What Shikigame keeps about you, why it keeps it, and how to be rid of it. The short version: the site works without an account, the only thing it ever asks for is an address to sign you in with, and nothing here is sold or handed to advertisers.
Last updated 6 August 2026
Shikigame is a daily Jujutsu Kaisen puzzle at shikigame.com. This page covers the site and the API behind it, and nothing else. Sites linked from here keep their own records under their own policies. Using Shikigame means accepting what is written here.
A nickname, if you choose one. Every player starts as Sorcerer. Whatever you rename yourself to is printed beside your rank on the registry, so treat it as public. It is the name you are read under until you make an account, and your username is the name from then on.
An account, if you make one. That is an email address, a username, and a picture if you want one. The address is used to sign you in and for nothing else: it is never shown beside your rank, never sold, and never given to anyone but the service that carries the mail. The username and the picture are public: the registry prints both.
No password. There is none to set and none to lose. Each sign-in on a new browser is a six-digit code emailed to you, stored only as a hash, dead ten minutes after it is sent or the moment it is used.
An anonymous player id. A random identifier your browser mints on its first visit and keeps in local storage. It is not derived from anything about you, and without an account it is the only thing tying one day's play to the next.
Your play record, kept against that id. Guesses counted per puzzle, whether you solved it, streaks, cursed energy and the grade it earns, registry entries, and any poll you vote in. The count is the server's rather than the browser's, which is what makes a rank worth having.
A session, once you sign in. One cookie holds a random token; the server stores only its hash, so the record cannot be read back out and replayed as a login.
Your IP address, briefly. Used to rate-limit guesses, login mail, uploads and votes. The counters are keyed by address, hold no other detail, and expire within hours. Shikigame keeps no browsing log of its own beyond that.
Local storage on your device holds three things: the anonymous player id, your nickname, and whether you have already been asked at the entry gate. Clearing your browser data clears all three.
There is exactly one cookie, sg_session, set only when you sign in and lasting ninety days. It cannot be read by script and is not readable by any other site. No tracking cookies, no advertising cookies, no third-party analytics.
That is the whole list. Nothing here is sold, rented, or handed to advertisers or data brokers.
Shikigame carries no advertising and sets no advertising cookies. If that ever changes, this page is updated before the first ad is served, and it will name who serves them and how to opt out of personalised ones.
Cloudflare hosts the site, runs the API, and holds the database, the rate-limit counters and the uploaded pictures. Everything described above lives in their network.
Resend delivers the login emails, so it handles your address and the code sent to it.
Google Fonts serves the typefaces the site is set in, which means loading a page tells Google's font servers your IP address and browser.
Each of the three processes that data under its own privacy policy. Nobody else receives anything.
Shikigame is not directed at children under 13, and no personal information is knowingly collected from them. If a child has made an account here, write to [email protected] and it will be deleted.
Shikigame is an unofficial fan project, not affiliated with or endorsed by Gege Akutami, Shueisha, or MAPPA. Character artwork belongs to its rights holders and is shown only to identify the character a puzzle is about. See the attribution for the whole of it.
This page is rewritten whenever what the site does with a record changes, and the date at the top moves with it. Anything that widens what is collected is written here before it starts.
Questions about any of this, or a deletion to request: [email protected]. The same address reaches us for a wrong answer or a broken run.