Last updated 14 August 2026
What Final Boss Games collects, why, who else sees it, how long it's kept, and how to get rid of it. This describes what the site actually does — not a general template.
The short version. You can play everything without giving a name or an email. But the site is not anonymous: it quietly gives every visitor an ID so it can count a vote once and keep your streak, it records which pages you open and what you tap, and it uses Google Analytics. That record is kept until you ask for it to be removed, and then a person removes it. If you make an account it holds your email address, and your username and progress become public. Nothing is sold, and nothing is shared for advertising.
Final Boss Games is a one-person site at bossfeed.fun (also reached at bossgames.fun and theboss.games). Questions about anything on this page go to Jeff@bossfeed.fun, which is also the address to write to about deleting your data.
The moment you load a page, the site signs you in anonymously with Google's Firebase service and gives your browser a random ID. There is no prompt, because it happens before you've done anything. It is what stops one person voting on the same post fifty times, and it is what keeps your streak and your progress attached to you.
That ID is stored in your browser and in a cookie called fbuid that
lasts a year. Clearing your browsing history does not always remove it — the site
keeps it in browser storage that a normal cache clear leaves alone. Clearing site data
for bossfeed.fun does remove it, and you become a new visitor.
If you later sign in, that ID is kept and upgraded rather than replaced. This is worth being clear about: the browsing, voting and puzzle history recorded while you were anonymous stays attached to you and becomes part of your named account.
Accounts are optional. You sign in either with a one-time link sent to your email address, or with Google. There is no password.
Your profile is readable by anyone — it has to be, so other players can see who is on a leaderboard. It contains:
Your email address is not in your public profile and is never shown to other visitors. Comments, quest answers, leaderboard scores and duel results are also public, and carry the username you chose.
Readable only by you (and by the site owner): your email address, your voting history, which posts you've already seen, your saved places, and your full progress record.
The site keeps its own activity record so the owner can see what people actually play and what's broken. Tied to your ID, it records:
What it does not record: what you type into a puzzle. Keystrokes in the crossword, word games and logic grids are deliberately excluded.
Until someone removes it by hand. Nothing described above deletes itself. There is no clear-out running on a timer, and no date on which any of it falls off on its own — so treat it as kept indefinitely.
That covers nearly everyone who visits, not only the people with accounts. Most of what's recorded belongs to visitors who have never signed in and are known only by the anonymous ID further up this page.
Ask and it's deleted. Email Jeff@bossfeed.fun and your record is removed. A person does it by hand — there's no form, no automated tool, and no account needed to ask. You don't have to give a reason.
Honestly: there is currently no button for you to switch this off. There is an owner-side switch that stops collection for everybody, and it is on by default. The site does not currently check the "Do Not Track" or "Global Privacy Control" setting your browser may send. If you want your activity record deleted, email and it will be done.
The site loads Google Analytics on most pages — two separate Google Analytics properties, in fact. Google receives the page you're on, where you came from, your browser and device type, your network address, and the ID in its own cookies. This is standard visitor-counting, but it is Google receiving it, under Google's terms.
There is no cookie banner and no consent step before this loads. If you'd rather it didn't run, a tracker-blocking extension or your browser's built-in blocking will stop it, and the site works fine without it.
A lot of the site never leaves your browser. Stored locally, not sent anywhere: your theme and large-print settings, which feed channels you follow, your widget preferences, your notepad, saved reading positions, which daily puzzles you've solved on this device, and your local progress. Signing out clears the personal ones.
The site never asks for your location on its own. It only comes up if you turn on the weather widget or look for things nearby, and then only two ways: you type a postal code or place name, or you tap "Use my location" and your browser asks your permission.
Separately from all of that, the rough country/region/city worked out from your network address is recorded in the activity record described above. That happens whether or not you ever touch the weather widget.
Three kinds of email exist: the sign-in link, an optional daily digest, and an optional weekly newsletter. Digest and newsletter are both off unless you turn them on, and both have a one-click unsubscribe. Digest settings live on your account page.
One thing you should know: when you sign in, your address is also copied into the mailing-list database, marked as not subscribed. It's there so the two systems can recognise the same person — it does not subscribe you to anything and does not cause you to be emailed. Say the word and it's removed.
Email is sent through Brevo, which handles delivery and therefore holds your address and whether the message reached you. Sign-in links are sent by Google's Firebase.
| Who | What they get |
|---|---|
| Cloudflare | Hosts the site. Sees every request — network address, browser, page. Also stores images people upload. |
| Google (Firebase) | Sign-in and the database. Holds your email address, your ID, and everything the site stores about you. |
| Google Analytics | Visitor statistics, as described above. |
| Brevo | Sends the digest and newsletter; holds subscriber addresses. |
| Bluesky | Posts shown in the feed are fetched from Bluesky by your browser, so it sees your network address. |
| Open-Meteo | Weather. Gets a blurred location or typed postal code — only if you use the widget. |
| OpenStreetMap, Ticketmaster | Nearby places and events. Get a blurred map reference from this site's server, never your network address. |
| Hacker News | Headlines fetched by your browser — only if you turn that widget on. |
| YouTube, Vimeo, TikTok | Embedded videos load only when you click play, so nothing reaches them until you choose to watch. |
| finalbossediting.com | The sister site, so one sign-in works on both. |
Nothing is sold, rented, or handed over for advertising. The site carries no advertising of its own. Data may be disclosed if the law genuinely requires it.
You can delete your account yourself, on the account page. That removes your profile, your username, your private progress, your vote and comment history, and your sign-in record. It cannot be undone.
Being straight about what self-deletion does not currently reach:
All of those can be removed by hand. Email Jeff@bossfeed.fun, say what you want gone or what you want a copy of, and it will be done. Depending on where you live you may have a legal right to this; you'll get it either way.
This site is made to be safe to have open around children. Everything arriving from elsewhere passes an automatic filter that drops anything sexual, violent, hateful or otherwise unsuitable before it can be shown.
But be clear about what that does and doesn't mean. It is not a children's service, and it isn't designed to meet children's-privacy rules. There is no age check, and an account isn't meant for anyone under 13. Every visitor — including a child — gets the anonymous ID and the Google Analytics described above. If you're a parent and a child has made an account here, email and it will be deleted along with everything attached to it.
If this changes, the date at the top changes. Nobody is emailed about it. If something changes in a way that genuinely matters, it'll be said on the site.
Privacy questions, a copy of your data, or a deletion request — one address, and a person reads it.
See also: terms & conditions · about this site · sources & credits