Privacy Policy
Last updated: November 2, 2026
This is a translation; if there is any difference, the Spanish version prevails. At Pupito we want you to play with peace of mind. Here we tell you, with no fine print, what data the site uses, what for, and what you can do about it. When we say “Pupito” or “we”, we mean whoever makes and runs pupito.site.
Playing without an account
You can play without signing up. Your name, your avatar, your records, your stats and your guest Pupicoins are stored only in your browser, not on our server.
If you play online, the other players in the room see the name and avatar you chose.
If you create an account
We only ask for a username and a password. We don’t ask for your email, your real name, your phone number or your date of birth.
Your password is never stored as is: we store a hash (scrypt) that the password can’t be recovered from, not even by us.
With your account we store on the server: your username, your avatar and your color, your Pupicoins and what you buy in the Shop, your records and game stats, who you follow and who follows you, your account’s gifts and notifications, the date you created it and, if someone else invited you, who invited you.
So that nobody rewards themselves by inviting themselves, we store with your account a hash of a random identifier of your browser (at most the last 5 browsers).
Your public profile (pupito.site/u/your-username) shows your username, your avatar, your flag if you made it visible, your records, your collection, your online wins and who follows you. Your username can also appear on the leaderboard.
Your IP address
As on any website, the server sees your IP address when you connect. We use it for two things: to stop abuse (per-IP request limits, kept in memory and forgotten shortly after) and to guess your country so we can show its flag next to your name.
For the country we use a database that lives on our own server (DB-IP’s “IP to Country Lite”): your IP is not sent to any outside service. In your account we store only the country (for example “AR”), not the IP, and you can change it or hide the flag from your profile.
To fight mass account creation and cheating on invitation rewards, when you create your account and when you log in we store a hash of your connection (of your IP, or of its network if it’s IPv6), never the IP itself: at most the last 5, for 30 days. It’s used so that no more than 3 accounts a day are created from the same connection and so that an invitation between accounts on the same connection isn’t rewarded.
The server’s technical logs may keep the IP for a few days to fix bugs and defend against attacks.
Visit statistics
We count visits with our own system, without Google Analytics or any other third-party service, and without cookies.
Your browser stores an anonymous identifier that changes every day and the date of your first visit. The server only receives and stores daily counts: visits, whether it’s your first time or how many days since you last came, pages viewed, games started and finished, and the domain you came from (only the domain, not the page). The daily identifier is stored summarized with a hash and deleted after two days. It can’t be used to find out who you are.
Room chat
Messages in a room’s chat are kept only in the server’s memory while the room exists (the last 60) and disappear when it closes. We don’t store them in the database, unless someone reports a player: then we store the last 20 lines of that room’s chat with the report so we can review it.
Everyone in the room can see them: don’t share personal information. The most common swear words are covered with asterisks.
You can mute a player (only in your browser: it’s saved in its local storage) or report them from their card in the chat. Anyone who breaks the rules can be suspended for a few days or forever.
Cookies and local storage
Pupito doesn’t use cookies: not our own, not third-party, not for tracking and not for advertising.
It does use your browser’s local storage (localStorage) so the site works: your logged-in session (a session code; on the server we only store its hash, and it expires if you don’t use it for 180 days), your preferences (theme, sound, each game’s options), your guest progress and records, the room or match search in progress, the anonymous stats identifier and the random browser identifier.
You can delete it whenever you want from your browser settings; you’ll lose anything that isn’t saved to an account.
The site’s fonts are downloaded from Google Fonts: when requesting them, your browser connects to Google’s servers, which receive your IP as with any download. We don’t set any Google cookies.
Advertising
Pupito doesn’t show ads today.
If we show them in the future (for example with Google AdSense), those providers use their own cookies to show and measure ads. Before turning them on we’ll update this page to explain which cookies they use and why, and we’ll ask for your permission when the law requires it.
Who we share your data with
Nobody: we don’t sell or hand over your data, and there are no third-party trackers. The only things other people see are what’s public by design: your username, your avatar, your flag, your profile, your place on the leaderboard and what you write in a room’s chat.
Children
Pupito is for all ages, but if you’re under 13 you need permission from your mother, your father or your guardian to create an account and use the chat.
Your data and how to delete your account
You can ask us to see, correct or delete your account’s data by writing to contacto@pupito.site. Tell us your username; since we don’t have your email, to check that the account is yours we may ask you to do something from it (for example, set a specific avatar).
Deleting your account removes your username, your Pupicoins, your purchases, your records, your followers and your notifications, and it can’t be undone. We do it within 30 days.
What your browser stores, you delete yourself from its settings.
Changes to this policy
If we change anything, we’ll update the date on this page; if the change is important, we’ll announce it on the site.