JS MyJS

Privacy policy

Last updated October 16, 2026

This policy explains what MyJS (myjs.dev) collects when you use the site, why, and what you can do about it. The short version: you can use almost everything without an account, there are no ads or tracking, and nothing is sold or shared for marketing.

Using the site without signing in

You can read pages, play the games, and make and export Wormbites levels without an account. Like most websites, the web server keeps standard logs of requests (IP address, browser, the page requested and when) to keep the site running and secure. These logs are deleted automatically after a while.

Downloading MyJS

Your copy of MyJS is built in your browser, from the parts you pick and with tools served by this site. Each download gets a link that makes the same copy again: only which parts (and versions) were picked and the name chosen for it are saved, nothing about you. To stop anyone from making huge numbers of those links, the number made from each connection is counted for an hour, using a scrambled code made from its IP address (never the address itself), and then deleted.

Examples and the test buttons run in MyJS Pad and MyJS Box, which load from jsDelivr and unpkg. Those see the usual details of a request (like your IP address) under their own policies.

Signing in with GitHub or Google

You only need an account to save things to the site, like Wormbites levels. When you sign in, we receive and store:

  • From GitHub: your GitHub account ID, username, name and profile picture link.
  • From Google: your Google account ID, email address, name and profile picture link.
  • When your account was created and when you last signed in.

We never see your password. The access GitHub or Google gives us is used once, to read the details above, and then thrown away. We only ask Google for your basic profile and email address (the openid, email and profile permissions).

You can link both a GitHub and a Google account to your MyJS account from your account page, so either one signs you in. If the account you link had already been used to sign in to MyJS by itself, that account and everything made with it are merged into yours. Unlinking an account deletes the details that came from it (its account ID, plus your GitHub username or your Google email address).

How Google user data is used

Your Google account ID is used to recognize you each time you sign in. Your name is used to show who made a level: other people see only your first name and last initial. Your email address is stored with your account so you can be identified if you contact us about it. It is never shown publicly, never used for marketing or sent to anyone, and you won't get emails from us. Google user data is not sold, shared with third parties, or used for anything other than signing you in and showing your name on things you make.

Things you make

Wormbites levels you save are public: anyone can play them, and they show your public name (your GitHub @username, or your first name and last initial) and when they were made. You can delete your own levels at any time, and site admins can remove levels too.

Accounts from the old Wormbites site

Wormbites used to be on cwest.net. If you saved levels there, they were moved here along with your old username (which they're shown with, as before), your name and the email address you gave that site. Your old password was not moved. Nobody can sign in to that account until you sign in with Google using the same email address: it then becomes your account, levels and all. Your email address is used only for that, and is never shown publicly. If you'd rather your old levels or details be removed, contact the site owner.

Cookies

MyJS only uses cookies needed for the site to work:

  • myjs_auth: keeps you signed in (for up to 30 days, or until you log out).
  • myjs_oauth: protects the sign-in process for the few minutes it takes.
  • myjs_flash: shows a one-time message like “Saved.” after an action.
  • myjs_view: for admins only, remembers which version of a page they’re previewing.

Your browser may also keep a level you were making in its own session storage while you sign in, so it’s still there when you get back. That never leaves your browser.

Other services

  • GitHub and Google handle signing in, under their own privacy policies.
  • YouTube: the Wormbites music player loads YouTube’s player, so YouTube (Google) may set its own cookies on that page under Google’s privacy policy.
  • The blog at /blog/ runs on WordPress. If you leave a comment, the name, email and website you enter (and your IP address) are stored with it, and WordPress may set cookies to remember those details.

How long data is kept

Your account stays until you ask for it to be deleted. Levels stay until you or an admin delete them. Server logs are deleted automatically.

Your choices

  • Delete your levels yourself on the Wormbites page.
  • Link or unlink your GitHub and Google accounts on your account page.
  • To see the data stored about you, or to have your account and everything you made deleted, contact the site owner.
  • You can also remove MyJS’s access from your GitHub settings or your Google account.

Children

MyJS isn’t meant for children under 13, and accounts shouldn’t be created by them.

Changes

If this policy changes, the new version will be posted here with a new date.

Contact

Questions about this policy? Please contact the site owner.