating, streaks); replays (your five most recent matches only); session tokens.
2.4 IP addresses — for security only
| Where | Why | Kept for |
|---|---|---|
| Failed sign-in log | Blocking brute-force attacks | 7 days, then deleted automatically |
| Administrator sessions | Controlling admin access | Until session expiry (max 8 hours) |
| Administrator action log | Accountability | Cannot be deleted — see 5.4 |
2.5 What we do not collect: real names, national ID numbers, phone numbers, postal addresses, payment or financial data, location data, biometric data, advertising identifiers, behavioural tracking data.
| Activity | Legal basis | Why |
|---|---|---|
| Accounts and sign-in | Contract 6(1)(b) | The Service cannot work without it |
| Gameplay, stats, rankings | Contract | This is the service you asked for |
| Replays | Contract | A feature you use |
| Email & reset emails | Consent 6(1)(a) | Optional; withdrawable at any time |
| Failed sign-in log (IP) | Legitimate interests 6(1)(f) | Preventing account takeover |
| Administrator action log | Legitimate interests | Accountability, dispute resolution |
| Anti-cheat and abuse handling | Legitimate interests | Keeping the game fair |
Balancing test. We consider these uses not to override your rights: we collect only what security requires, delete failed sign-in records after 7 days, and never use any of it for marketing or profiling. You may object to processing based on legitimate interests at any time.
We do not use your data for advertising or marketing, and we do not profile users or make automated decisions about them.
| Data | Kept for |
|---|---|
| Account details | Until you delete your account |
| Statistics and rating | Until you delete your account |
| Sign-in sessions | 30 days |
| Password reset tokens | 30 minutes |
| Failed sign-in records (incl. IP) | 7 days |
| Replays | Your five most recent matches |
| Detailed match records | Older records removed during routine maintenance |
| Administrator action log | Indefinitely — see 5.4 |
5.2 When you delete your account
| Data | What we do |
|---|---|
| Username, email, password | Deleted permanently |
| Statistics and rating | Deleted permanently |
| Sessions | Deleted permanently |
| Replays | Deleted permanently |
| Match records | Anonymised and kept |
| Administrator action log | Kept |
Why match records are anonymised rather than erased: every match involves two people. Deleting the record outright would destroy your opponent's history as well. Removing the link to your account means the record can no longer identify you, so we can honour your erasure request without harming someone else.
5.3 Backups. Data is backed up regularly. Deleted data may persist in backups briefly until those backups rotate out, after which it is permanently gone.
5.4 What remains after deletion. Records of administrative actions (suspensions, rating corrections and similar) are stored in a form that cannot technically be modified or deleted, to prevent tampering. We keep them on the basis of legitimate interests. They may include the numeric identifier of the account concerned, but directly identifying details such as username and email are deleted with your account.
We do not sell your personal information, and we do not share it with third parties for their own purposes. We use these providers to operate the Service:
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Cloudzy | Servers and storage | All stored data | United States |
| Google LLC (Gmail SMTP) | Password reset emails | Email address | United States |
| Google LLC (Sign-in) | Social sign-in (if enabled) | Email, account identifier | United States |
International transfers. Our servers and some providers may sit outside your country. Where personal data of EEA or UK residents is transferred outside those areas, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (GDPR Art. 46).
7.1 Everyone. See your data (profile screen shows account details, statistics and match history) · correct it (change nickname or password) · delete it (profile → Delete Account; this cannot be undone) · ask us anything at pushcrate.game@gmail.com.
7.2 EEA and UK residents (GDPR)
We respond within one month. Complex requests may take up to two additional months; we will tell you if so.
7.3 California residents (CCPA / CPRA)
We are a small independent team and may fall below the thresholds that make the CCPA mandatory. We extend these rights to California residents regardless.
| Category | Collected? | Specifics |
|---|---|---|
| Identifiers | Yes | Username, email (optional), IP address |
| Commercial information | No | — |
| Internet activity | Limited | Gameplay records, sign-in attempts |
| Geolocation data | No | — |
| Biometric information | No | — |
| Sensitive personal information | No | — |
| Inferences / profiles | No | We do not profile users |
Sources: information you enter, and information generated automatically as you play. Business purpose: operating the Service, security and support.
Write to pushcrate.game@gmail.com. We respond within 45 days (extendable by a further 45 days, with notice).
If a breach occurs we will notify the relevant supervisory authority within 72 hours of becoming aware of it, and inform affected users without undue delay where the breach is likely to result in a high risk to their rights and freedoms (GDPR Arts. 33 and 34).
We announce changes in the Service at least 7 days before they take effect — 30 days for significant changes. Where you have given us an email address, we may also notify you by email.
Privacy questions and requests: pushcrate.game@gmail.com
Republic of Korea: you may report concerns to the Personal Information Protection Commission (privacy.go.kr) or the Privacy Infringement Report Centre (privacy.kisa.or.kr, dial 118).
EEA / UK: you may lodge a complaint with your national data protection authority.
Welcome back to Push Crate!