No accounts, no cookies, no advertising, and nothing that identifies you.
Game progress is stored in your browser's local storage, on your own device. It is never uploaded. Clearing your browser data deletes it, so use Export save code if you want to keep a copy or move to another device.
The game reports a small number of anonymous events so I can see how many people reach each stage and whether anyone comes back the next day. An event contains what happened (for example "first mutation"), how many days since this browser first opened the game, a broad day-range cohort, which visit number this is, and how many times the specimen has gone extinct. Mutation and extinction events can also include the mutation number or genome recovered. Cloudflare adds a two-letter country code so regional totals can be compared.
There is no identifier of any kind. No cookie, no random ID, no fingerprint, no full IP address in the event, and nothing that links one visit to another on the server. Cloudflare sees your IP address transiently in order to serve the page and derive the country code, as any web host must, but the game does not write that address to its analytics dataset.
You can switch this off at any time in Records, at the bottom of the game. Nothing further will be sent.
The game asks your browser to hold on to its saved data once you have made some progress, using a standard browser permission. Browsers otherwise clear this kind of storage when space runs short, and phones tend to discard sites left alone for a week or so. Your browser decides whether to agree, and Records tells you which answer it gave. Nothing about this sends anything anywhere.
There is a switch in the Records panel labelled Anonymous counts. Turning it off stops the game sending anything at all, immediately, and it stays off. Nothing else about the game changes.
None. The game sets no cookies and runs no advertising.
The game is a single self-contained file with no external fonts, scripts or embeds. The only request it makes is the anonymous count described above, to this same domain.
No personal data is collected from anyone, including children.