Privacy, in plain terms

Mini Golf is a free game with a Daily Nine and eight courses, by Dayplay Games, a brand of Winter Watermelon. It works without an account.

Your scores stay here

This browser stores your sound and motion settings, any round or practice in progress on each course, your best completed round per course, per-hole bests and practice bests, plus your Daily Nine record: the best and the number of rounds for each of the last 35 days and your day streak. It also stores whether you have seen the first-visit tutorial. The Daily Nine is the same for everyone because it is worked out from the date, not from anything about you; a shared scorecard link carries only that date or course and a fixed share label. Use “Abandon round” in the game menu to discard a round in progress; bests are not cleared by that. Scores saved on this device do not sync to other devices or other game sites by themselves; the one exception is the leaderboards below, and only if you pick a name.

Player names and leaderboards

When leaderboards are open, you can pick a player name to put your Daily Nine, course and hole scores on them. A password and account email are optional. A name is 3 to 16 letters, numbers, - or _, and is checked against reserved and rude words. Other players see only your name and your score.

Picking a name stores the name, the scores you send (which board, the score and when it was set) and a random device code on our servers, in Cloudflare D1; only a SHA-256 hash of the code is kept. Optional passwords are stored as salted PBKDF2 hashes, never plaintext. An optional account email is stored privately, not displayed on leaderboards. It is unverified, does not grant account access, and is separate from game-update subscriptions. Change or remove it at the player page. Password reset is not available. Your browser holds the code in one strictly necessary first-party cookie, set only after you pick a name and shared across Dayplay Games games so one name works in all of them. It is not used for analytics or advertising. We do not store your IP address with your scores; hosting and network providers still see it in their own logs. When you pick a name, the best scores already saved on this device are sent once. Scores come from your device, so we accept only values that are possible on that board and cannot promise every score is honest.

At dayplaygames.com/player you can add a password to log in on other devices, change or remove your account email, sign out, or delete your name and every score attached to it. Daily boards are kept for 14 days and weekly boards for up to three weeks. A name with no scores 30 days after creation is released.

How play counts work

When product analytics are allowed, we also use Google Analytics, based in the United States, to measure visits and named product actions. It uses first-party browser and session cookies, processes connection information such as IP addresses to provide the service, and receives fixed page routes, approved campaign labels and the referring site hostname. We do not send form contents, uploaded files, email addresses or private workspace addresses. Advertising signals and personalization are disabled. The same regional consent, browser privacy signals and turn-off control apply to both analytics services; turning analytics off stops Google collection and removes its cookies. Google analytics event data is retained for up to 14 months. Anonymous totals are not sent to Google.

Outside the EU/EEA, UK and Switzerland, product analytics (PostHog, based in the United States) are on by default to help us improve the game; use the button above to turn them off at any time. Global Privacy Control and Do Not Track are honored automatically and always keep analytics off with no prompt, even if you had allowed analytics on this browser before.

In the EU/EEA, UK and Switzerland, and wherever we cannot tell, we ask first with a small floating card on the game page. Without your permission we keep only anonymous daily totals, page visits and round starts, finishes and replays, all without a player ID, in Cloudflare D1 (EU jurisdiction), once this game is registered for them. Those totals carry no browser ID, IP address, user agent or referrer, are kept for up to 90 days, and are never sent to PostHog. “Turn off analytics” above stops those too.

If analytics are on, PostHog receives a random browser ID, session ID, which screen you opened (the course selection or a course, never a page address), fixed course and hole names and milestones: round or practice start, resume, hole sunk (stroke count grouped into ranges and whether it was under par), hole capped, round completed (score relative to par grouped into ranges), round abandoned and full-screen use. Events include an SDK session ID and approximate country from the service edge when available; otherwise country is explicitly unknown. Event IP is masked.

Only the fixed campaign labels for the Dayplay Games hub, the GitHub playtest, Dayplay Games Bluesky posts and shared scorecards are admitted. Original first-touch and current-tab labels stay separate. Coarse browser, operating-system and device types and an available referring site hostname help us understand discovery. We do not send aim angles, drag gestures, ball paths, key presses, arbitrary link parameters, referrer paths, typed text or raw error messages. There is no session recording (replay is opt-in only and not currently offered on this game), no device fingerprinting, no advertising and no sale of data. The purpose is product improvement only.

Hosting and network providers receive the connection information needed to serve requests, including your IP address in their own logs; that is separate from the controls above.

Change your choice

Use the button under “How play counts work” above. Turning analytics off immediately removes the stored measurement ID, attribution and activation record from this browser and stops anonymous daily totals; previously delivered events remain. Allowing analytics again starts with a new ID. Your scores are separate and stay intact either way.

If browser storage is blocked, choices and scores last only on the current page. Embedded play keeps no analytics at all.

Questions

Write to hello@dayplaygames.com with a privacy question. Please avoid sensitive information. Updated September 29, 2026.