Simple rules, clear support.
Privacy, terms and support for TNT Sapper / TNT Sweeper and Greedy Worm. Updated 17 October 2026.
Privacy
This policy covers TNT Sapper (also titled TNT Sweeper), Greedy Worm and the Analog Reboot website. Provider and contact: Liam James Gray / Analog Reboot, support@analogreboot.uk.
TNT Sapper / TNT Sweeper · Greedy Worm · Website · Terms · Support
TNT Sapper / TNT Sweeper
TNT Sapper does not require a player account, payment, advertising profile or email address to play.
The current release does not include gameplay analytics or player statistics. Analog Reboot does not intentionally collect names, chat content, exact location, advertising identifiers or device fingerprints through TNT Sapper.
TNT Sapper and the Analog Reboot website use Cloudflare infrastructure. To deliver, secure and protect the service, Cloudflare may process technical request information such as IP addresses, request timestamps, browser or user-agent information, and security or abuse-prevention events. Analog Reboot does not use this infrastructure information to build gameplay profiles or advertising profiles, and does not maintain a separate gameplay-analytics copy of it.
Analog Reboot does not retain a separate copy of Cloudflare technical or security logs. If technical log information is exported or retained by Analog Reboot for troubleshooting, security or abuse investigation, it is deleted within 30 days after the issue is resolved unless a longer period is required by law or necessary to investigate an ongoing security incident.
If you contact Analog Reboot for support, we receive the email address and information you choose to include in your message. We use that information only to respond to the request, investigate the reported issue, and provide support. Support correspondence is normally retained for up to 12 months after the issue is resolved, unless a longer period is reasonably necessary for security, legal or abuse-prevention reasons.
TNT Sapper is accessed through ChatGPT. OpenAI may separately process information in accordance with its own terms and privacy policies.
You can choose not to contact support and still play TNT Sapper. If you have contacted us and want us to delete support correspondence we still hold, or you have a privacy question, email support@analogreboot.uk. We will respond to reasonable requests subject to any information we must retain for legal, security or abuse-prevention reasons.
If TNT Sapper's data practices change in a future release, this policy will be updated before those changes are made public.
Greedy Worm
Analog Reboot operates Greedy Worm, a casual game with a shared apple leaderboard. You do not need a login, email address or payment to play. This page covers the game and its leaderboard. OpenAI and Cloudflare also process information under their own policies.
Your browser identity and preferences
The game creates an unpredictable private player credential and stores it in your browser's local storage. It identifies your player for ranked runs and scores. The server stores a hash of that credential, rather than the credential itself. The credential is sent to the game's own API in an authorization header, and is not included in public leaderboard responses or the MCP launch tool's results.
The browser also stores theme, sound and grid preferences. Browser storage is specific to an origin and may be partitioned inside ChatGPT. A different browser, device, website origin, or cleared storage can create a new player. There is no account-recovery or cross-device identity service in this version. Clearing browser storage does not delete existing server records.
Generated player labels and public scores
Each player has a fixed generated label in the form PortalWorm followed by nine digits. The server derives it from a cryptographic hash of your private player identifier, and it stays the same across the daily and all-time leaderboards. Labels cannot be chosen or edited. Your own row appears as “You” in your browser; other players see your generated label. We store the safe generated label for new players and retain player creation times. Existing records may still contain a previously chosen or generated display name and last successful name-change time as legacy data. The current API and leaderboard do not expose those stored legacy names. Existing player records and scores are preserved.
When a ranked run finishes, the game automatically submits it for verification. We retain the run ID, game ID, apple count, active duration, submission time, terminal outcome, verification flag, rules version and a replay digest, linked to your server-side player identifier. The public leaderboard API returns the generated label, rank, apples, duration, submission time and a run ID. Your private player identifier is not shown. Historical entries use the same fixed generated label.
Replay verification and abuse limits
The server issues a random run ID, seed and supported rules version for ranked play. A finished run sends direction events, frame timing and pause/reset events so the server can replay it, check the apple count and active time, and confirm a legal crash or win. The complete replay is processed during verification; the application stores its digest rather than the complete replay payload. Browser-pending replays are held in memory for retries while the tab remains open.
Issued-run records contain the player link, seed, rules version, issue time and expiry time. Tickets expire after seven days. We also store counters keyed by hashed IP address or player identifier to limit identity creation, run issuance and score submissions. The application does not store raw IP addresses in its leaderboard database. Verification establishes validity under the game rules; it does not establish that a human played the run.
Infrastructure and the ChatGPT launch tool
Cloudflare hosts the game, API and database. To deliver and secure the service it may process IP addresses, request timestamps, browser information and security events. The game has no advertising profiles, trackers or separate gameplay-analytics service. Application code does not intentionally log private credentials or complete replay payloads.
The MCP launch tool takes no arguments and returns public game-launch information. It cannot read your player credential, operate the worm or submit scores. The embedded page communicates layout height to its parent for sizing; player credentials and replay data are not sent through that bridge. OpenAI separately processes your ChatGPT conversations and plugin use under its own policies.
Purpose, retention and your choices
We use these records to provide persistent scores, generated public labels, replay verification and abuse protection. Player records and historical scores are kept while needed for the leaderboard. Run and rate-limit records may remain until maintenance removes them; ticket expiry does not itself delete their database records. This version does not automatically erase inactive players.
For access, correction or deletion requests, contact support@analogreboot.uk. We may need proportionate information to locate the records and verify the request. Include the approximate run date and time, apple score and run ID if available, but never email your private browser credential. Some information may need to be retained for legal, security or abuse-prevention reasons.
If you contact support, we receive your email address and the information you include. We use it to respond and investigate. Support correspondence is normally retained for up to 12 months after resolution, unless a longer period is reasonably necessary for legal, security or abuse-prevention reasons. If technical logs are exported for troubleshooting, they are normally deleted within 30 days after the issue is resolved, subject to the same exceptions.
We will update this page before making material changes to the game's data practices public.
Analog Reboot website
The website uses Cloudflare hosting and has Cloudflare Web Analytics enabled for site-visit and page-performance information. These website metrics are separate from Greedy Worm's player and leaderboard records. See Cloudflare Web Analytics for information about that service.
Cloudflare may process technical requests and security events to deliver and protect the website. Analog Reboot does not use those records to build advertising profiles. If technical logs are exported for troubleshooting, security or abuse investigation, the existing retention period is 30 days after the issue is resolved, unless a longer period is required by law or necessary for an ongoing security incident.
Terms
TNT Sapper / TNT Sweeper
TNT Sapper is provided as a casual entertainment game. Use of the game is also subject to the terms and policies of the platform through which it is accessed.
The game is provided on an "as available" basis. Analog Reboot may update, fix, suspend or discontinue a release where necessary for compatibility, safety, reliability or platform requirements.
TNT Sapper is an original implementation of a familiar grid-deduction mechanic and does not claim affiliation with Microsoft Minesweeper or any other third-party game.
Greedy Worm
Greedy Worm is provided by Analog Reboot for casual entertainment on an as-available basis. There are no payments, cash prizes, gambling or real-world currency in this release. Use is also subject to the terms and policies of the platform through which you access it.
Do not impersonate others, publish sensitive personal information, interfere with the service, or submit fabricated leaderboard results. Scores must pass the supported replay verifier. A verified score confirms a legal replay under those rules and does not certify human authorship.
Leaderboard availability, rankings and retained records are not guaranteed. We may correct invalid entries, address abuse, or update, suspend or discontinue the game where needed for compatibility, safety, reliability or platform requirements. Your statutory rights are unaffected.
The game is an original implementation of familiar snake/worm mechanics. It does not claim affiliation with the creator of any reference game, OpenAI or Cloudflare. Third-party artwork remains subject to its creator's rights.
Support
For support, bug reports or privacy requests for either game, contact support@analogreboot.uk.
Please include the game name, device/browser and a short description. For Greedy Worm leaderboard issues, include the approximate run date and time, apple score and run ID if available. Please do not send passwords or your private browser player credential.
We use support correspondence to respond and investigate. It is normally retained for up to 12 months after resolution, unless a longer period is reasonably necessary for security, legal or abuse-prevention reasons. Contact the same address for access, correction or deletion requests; reasonable verification may be needed and legal/security retention may apply.
For a pending Greedy Worm score, keep the game tab open and reopen Scores to retry. A run started before a ranked ticket was ready is practice. Browser storage is specific to a device, browser and origin; clearing it does not delete server-side scores.
Greedy Worm credits
Game and worm artwork: Analog Reboot. In-game apple artwork: GameSupplyGuy, Fruits and Vegetables, used under the creator's permission to use these assets in games.