Leaderboard
Nothing here is a number somebody typed. Each entry was produced by replaying the submitted moves on the server and computing the score there.
2048
Loading…
Score · finish a game to add yours — every score is verified by replaying the moves on the server
Snake
Loading…
Length · finish a game to add yours — every score is verified by replaying the moves on the server
Tic Tac Toe
Loading…
Streak · finish a game to add yours — every score is verified by replaying the moves on the server
How it works
The browser never sends a score. It sends the moves that were played, and a Cloudflare Function replays them through the same game logic the browser ran — so the score on the board is one the server worked out itself. A forged score has no field to sit in.
Each run gets a single-use session and, for the games that need one, a random seed issued when the game starts. That fixes where the food and the tiles appear, which is what makes a replay reproducible — and it means a run cannot be practised offline against a known board.
This stops the tampering that matters: inventing a score, resubmitting a captured one, or editing a move out of a real game. What it cannot prove is that a person was playing — a patient enough bot could play legitimately and submit a genuine log. That limit is inherent to any game whose logic runs in the browser.