Terms of Service

Last updated 9 October 2026

This is a free games site run as a hobby. Using it means you accept what is written here. The short version: the games never need an account, the chat and the forums do, be decent wherever you post, do not attack the site, and do not expect guarantees from something nobody is paying for.

1. Who can use it

Anyone. Playing a game needs no account, no age gate and no login, and that is not going to change — the catalogue, the saves and the search all work without the site knowing who you are. An account exists only for the parts that cannot work anonymously: the web chat and the forums. Section 4 covers those.

If you are using a computer that belongs to someone else — a school, a library, an employer — their rules still apply to you. This site does not override them and does not pretend to. Whether you are allowed to play games on that machine is between you and whoever owns it.

2. The games

Most of the games here were made by other people. They are hosted or embedded so they can be played, and no claim of ownership is made over any of them. Trademarks and copyrights belong to their owners.

If you made something here and want it taken down, say so through the Comment Box on the homepage with enough detail to identify the game, and it will be removed. No argument, no forms.

3. How you may use the site

Play, share the link, use it on whatever device you like. That is the whole intended use.

What you may not do:

• Flood, scrape, mirror or automate the site — including scripted requests, headless browsers and bulk downloading of the games. Automated access is not permitted, with one exception: search engine crawlers. Googlebot, Bingbot, Applebot, DuckDuckBot, Yandex, Baidu, PetalBot and Seznam are welcome, but only where a reverse lookup of the address resolves back to the engine the User-Agent claims to be. A crawler name on an address that does not belong to that engine is a script pretending, and is treated as one.
• Try to defeat, replay or forge the checks, the passes, the signed cookies or the rate limits.
• Reshape or forge request headers to get past screening, or come back from a fresh address, a fresh browser profile or a VPN to get around a block. Evading a ban is a breach of these terms in its own right, separately from whatever earned the ban.
• Probe for vulnerabilities, attempt to reach administrator pages or interfere with other visitors' saved progress.
• Re-host the site or present it as your own.
• Use it to break the law, or to break the rules of the network you are on.

Traffic that does any of this gets rate limited, challenged, or blocked outright. Those calls are made automatically, in the moment, by a machine and not by a person — but they are not the last word. Section 11 says how to get one looked at again.

A block is not only by address. The site identifies the device as well, from technical signals the browser gives up and from the way a pointer and a keyboard are used, and that identification is what a ban attaches to. Changing address, clearing cookies, opening a private window or switching on a VPN does not reset it, and is not meant to. Exactly what is read, and how long it is kept, is listed in the Privacy Policy.

Some of what is on the site is bait. Hidden form fields no person can see, and addresses that are linked from nowhere, exist to be found only by something reading the markup or guessing at paths. Filling one in or fetching one is treated as the automated access it is.

Every request is screened against public lists published by other people. Being on an abuse blocklist — Spamhaus DROP, FireHOL level 1, blocklist.de, Emerging Threats — means refusal: the site answers 403 and says in one line why, naming your address and the list that matched, instead of serving the page. There is no check to pass, because there is nothing you could prove.

Using a VPN or a proxy here is allowed. Plenty of people can only reach this site through one, and that is fine. A VPN, a proxy, a Tor exit, a datacentre address or anything else that reads as automated is challenged, not banned: pass the check once and you are through for the day. A verified search engine crawler is not challenged at all. Every visiting address is written down so this can work — what is kept, and for how long, is set out in the Privacy Policy, and you can look up what the screening thinks of your own address at the screening lookup.

4. Accounts

An account is optional and is only needed for the web chat and the forums. It is created here, with an email address and a password of your choosing. The password itself is never stored — only a one-way hash of it, which can confirm the right password and cannot be turned back into it.

• You must verify your email within two days. A verification link is emailed when you sign up and a reminder goes out a day before the deadline. An account still unverified after two days is suspended — it is not deleted, and verifying the address brings it straight back.
• One person, one account. Making more to get around a suspension or a ban is a breach of these terms on its own. This is enforced with the device identification described in section 3: accounts that share a device are visible as sharing one.
• An account can be suspended or deleted at any time for breaking these terms. Deleting an account removes its profile and its keys; posts it already made may stay.
• Chat messages are end-to-end encrypted with a key wrapped by a passphrase only you know. If you lose that passphrase, nobody can recover those messages — not you and not the operator. That is the point of it, and it is not a fault to be reported.
• You can ask for your account to be deleted through the Comment Box on the homepage or from the account page itself.

Nothing in an account entitles you to anything. There is no paid tier, no refund to ask for, and the whole feature can be withdrawn.

5. Comments and posts

The comment box on the homepage is open and unsigned — nothing is recorded about who wrote what. Chat messages and forum posts are tied to the account that made them. Either way the same rules apply, and they only work if people do not abuse them. Do not post:

• Slurs, harassment, threats or hate of any kind. These are blocked before they are saved, and trying repeatedly is grounds for being blocked from the site.
• Anyone's personal information, including your own — real names, schools, addresses, phone numbers, email addresses.
• Spam, advertising or links to malware.

Comments, forum posts and pinned threads may be hidden or deleted at any time, for any reason, without notice. Reporting one flags it for review; it does not guarantee an outcome.

News stories you send in work differently in one respect: nothing is published automatically. An administrator reads every submission and either publishes it or declines it, and no reason has to be given either way. Sending one in gives permission to publish it, to edit it for length or clarity, and to leave it up. Do not send in anything you did not write, and do not send in anything you would not want attached to the name you signed it with. Submissions are kept whether or not they are published — see the Privacy Policy.

6. The name you go by

Using the site means picking a name. You will be asked for one and the question does not go away until it is answered. It does not have to be your real name and it should not be — see the Privacy Policy for what is kept alongside it, which includes the last address you were seen on.

• Slurs are refused. So is a name somebody else already holds, including one spelled to look like theirs.
• Do not pick a name meant to pass you off as somebody else, as a member of staff, or as the site itself.
• A name can be taken back, changed or refused at any time, without notice, and repeatedly trying to get an abusive one through is grounds for being blocked.
• Giving a name up releases it after a cooling-off period. Until then nobody else can take it.

7. Leaderboards

Times you post appear under the name you have picked. Every posted lap is recorded with where it came from so that it can be checked.

• Do not post a time you did not drive — anything altered, replayed, automated or edited.
• Any lap may be taken off the board at any time, for any reason, without notice. Taking one down hides it; it is kept so the decision can be reversed.
• Repeatedly posting faked times is grounds for being blocked from the site.

8. Names, mirrors and availability

The site answers on several names. Two are permanent: plyz.org, which is the main one, and plyz.dev, which is there for when the first is blocked on the network you are using. Three stop working in September 2027: squishes.shop, plyz.tech and plyz.website. The moving page explains why. If you have a bookmark, point it at plyz.org.

Alongside those the site answers on s1 through s5, so that one mirror being unreachable does not mean all of them are. Every name serves the same catalogue and the same saved data.

None of them is promised to be up. There is no uptime commitment, no maintenance window, no support queue and no service level of any kind. Any of it can go away without warning, and the September 2027 date is the one piece of notice you are getting — it is not a guarantee either, only an intention.

9. Saved progress

Saves are a convenience, not a backup service. They live in your browser and are copied to the server keyed to a random id in a cookie, and to your account if you have one. Game progress, pinned games, high scores and preferences follow you from one of the site's names to another, because they are held against that id and not against the name in the address bar. Clearing that cookie, clearing site data, using a different browser or using private browsing will lose the connection to them. Saves may also be pruned, corrupted by a game, or lost in a deploy. Do not rely on them, and do not treat the move to plyz.org as a reason to start trusting them.

10. No warranty

The site and everything on it are provided as is and as available, with no warranty of any kind, express or implied — including fitness for a purpose, accuracy, or that anything will keep working. You use it at your own risk.

11. Limits of liability

To the fullest extent the law allows, the operator of this site is not liable for any loss arising from using it or being unable to use it: lost progress, lost time, a device problem, a consequence at school or at work, or anything caused by a third-party game, embed or service linked from here. Nothing in these terms limits liability where the law does not permit it to be limited.

12. Third-party services

Checks run through Cloudflare and Google, Cloudflare also sits in front of every name the site answers on, videos embed through YouTube, and fonts load from Google Fonts. Account mail and support replies are sent from the site's own mail server. Those outside services have their own terms and their own privacy policies, and this site has no control over them. What each one receives is listed in the Privacy Policy.

13. Ending access

Access can be withdrawn at any time, from any address or any device, for any reason — most often automatically, because the traffic looked like a script. Nothing is being paid for, so there is nothing to cancel; you simply stop being served. An account can separately be suspended or deleted, which is a different thing from an address being blocked and does not imply the other.

A ban is usually enforced by the server itself. A persistent one is handed to Cloudflare and enforced at the network edge instead, which means the request never arrives here at all: it is refused, or held at Cloudflare's own challenge, before the site sees it.

Bans are not all the same, and how long one lasts depends on what earned it. Hammering a cooldown costs an hour; scraping costs a day; coming back from a new address to get around a block costs a week; probing or forging headers costs a month. Doing it again moves you a grade up that ladder. An address published on an abuse blocklist — Spamhaus DROP, FireHOL level 1 and the rest — is banned with no expiry and stays banned until a person takes it off. A ban a person set by hand can likewise carry no expiry at all.

Every ban can be appealed, and every automatic one opens an appeal by itself. As a ban is made, the address, the reason, the path that triggered it and what the screening saw are mailed to the operator, who can let the ban stand or lift it. That review is a person looking at a machine's decision, which is the whole point of it. How screening works sets the rest out in full — the lists, the grades, the limits and what to do about them.

If you think a block is wrong, say so. Look first at what the screening actually sees — security.squishes.shop shows you your own address, the verdict and the reason for it, and it answers even when the rest of the site will not — then say so through the Comment Box on the homepage, quoting that address. Note that a block applies to the whole site from that address, so you will need a different connection to send the message. School and shared networks are usually blocked for what somebody else behind the same address did, and that is the usual answer.

14. Changes

These terms can change. The date at the top changes when they do, and continuing to use the site after that is how you accept the new version. There is no mailing list to announce it.

Questions, takedown requests or anything else: use the Comment Box on the homepage. See also the Privacy Policy, How screening works and where the site is moving. Press ESC twice at any time to switch to Google Classroom.