( 01 — The brief )
A corner of the web that asks nothing of you.
The client wanted somewhere on the internet you can just play — no download, no account, no paywall, no “watch this ad to continue.” Good browser games that start the instant you click, on a phone or a laptop, and get out of the way. Instant beats installed. One red line went in before the first game did: every title is original or properly licensed from its maker — WugZo never scrapes or re-hosts another portal’s work.
— Not every useful thing is work; sometimes it’s just five unbothered minutes of play. The client, in every case on these pages, was us.
( 02 — The craft )
Twenty-one games, one clean shell.
Each game is a self-contained world — its own folder, its own rules — but all of them stand on one shared foundation: best-score memory, a click-to-wake sound engine, a canvas that auto-fits any screen at any pixel density, touch and keyboard treated as equals, and an honest pause the moment you switch tabs. Three flagships anchor the arcade — Iron Command, a full real-time strategy game fought to a nuclear finish; Palace of Blades, cinematic sword-and-platforming through a moonlit palace; and Strike Arena, a fast bot-deathmatch shooter.
How much do we sweat the small stuff? The Palace of Blades hero was re-animated through pass after named pass — a fluidity pass, a gallop pass, a rotoscope pass to kill the impossible joint angles — all because early playtesters called his run “comical.” He also hides a secret maximum-health shrine, for the players who go looking.
( 03 — The engine )
Letting strangers upload code — safely.
Anyone can submit a game. That’s a lovely idea and a security nightmare, so the intake is built like an airlock. Every uploaded archive is taken apart by hand — parsed natively, never shelling out to an unzip tool — and rejected outright for the classic traps: encryption, path-traversal, and zip-bombs capped hard at 200 MB and two thousand files. Symlinks are stripped. Then a scanner reads the code itself, flagging anything that reaches for the network, runs eval, or smuggles in a native executable.
Anything that fails those checks is rejected outright and never runs. What passes runs only inside a sandboxed preview with an opaque origin, carrying its scan report, so submitted code can’t so much as glance at the real site’s storage or cookies. Then a person plays it — reading that report and testing the game by hand — before it’s allowed anywhere near the catalogue.
We treat every upload like it’s radioactive — then a person plays it anyway.
( 04 — Foundations )
Free means free — and private by default.
WugZo keeps nothing about you, because there’s nothing to keep. There are no accounts and no tracking cookies; your best scores, favourites and ratings live in your own browser and never touch a server. Ratings show honest numbers only — no fake counts to fake popularity.
And it’s zero-dependency by conviction: no framework, no npm, no build-time bloat — plain HTML, CSS and JavaScript, with a single hand-written catalogue as the source of truth and a few tiny home-grown scripts that stamp out the pages. The result loads fast, stays cheap to run, and is served over HTTPS that renews itself. Boring where it should be; delightful where it counts.
( In brief )
- Games
- 21 in 6 categories
- Dependencies
- Zero
- Accounts & tracking
- None
- Every upload
- Scanned + sandboxed