Privacy Policy
Effective and last updated: 9 October 2026
pmithunish.com is Mithunish Prabhakaran's portfolio: a small 3D world you drive around. It is published under Kadal (run by Mithunish Prabhakaran, an individual) in Chennai, Tamil Nadu, India. This page adds the details for this site to Kadal's Privacy Policy, which covers everything published under the Kadal name. There are no accounts, no ads and no analytics here.
The shared world
Every visitor joins the same world over a live connection to our server on Cloudflare. Your browser makes up a random ID the first time you visit and keeps it (see below), so the world can tell your whisper and your race time apart from everyone else's. It isn't linked to your name or any account.
| When you… | We store | Who sees it, and for how long |
|---|---|---|
| leave a whisper | The message (30 characters at most), the flag you chose, where in the world you left it, the time, your random ID and your IP address. | The message and flag are public to every visitor. A whisper, with its IP address, is deleted when you leave a new one, when 30 newer whispers push it off the wall, or when we remove it. The IP address is never shown; it's kept only to stop one person flooding the wall and to deal with abuse. |
| finish the race | Your three-letter tag, your flag, your time and your random ID. | The day's top 10 tags, flags and times are public, and the board resets at 00:00 UTC. Times more than a week old are deleted the next time anyone finishes a race. |
| take a cookie, or visit the altar | Only a running total for everyone, with nothing about you. | The totals are public. |
Your flag starts as a guess from your browser's language settings. You can change it or remove it in the whispers menu before you post.
While you're connected, the server also holds your IP address in memory to apply the one-whisper-a-minute limit. It's gone when you disconnect.
How whispers are checked
Whispers are public, so each one is checked before anyone sees it: a filter refuses links, email addresses, phone numbers and slurs, and then two AI models on Cloudflare Workers AI (Llama Guard 3 and Llama 3.1 8B) read the message to screen out abuse. Only the message text goes to the models. A refused whisper is not stored; the server logs only the reason it was refused, not the message.
On your device
The game keeps these in your browser's local storage. They never leave your device except your random ID and flag, which are sent as described above. Clear this site's data to remove them.
uuid: your random ID.countryCode: the flag you picked.soundToggle: sound on or off.-
achievements,achievementsTimeStart,achievementsTimeEnd,achievementsReward: your achievements. timePlayed,distanceDriven: your play stats.
Taking a cookie at the cookie stand also sets a real cookie, acceptedCookies,
which counts how many you've taken. It's a session cookie, so your browser drops it when
you close it, and nothing on our side reads it.
Services that see your visit
- Cloudflare hosts the site and the shared world, runs the whisper checks, and keeps short-lived logs for security and fixing faults.
- Google Fonts supplies two of the game's typefaces (Amatic SC and Nunito), so your browser asks Google for them and Google sees your IP address and browser details. These legal pages don't load them.
Your rights
Under India's Digital Personal Data Protection Act, 2023 you can ask to see what we hold about you, have it corrected or erased, withdraw consent, have a grievance heard and fixed, and nominate someone to act for you. If you're in the EU or UK, you have the equivalent GDPR rights, used the same way.
To have a whisper removed, email pmithunish@gmail.com with its text and roughly when you left it. Mithunish Prabhakaran is the Grievance Officer. We aim to reply within 7 days and resolve your request within 30 days. If you're not satisfied, you can complain to the Data Protection Board of India, or in the EU or UK to your data protection authority.
The rules for whispers and the race are in the Terms of Use.