Privacy
This page describes what mathgamefree.com does with information. It is not legal advice.
MATH GAME FREE is a place to play four games in the browser: Sprouts, ultimate tic-tac-toe, Franco maze, and Penny Wise. You can play without an account. The site does not charge and does not show ads.
Accounts
If you register with a username and password, we store the username, a nickname, an avatar (a preset id or an image URL), and a hash of the password. We do not store the password itself.
The sign-in and register pages on mathgamefree.com show a Google button. Loading the button also loads https://accounts.google.com/gsi/client. Automatic sign-in is off, and the page does not open Google's one-tap prompt.
That script writes a cookie named g_state on mathgamefree.com before anyone clicks the button. Google's documentation says the cookie remembers that this browser is signed out, so a closed automatic sign-in does not pop open again. The value is the script's own state. We do not read it, and we do not treat it as a sign-in credential.
If you click the button and Google sends a credential, we store the Google account id, the Google email as the username, a nickname taken from the Google name, and the Google picture URL when Google sends one.
A recovery email is optional. You add it after you are signed in. We use it only to send a code when you reset the password. After it is set, you can replace it. You cannot clear it. Google accounts do not get this control in the menu.
The signed-in browser gets a cookie named mg_session. It is HttpOnly, Secure on HTTPS, SameSite=Lax, and lasts 30 days. The server stores a hash of that cookie, not the cookie value. Logging out deletes that session.
Games
Signed-in games can be saved: who sat where, the name used in that game, the result, the times, and a replay of the moves. A person without an account can still play. Their guest name stays in this browser under the local storage key mg_guest_name. Other players in that game can see the name. It is not a user account.
This browser also remembers the language (mathgame.locale) and whether to start an AI game when no person is waiting (mg_vs_ai).
Password-reset and recovery-email codes are sent from noreply@mathgamefree.com through Tencent Cloud mail. A code is 6 digits, lasts 10 minutes, and one account can receive at most 10 of these messages a day. Registration does not ask for an email unless you use Google.
Pages and logs
Cloudflare proxies requests to the site. The origin reads the visitor address from CF-Connecting-IP. On 5 October 2026 the homepage responses we checked did not include a Set-Cookie header, and a signed-out browser showed no cookie on the lobby and the game pages. That check did not cover HttpOnly cookies.
On mathgamefree.com, Cloudflare also adds a visit counter. The script address starts with https://static.cloudflareinsights.com/beacon.min.js. We read that script on 5 October 2026. It does not mention cookies.
On mathgamefree.com the page also loads https://plausible.shipsolo.io/js/script.js to count visits. We read that script the same night. It does not set a cookie. It skips the count only when this browser has the local storage key plausible_ignore set to true.
Sign-in and registration use a picture captcha. The answer stays in server memory until it is used or the process restarts. It is not a third-party captcha.
Request logs include a request id. Signed-in requests can include the user id.
Children
Children may play. The cards say ages 6 and up, and ages 5 and up for ultimate tic-tac-toe. An account is not required to play.
If someone creates an account, including a child, we store the same account fields as for anyone else. Google sign-in stores an email. We do not ask for a parent before play or before an account is created. This page does not say the site meets a children's privacy law.
Contact
Questions about this page: privacy@mathgamefree.com.
Changes
Published 5 October 2026. Updated 6 October 2026.