Privacy policy

This is the Squirm.io privacy policy: what the game uses, why, and what you can do about it. Last updated 15 September 2026.

The short version

• On our website, the game makes a guest account for you the first time you play. It is a random code, not your name. We never ask for your email, real name, age or address.
• The nickname you type is shown to other players, and a very long worm can put it on our public Hall of Fame.
• Your games, your level, your Nuggets and anything you unlock are saved to your guest account on our server. Your settings are saved in your browser.
• Google Analytics runs on our website only if you press Accept. The game works exactly the same if you don't.
• You can delete your account and everything in it at any time.
• We do not sell your information, and we do not use it for targeted adverts.

Who we are

Squirm.io is a free multiplayer worm game, run by Squirm.io in the United Kingdom. You can play it at squirm.io, on games websites such as CrazyGames, and soon in apps for iPhone and Android. Squirm.io decides how the information on this page is used, which makes it the "data controller". For anything on this page, email [email protected]: that is the way to reach us.

Your nickname

You can type a nickname before you play; leave it blank and you are "Worm". Please don't use your real name or anything that could identify you, like your school or a username you use elsewhere: your nickname is public. It is shown above your worm, on the live top 10, to a player whose worm eats yours (and to you, if yours eats theirs), and on the all-time Hall of Fame if you get long enough.

Our server checks every nickname against a list of rude and hateful words and changes a name that fails to "Worm". If a name upsets you, hide it or report it from the screen you see when your worm is eaten. A report sends us the name, the arena and the time, and nothing about you.

The Hall of Fame

A public list of the 100 longest worms of all time, on our website and in the game. For each entry we keep three things: the nickname, the length, and the day. An entry stays until a longer worm pushes it off. To have one removed, email [email protected] with the nickname and roughly when. We can't tell who typed a name, so we remove an entry for anyone who asks.

Your guest account

On our website, the first time you play, the game makes a guest account for you on our server. It holds:

• a random code that identifies it: not your name, and nothing about you;
• a record of each game: how long your worm got, how many worms it ate, how long it lasted, how many Nuggets it collected, and when it ended;
• your totals: best length, total length, number of games, and your XP and level, which are worked out from your games;
• your Nuggets balance, and a list of each change to it (what earned it, or what it was spent on);
• the skins, backgrounds and other looks you have unlocked or bought with Nuggets;
• a note of when the progress your browser had saved before accounts existed was copied in (this happens once).

Your browser keeps a key to the account (another random code), so your games keep counting towards the same progress. When the key is used, our account server records that session: when it started and expires, and the internet address and type of browser it came from. That is kept to keep accounts secure, and goes when the session expires or you delete the account.

We use the account only to save your progress, and to check, when you join a game, what you have unlocked. Nothing you can buy costs real money today.

Signing in with Google, Apple or Discord

You will be able to sign in, so your progress follows you to other devices. Signing in moves everything in your guest account into your signed-in account. From Google, Apple or Discord we keep only the ID number that service gives us for you. We don't ask them for your email, name or picture, and if any of that is sent anyway we throw it away before saving anything. We don't keep the codes they give us to act for you, except Apple's, which we need so we can cancel your Apple sign-in when you delete your account.

What is saved on your device

The game saves small pieces of information in your browser, on your own device:

• the key to your guest account;
• your progress and settings: your last nickname, chosen skin and floor, best and total length, unlocked skins, sound, graphics and server choices;
• your cookie choice, so we don't ask again;
• names you have hidden, so they stay hidden;
• which updates you have seen under the bell, and that you've closed the beta notice;
• a note if your device needed lower graphics, and short-lived notes that stop the page reloading itself in a loop;
• a short diagnostics log of the last things the page did (such as "tab hidden" or "graphics restored"), which helps us fix black screens if you choose to send it to us. It never leaves your device on its own.

These are needed for the game to work the way you expect, so we don't ask before saving them. The website also keeps a copy of its own files on your device (a "service worker") so the game opens on a poor connection. That holds no information about you.

What our game server handles while you play

While you play, your device sends our game server your nickname and skin, which way you are steering and whether you are boosting, your screen size and whether you are on a phone (so we send you the right part of the arena), and, on our website, a pass that lasts ten minutes and says which guest account you are, so your game can be saved to it. When you leave, your worm is removed.

Your internet address. When you join a game, our game server notes your address and the time, so it can stop anyone joining too many times too fast. That is held in memory only, never written down, and forgotten within about 20 seconds. Our servers also keep technical logs for fixing problems; they are deleted automatically.

Website analytics

On squirm.io only, we use Google Analytics to count visitors and see which pages are used. It sets cookies, and Google receives the pages you visit, your device and browser type, and your rough location. It is switched on only if you press Accept when the website first asks; press Essential only and it never loads. It is not used on games websites or in the apps. Google keeps this data for up to 14 months, under Google's privacy policy.

Change your cookie choice

Cloudflare and our servers

Our website is delivered through Cloudflare, which keeps websites fast and safe. Like any host, it sees your internet address when you load a page. When the game starts, it asks Cloudflare which country you are in so it can connect you to the nearest game server; we use only the country and don't save it. Our game servers and accounts are hosted in the European Union (Finland).

Adverts

On our website and in our apps, you only ever see a video ad if you choose to watch one, for example for a second life. There are none on our website today. On games websites, that website decides which ads appear, under its own privacy policy. If we add ads to our apps, we will update this page first.

Playing on a games website

On games websites such as CrazyGames, that website runs its own tools and ads around the game, covered by its own privacy policy. There the game saves your progress on your device only (no guest account), and talks to our game server as described above.

Children

Squirm.io is for everyone, and it is built so that we need no personal information from anyone: no email, no real name, no age and no photos, no chat between players, and no profiling or targeted adverts. Parents and carers: you can delete your child's account at any time from the game's settings. If their nickname is on the Hall of Fame, or anything here worries you, email [email protected] with the nickname and roughly when it was used, and we will remove it. You don't need to prove anything.

Why we are allowed to use this information

• Running the game you asked to play, showing nicknames and the Hall of Fame, and saving your progress: our legitimate interests, and yours as a player.
• Keeping the game and accounts safe, such as the join-rate limit and session records: legitimate interests.
• Website analytics: your consent, which you can take back at any time.
• Answering your emails: legitimate interests.

Who we share information with

We don't sell it, and we don't share it for advertising. Only the companies that help us run Squirm.io are involved: our hosting provider in Finland, Cloudflare for the website, Google for analytics if you say yes, games websites when you choose to play there, and Google, Apple or Discord if you choose to sign in with them. We may also share information if the law requires it. Google and Cloudflare are based in the United States and may handle information there, under the safeguards the law requires.

How long we keep things

• Your internet address on our game server: about 20 seconds, in memory only.
• What you send while playing: only while you play.
• Your guest account and everything in it: until you delete it. We may delete accounts nobody has used for a long time.
• Session records: until the session expires or the account is deleted.
• Hall of Fame entries: until a longer worm pushes them off, or you ask us to remove them.
• Name reports: only as long as it takes to deal with them.
• Google Analytics: up to 14 months.
• Emails to support: up to 12 months after our last reply.
• What is saved on your device: until you delete it or clear your browser.

Deleting your account, and your rights

The quickest way to delete everything is Erase in the game's settings (Settings, then Progress): it deletes your account on our server, with every game, Nugget and unlock in it, and then everything Squirm saved in your browser. It can't be undone. If you no longer have the game, email [email protected] instead.

You also have the right to ask what information we hold about you and get a copy, to have it corrected, to have it deleted, to ask us to stop or limit using it, and to take back your consent for analytics. Email [email protected] and we will reply within one month. A guest account has no name or email on it, so tell us your nickname and roughly when you played, and we'll do our best to find it.

Complaints

If you're unhappy with how we've used your information, please tell us first so we can put it right. You can also complain to the UK Information Commissioner's Office at ico.org.uk or on 0303 123 1113, or, in the EU, to your country's data protection authority.

Changes to this policy

When we change how we use information, we update this page and the date at the top. If a change is important, we'll also say so in the game, under the bell.

Contact

Email: [email protected]. See also our terms of use.