Build a Hooper
Sign in
We don't
collect it
No email, no advertising, no profile sold to anyone. You can play the whole game without signing in. Here is everything that is not nothing.
You can play without signing in
The daily board, practice, every mode, the report card and the shareable link all work signed out. Signing in exists for one reason: to put a run on the leaderboard under a name.
What actually happens when you play
Your draft runs in your browser. Picks are not sent anywhere as you make them.
When you finish a run, the link you get — /b/… — encodes the whole run
in the URL itself: the seed, the mode, and your 13 picks. There is no database
row behind it. That is why the link works forever: the URL is the save file. If
you never share the link, nobody else can reach it. If you do share it, anyone with it
can view it.
If you sign in with Discord
We ask Discord for the smallest thing it offers — your basic profile — and store:
- a random id we generate for you, which is what appears in your profile URL;
- your Discord display name and avatar image URL, so a leaderboard row has a face;
- your Discord account id, only to recognise you next time you sign in;
- the results you submit: for each daily board, the picks and what they scored.
No email address. Discord offers one and we do not request it. Your Discord id is never rendered on any page. Ask and the whole record is deleted.
Cookies
One, and only after you sign in: bah_session. It holds your random id
and a signature, nothing else — it is HttpOnly, Secure,
SameSite=Lax, and it exists so the server knows the leaderboard row is
yours. Signing out clears it. The third parties below set their own; see them.
Third parties that see a pageview
- Google Fonts — the two typefaces load from Google, so your browser makes a request there.
- Google Analytics (GA4) — pageviews and basic device/region information, so we know which pages are worth keeping.
- Microsoft Clarity — heatmaps and session replay. Be aware of what that means: it records how the page was used — clicks, scrolls, mouse movement — not just that you visited.
- Discord and its CDN — only if you sign in, for the login exchange and to load your avatar.
Browser-level Do Not Track and any content blocker will stop the two analytics tags; the site works fully without them.
What the server sees
Standard web request logs, kept by our host (Cloudflare) for operations and abuse prevention: IP address, timestamp, requested URL, user agent.
Children
The game asks for nothing personal to play. Do not sign in if you are under the age Discord requires in your country.
Changes
This page previously said there was no login, no third-party analytics and no cookies. All three stopped being true when those features shipped, and the page was not updated at the time. It is now, and a test fails the build if those sentences come back while the features are still here.