Effective date: October 7, 2026
Cute Seal Holdings (Hong Kong) Limited operates SillyRaces.com, including SillyHoof, SillySki, SillyIsland and SillyClimbing (“we”, “us”). This policy covers the information handled through this site. Contact our privacy team at derekzmhk@gmail.com.
1. Information we handle
- Accounts: email address, public username, account identifier, creation date, password hash and recovery-key hash. Passwords are salted and hashed, not stored in plain text. Password reset requests may create time-limited tokens.
- Game data: horse names and drawings, cloud-stable records, personal bests, scores, jump timing, retry records, reward receipts, and uploaded replay images or videos.
- Device-local data: guest identifier, drawings, progress, virtual feed, daily-run counters, challenge friends and preferences such as sound, language and privacy choices are stored in your browser.
- Location: our hosting service supplies an approximate country and sometimes city based on your IP address. We use this for regional rankings and service operation. You can change your displayed country/region. We do not request GPS access.
- Technical information: hosting services process IP addresses, request details, browser information and security logs. We use hashed IP/email identifiers to limit abusive login and recovery attempts. We do not currently run a separate visitor-analytics tool.
- Messages: when you email us, we receive your address, message and attachments.
2. How we use it
We use information to provide accounts and gameplay, save horses, validate scores, run leaderboards, deliver requested password-reset emails where enabled, respond to requests, prevent abuse and maintain the service. Where applicable, our legal bases include providing the service you request, legitimate interests in security and administration, legal obligations, and consent for optional advertising technologies.
3. What other players can see
Official non-practice scores can be published automatically when you keep a result while signed in. Improved records for an already-published horse may also update automatically. Public records include your username, horse name and drawing, score, country/region, retry count and replay. Anyone with access to the site or replay link may view or copy them. Your email, password and recovery key are not included in public records.
Practice stays private. Avoid real names, contact details or other identifying information in public names and drawings. Friends filters do not make a published record private.
4. Cookies and browser storage
We use the essential sj_account session cookie to keep you signed in for up to 30 days. Browser storage remembers local progress and settings until you clear it or it is replaced. Privacy choices are saved on this browser; they do not automatically carry to another device.
You can use to allow or turn off optional advertising. Google advertising is off unless you choose to allow it. Rejecting optional advertising does not prevent ordinary play. Browser settings let you delete cookies and local storage, but doing so may sign you out and erase guest progress.
5. Advertising and Google
Where enabled, we use Google AdSense. Third-party vendors, including Google, use cookies or similar technologies to serve ads based on your previous visits to this or other websites. Google advertising cookies enable Google and its partners to personalise ads based on those visits, subject to the choices and consent requirements that apply.
Advertising partners may receive IP addresses, browser/device details, identifiers and information about ad impressions and interactions. We do not send your account email, password or recovery key to Google as advertising identifiers. Display ads do not grant rewards. Optional rewarded-video features, if offered, require completion of the stated ad-viewing action, never a click on an advertiser’s offer.
Manage Google ad personalisation at My Ad Center. Read how Google uses information from partner sites and the Google Privacy Policy. Other participating advertising companies may offer opt-outs through YourAdChoices.
Ads are currently withheld in the EEA, United Kingdom and Switzerland, and when we cannot determine the visitor’s country, pending the required certified consent setup. Our own privacy-choice control does not replace a Google-certified consent platform. Ads also stay off when your browser sends Global Privacy Control.
6. Providers, sharing and international processing
We use Cloudflare infrastructure for hosting, databases and uploaded media, and our configured SMTP email provider for requested password-reset verification codes. Our email provider processes support correspondence. Google Fonts supplies the game’s web fonts and receives the network request information needed to deliver them, including your IP address. Google and its advertising partners process advertising information as described above. Providers may process data outside your country, including in the United States and other locations where their infrastructure operates, under their applicable terms and safeguards.
We do not sell account data for money. Some advertising disclosures may qualify as “sharing” or targeted advertising under local law; you can disable optional ads. We may disclose information when legally required, to protect rights and security, or in connection with a business transfer subject to appropriate protection.
7. Retention and security
Account and cloud-game information is kept while needed to provide your account and records, unless you request deletion. Public records remain available until removed. Session tokens expire after 30 days and password-reset verification codes and tokens after their configured short validity periods. Limited records may be retained where needed for security, disputes or legal obligations; provider backups and third-party copies may not disappear immediately.
We use HTTPS, password hashing and access controls. No storage or transmission method is completely secure. Keep your password and recovery key private.
8. Children
Accounts are intended for users aged at least 13, or a higher minimum age where local law requires it. We ask for an age confirmation rather than a full birth date. A playful visual style does not mean children should share personal data. Do not enable optional advertising for a child under 13. If we learn that a child below the applicable minimum age has supplied personal information without an appropriate basis, we will take steps to remove it. Parents or guardians can contact derekzmhk@gmail.com.
9. Your choices and rights
Depending on your location, you may have rights to access, correct, delete or obtain a copy of your information, object to or restrict processing, withdraw consent, or complain to your local privacy regulator. Email derekzmhk@gmail.com with your request. We may verify your identity and will respond within the period required by applicable law. Withdrawal does not affect earlier lawful processing.
For account deletion, specify that you want the cloud stable, public scores and replay uploads removed. Delete local browser data separately if you also want guest progress removed. Disabling ads stops future ad requests after the page reloads; it does not itself erase cookies already set by advertising providers.
Shared accounts and the four games
Google sign-in is optional. When you use it, we receive the Google account identifier, email, verification status, display name and profile image needed to sign in and display your profile. We do not receive your Google password. SillySki stores rider drawings, run controls, distance, spins and challenge/share reward records. SillyIsland stores catch records, weights, round outcomes and movement traces used for validation; its field journal also uses browser storage. SillyClimbing stores stage progress, completion times, validation traces and daily revive records. Published scores can include your public name, country and game records.
Essential guest cookies identify game attempts and challenge balances; clearing them can disconnect guest progress. These game records support saving, leaderboards, score validation and abuse prevention. Requests to access or delete data can cover any of the four games, not only the horse stable.
10. Updates
We will update the effective date when this policy changes and provide additional notice for material changes where required. If a new use requires consent, we will request it; continuing to play is not treated as consent to new optional data processing.