Brookmoon

Privacy Policy

Last updated: 1 November 2026

You can play our browser games without an account and without giving us anything. If you create an account, we keep your email address and your game progress, so that you can carry on from any device. That is all we use them for. If you choose to join a game's hall of fame, the name you pick, your country and your scores are shown to everyone. The site and the games show ads, and we use Google Analytics to see how they are used. Where the law requires it, we ask you before anything is stored on or read from your device for these, and you can change your answer at any time.

Who we are

Brookmoon is operated by Carian Ltd, 1004-(DM-08-0449), Aljiyad Business Center, Fahidi Heights, Al Hamriya, Dubai, United Arab Emirates (“we”, “us”). We run brookmoon.com and the browser games on it, and are responsible for the personal data described here. This policy covers that site and those games. For anything about this policy or your data, write to support@brookmoon.com.

If you just play

If you create an account

An account is optional. With one, we store:

We use this information only to provide accounts and saved progress and to keep the service secure. We do not sell it, and we do not use it for advertising.

Where European data protection law applies, we rely on our agreement with you to provide the account you asked for, and on our legitimate interest in keeping the service secure.

If you join a hall of fame

Some games have a hall of fame, a public list of the best players. You are not on it unless you join, which takes an account. If you join, we store and show to everyone who opens it:

So that scores cannot be made up, each one is checked before it counts. For that the game sends us the record of each game you finish, won or lost: the level, the research in play and the moves you made, such as where and when each tower was built (in Block Puzzle: the game's starting number or day, and where each piece was placed; in Solitaire: only the daily deals you win, with the day and each move you made; in Gem Match: only the daily levels you win, with the day and each swap you made). We play each game out again from its record and keep, with your account, the best score it gives on each level, or in Block Puzzle your best score in the classic game and in Bombs, and each day's best, or in Solitaire your fewest moves on each day's deal, or in Gem Match your best score on each day's daily level, and add what it held to your totals. So that a game counts only once, we keep a fingerprint of its record: a code worked out from it, from which the game cannot be rebuilt. A record waits on your device until you join; nothing is sent for players who have not.

Your email address is never shown, and other players cannot tell which account an entry belongs to. You can change the name and country, or leave, at any time on the game's hall of fame screen; leaving removes the entry at once, and so does deleting your account.

Ads

The ads in the games are chosen in an online auction run by Xandr, Microsoft's advertising exchange, each time one is shown. For that, your browser sends Xandr, and through it the advertisers taking part, your IP address, details of your device and browser, the page and the size of the space. The game sends nothing about your account, your progress or your scores.

Before anything is stored on or read from your device for advertising, a consent banner (FlexyConsent) asks you. With your consent, Xandr and the advertisers may use cookies and similar identifiers to choose ads that suit your interests, to limit how often you see the same ad and to measure them. Without it you still see ads, but they are not chosen with information stored on your device. You can change your choices at any time with “Privacy choices” in Tower Defence's Account menu, the Privacy button on Block Puzzle's, Solitaire's, Spider Solitaire's, FreeCell's, Gem Match's, 2048's, Mahjong's and Sudoku's home screens, or the “Privacy choices” link at the bottom of our web pages.

Our web pages may show ads served by Google AdSense.

Where European data protection law applies, advertising uses your data on the grounds you agree to in the consent banner, under the IAB Transparency and Consent Framework; some advertisers rely on their legitimate interest for some purposes, which you can object to there. Xandr, Google and the advertisers handle the data under their own privacy policies.

Analytics

We use Google Analytics to understand how our pages and games are used and to improve them. It records the pages visited and, in the games, when a level or game is started (and whether it was picked up where you left it) and how it ends: which level, what kind of game, the difficulty, whether it was won, and how far it went (in Tower Defence, the waves held off and the stars won; in every other game, the number of moves, and in Block Puzzle, Solitaire, Spider Solitaire, Gem Match and 2048 the score as well). With it go the usual details Google Analytics collects, such as your browser, device and approximate region. Nothing about your account, your progress or your hall-of-fame entry is sent to it. Where consent is required, Google Analytics stores cookies only after you accept in the consent banner; until then it may send cookieless signals as part of Google Consent Mode. You can also install Google's opt-out browser add-on.

What is stored on your device

The games keep your game progress and settings in your browser's local storage and, if you sign in, the token that keeps you signed in. The consent banner stores your choices about ads, so that it does not ask again. With your consent, Xandr, Google and advertisers may also store cookies or similar identifiers for the purposes you agreed to, and Google Analytics its own cookies; the consent banner lists them. Clearing your browser's data for this site removes what the games and the banner stored; if you are not signed in, that also removes your progress.

Who handles data for us

Supabase and the hosting provider work on our behalf.

Accounts, saved progress and hall-of-fame entries are stored in Germany. We run Brookmoon from the United Arab Emirates, and some of the companies above are based in the United States, so personal data may be accessed from, or transferred to, those countries. Where that happens it is protected by safeguards such as the European Commission's standard contractual clauses, and we handle it only as this policy describes.

How long we keep it

Account details and saved progress are kept for as long as you have the account. If you delete the account in the game they are deleted at once; if you ask us by email, within 30 days. A hall-of-fame entry is kept until you leave the hall of fame or delete the account; the checked scores, totals and fingerprints behind it are kept until you delete the account. Server logs are kept no longer than is needed for security and troubleshooting. Google Analytics keeps what it records for the retention period set in our account, at most 14 months.

Your choices and rights

Depending on where you live, you may also have the right to see the data we hold about you, to have it corrected or deleted, to receive a copy of it, to object to or restrict how we use it, and to complain to your data protection authority. Email us to use any of these rights.

Children

The games can be played without giving us any personal information. Accounts are not meant for children under 13, or under the age at which your country lets you agree to such services yourself. If you believe a child has created an account, tell us and we will delete it.

Security

Connections to the site are encrypted, and each account can read and change only its own saved progress and change only its own hall-of-fame entry. No system is perfectly secure, so we cannot promise absolute security.

Changes to this policy

If we change this policy we will post the new version here and change the date at the top.

Contact

Carian Ltd
1004-(DM-08-0449), Aljiyad Business Center, Fahidi Heights, Al Hamriya, Dubai, United Arab Emirates
support@brookmoon.com