Website privacy

Measure what helps. Keep the details limited.

This notice covers osenpa.com. Desktop app data is covered separately by the App Privacy Policy and Network & Data.

First-party website statistics

The site records page visits, visible time updates, clicks on official download options and clicks on related paid-app suggestions in one private statistics database. A page record can include the route, page title, related app, internal referrer path, external referrer hostname, a recognized source label, a random identifier for the open page and its visible duration. A download record also includes the selected provider, button, placement and destination. A suggestion click records its source page, suggested app, placement, destination path and a random identifier for that click.

The server creates a pseudonymous visitor hash from the request’s network address. It uses that hash to avoid counting the same page repeatedly within one hour, the same download button repeatedly within 24 hours, and the same app suggestion from the same source page repeatedly within 24 hours. Repeat clicks can remain in raw totals. These are estimates, not a count of individual people or proof of a purchase. The site does not set an analytics cookie, create a persistent browser identifier or use device fingerprinting. It does not store the full external referrer URL or a search query.

Global Privacy Control and Do Not Track signals disable browser-side statistics requests, including suggestion clicks. There are no third-party advertising trackers or cross-site advertising profiles.

First-party security events

To protect the private statistics route and measurement endpoints, Osenpa records a limited set of security events. Examples include blocked origins, rate limits, incorrect admin paths and sign-in results.

A record can include a pseudonymous daily visitor hash, a user-agent hash, a redacted request path, the request method and limited event details. It does not store the secret dashboard path. Opening or updating the dashboard does not automatically delete these records. Security history is retained for review; short-lived rate-limit keys expire within 24 hours.

Related app suggestions

Free app pages can show a related paid app. A small preference record in this browser limits suggestions to one placement per 24 hours. Hiding suggestions pauses them for seven days; following a suggested app link hides that app for 30 days. The record holds only these times and app choices, with no visitor identifier. That preference record is not sent to a server. Preferences older than 90 days are replaced on a later eligible visit. Suggestions stay hidden when browser storage is unavailable, and clearing browser data resets these preferences.

A click can be counted separately as described above. Showing or hiding a suggestion does not send an advertising impression or dismissal event.

Technical request data

Like any website, the hosting service receives request information such as IP address, user agent, time and requested resource. Hosting logs are separate from Osenpa’s first-party statistics and security events. The hosting provider retains those logs under its own operational settings.

Support messages

If you email Osenpa, your address and the information you send are used to respond and maintain necessary support history. Do not send passwords, private documents or unrelated sensitive information.

Little Matches on Osenpa Play

Little Matches needs no account. Progress, collected stickers and audio preferences stay in this browser. A separate first-party counter estimates page openings, visible time, game starts and completions; it does not use the main website tracker. Daily visitor estimates use a salted hash of the server-observed IP, not a persistent browser identifier. Shared networks and changing addresses affect that estimate.

Daily totals and technical visit records are kept without automatic deletion. These records include hashed visit tokens, daily visitor hashes, salts, timing and game-start/completion flags. The counter does not save raw IP addresses. Hashes are pseudonymous, not a guarantee of anonymity. No names, referrers, URL queries, sticker inventories or individual moves are collected by this counter. DNT, Global Privacy Control and the website statistics opt-out disable it. Ordinary hosting logs still apply.

Saving a sticker creates a PNG on your device. A sticker link identifies the artwork; a collection link contains a snapshot of the unlocked stickers you choose to share, with no account identifier. These links include a URL query sent to the hosting server to create the sharing preview. Opening it does not unlock rewards. Your chosen sharing service handles that link under its own policy. Licensed music and effects are hosted with the game; there is no third-party audio stream.

Adventure progress, stickers and sound preferences are saved in this browser, not in an online account. Clearing browser data removes them. Browser storage settings may prevent saving. Use My collection, then Clear my collection, to reset your collection and adventure progress.

Retention and contact

The first-party statistics database has no automatic analytics expiry so the dashboard can keep its historical totals. For questions or requests, contact osenpacom@gmail.com.

Last updated: October 3, 2026. This page describes the implemented system and is not a substitute for jurisdiction-specific legal advice.