Account recovery
Your account has no email and no password — a high-entropy code is the only way back
How it works
- 1. The account is permanent. Scores, stats and achievements are stored in PostgreSQL and are never deleted when a cookie disappears.
- 2. The cookie is only a credential. It is HttpOnly, Secure and SameSite=Lax. Losing it does not destroy the account — it only means this browser can no longer prove it owns it.
- 3. A recovery code is the bridge. Generate one, store it somewhere safe, and enter it on any device to reclaim the account. Each code is single-use and revocable.
- 4. No code means a new account. We deliberately never fall back to IP address, user agent or fingerprint matching — those are guessable and unsafe.
Create a recovery code
A recovery code lets you get this exact account back if the cookie in this browser is lost. It is shown once and only its hash is stored — we cannot show it to you again. Up to three codes can be active at a time.
Active codes
No active recovery codes. Without one, a lost cookie means a new account — your old scores stay in the database but you lose access to them.
Restore an account
Already have a code? Entering it here switches this browser to that account. Accounts are never restored by IP address, user agent or device fingerprint — only the code works.
Checking your session…