CogWalker: what this site sees and shares

CogWalker streams a bot playing Cogmind, and lets a few invited people play a game of their own in the browser. This page says which third parties are involved and what reaches them. Security contact: [email protected] (see security.txt).

Watching

Watching needs no account. The video comes from a relay run by a hosting provider (the relay named in the page's configuration; at present moq.wtf, earlier moq.pro and Cloudflare), which sees your IP address and which stream you watch. The pages themselves are served by Cloudflare Pages, which sees the same.

Signing in and playing

Playing needs a Google sign-in. Google's sign-in script runs on the play pages and Google learns that you signed in here. The token Google issues goes once to our API to check your account against the allowlist; the API answers with a relay credential of your own, and the page keeps only that, for an hour. On the relay and in our records you go by an opaque id derived from your account, not by your e-mail or Google id.

While "drive" is on, every key you hold on the play page is sent through the relay to the game, and other signed-in viewers of the same game could read that stream. Games you start, with their seed, save and recording, are kept on our server and listed to other signed-in viewers under your opaque id.

What is not collected

No analytics, no advertising, no cookies of our own. The pages keep your relay session in the browser's session storage only until the tab closes.