Privacy Policy
Last updated: May 9, 2026
Here's the rundown of what we collect and why, when we access your information, and your rights.
In this policy, we lay out: what data we collect and why; how your data is handled; and your rights with respect to your data. We promise we never sell your data: never have, never will.
This policy is split into sections:
- What we collect and why
- When we access or disclose your information
- Your rights with respect to your information
- How we secure your data
- Data retention
- Location of site and data
- Changes and questions
This policy applies to our handling of information about visitors to Squirrelly Road (squirrellyroad.com), a free browser game published by Granite HQ, LLC. Squirrelly Road requires no account or registration — you simply play. We refer to you as "you" throughout this policy.
What we collect and why
Our guiding principle is to collect only what we need. Here's what that means in practice:
Website interactions and analytics
We collect information about your browsing and gameplay activity for analytics purposes such as understanding how players discover and interact with the game. This includes your browser and operating system versions, your IP address, which pages you visited and how long they took to load, which website referred you to us, and in-game events such as rounds played and scores. We use PostHog to collect this data. Session recordings — including screen captures of gameplay — may also be collected for a sample of visits to help us identify usability issues. You can learn more about PostHog's data practices at posthog.com/privacy.
Local storage
Squirrelly Road stores a small amount of data in your browser's local storage to remember your high score and game preferences between sessions. This data never leaves your device and is not transmitted to our servers.
General geolocation data
We log the IP address associated with visits to Squirrelly Road for security and fraud-prevention purposes, and as part of the analytics data described above. We do not collect precise location data.
Voluntary correspondence
When you email Granite HQ, LLC with a question or to ask for help, we keep that correspondence, including your email address, so that we have a history of past correspondence to reference if you reach out in the future. We also store information you may volunteer, for example, written responses to feedback surveys.
Cookies
We use persistent first-party cookies and some third-party cookies (via PostHog) to store certain preferences and support analytics. A cookie is a piece of text stored by your browser. It may help remember site preferences and collect information such as your browser type, operating system, web pages visited, and duration of visit. You can adjust cookie retention settings and accept or block individual cookies in your browser settings, although some aspects of the service may not function properly if you turn cookies off.
When we access or disclose your information
To operate and improve the game. We use third-party subprocessors (including PostHog for analytics and Cloudflare for hosting) to run Squirrelly Road. These processors may receive data as part of operating the service.
Aggregated and de-identified data. We may aggregate and/or de-identify information collected through the service. We may use de-identified or aggregated data for any purpose, including analytics and improving the game.
When required under applicable law. Granite HQ, LLC is a U.S. company and all data infrastructure is located in the U.S.
- Our policy is to not respond to government requests for user data unless we are compelled by legal process or in limited circumstances in the event of an emergency request. However, if U.S. law enforcement authorities have the necessary warrant, criminal subpoena, or court order requiring us to disclose data, we must comply. Likewise, we will only respond to requests from government authorities outside the U.S. if compelled by the U.S. government through procedures outlined in a mutual legal assistance treaty or agreement. It is Granite HQ, LLC's policy to notify affected users before we disclose data unless we are legally prohibited from doing so, and except in some emergency cases.
- If a legal authority requires information from us, we will disclose only the minimum information we are legally required to provide.
Finally, if Granite HQ, LLC is acquired by or merges with another company — we'll notify you well before any of your personal information is transferred or becomes subject to a different privacy policy.
Your rights with respect to your information
At Granite HQ, LLC, we strive to apply the same data rights to all users, regardless of their location. Some of these rights include:
- Right to Know. You have the right to know what personal information is collected, used, shared, or sold. We outline both the categories and specific bits of data we collect, as well as how they are used, in this privacy policy.
- Right of Access. This includes your right to access the personal information we gather about you, and your right to obtain information about the sharing, storage, security, and processing of that information.
- Right to Correction. You have the right to request correction of your personal information.
- Right to Erasure / "To Be Forgotten". This is your right to request, subject to certain limitations under applicable law, that your personal information be erased from our possession and, by extension, from all of our service providers.
- Right to Complain. You have the right to make a complaint regarding our handling of your personal information with the appropriate supervisory authority.
- Right to Restrict Processing. This is your right to request restriction of how and why your personal information is used or processed, including opting out of sale of your personal information. (Again: we never have and never will sell your personal data.)
- Right to Object. You have the right, in certain situations, to object to how or why your personal information is processed.
- Right to Non-Discrimination. We do not and will not treat you differently because you have exercised your data privacy rights.
If you have questions about exercising these rights or need assistance, please contact us at [email protected].
How we secure your data
All data is encrypted via SSL/TLS when transmitted from our servers to your browser. We go to great lengths to secure your data as best we can.
Data retention
We keep information for the time necessary for the purposes for which it is processed. The length of time for which we retain information depends on the purposes for which we collected and use it and your choices, after which time we may delete and/or aggregate it. We may also retain and use this information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
Location of site and data
Squirrelly Road is operated by Granite HQ, LLC in the United States. Our website, analytics, and hosting providers may process information in the United States and other locations where those providers operate.
Squirrelly Road is a small U.S.-operated browser game and is not specifically directed to residents of the European Union, United Kingdom, or other non-U.S. jurisdictions. We do not localize the service for those regions, advertise specifically to those regions, or offer region-specific services.
If you are located in a region with privacy rights, you may contact us at [email protected]. We will review and respond to requests under applicable law.
Changes and questions
We may update this policy as needed to comply with relevant regulations and reflect any new practices. Whenever we make a significant change to our policies, we will refresh the date at the top of this page and take any other appropriate steps to notify users.
Have any questions, comments, or concerns about this privacy policy, your data, or your rights with respect to your information? Please get in touch by emailing us at [email protected] and we'll be happy to try to answer them!
Adapted from the Basecamp open-source policies / CC BY 4.0