To assess what survives modern filtering, we tested dozens of client-side web titles across three common baseline environments: an active educational Google Workspace profile managed by GoGuardian, a corporate workstation governed by Zscaler, and a hardware-enforced FortiGate network filter. The following 10 titles functioned reliably without triggering DNS interception or client-side administrative warnings:
1. Chrome Dino (Chromium Native)
Hard-coded directly into the Chromium source tree, the offline runner requires zero inbound external requests. Accessible locally via chrome://dino or mirrored via static GitHub Pages endpoints, it executes entirely within the browser's local sandbox, rendering it invisible to standard DNS filters.
2. 2048 (Gabriele Cirulli Open Source)
The original open-source mathematical puzzle runs on minimal vanilla JavaScript and CSS. Because hundreds of static forks exist across developer-facing domains like GitHub Pages and personal portfolio repos, automated scrapers identify the code footprint as educational code rather than commercial gaming.
3. Lichess (P2P Chess Sandbox)
Unlike commercial chess platforms loaded with community feeds and heavy ad trackers, Lichess operates as an open-source non-profit. Many institutional firewalls whitelist the domain under educational and competitive sports classifications, permitting real-time WebSockets to pass unhindered.
4. Google Snake & Doodle Archives
Stored directly within Google’s core infrastructure domains (such as google.com/search and doodles.google), these titles are rarely blocked. Terminating access to Google's primary search subnets cripples administrative tools and student search functionality, forcing content filters to leave these paths unrestricted.
5. Spelunky HTML5 (Community Port)
The classic platformer’s open-source WebAssembly/HTML5 port compiles the original game logic into static client-side memory. When hosted on clean academic or code-sharing domains, it pulls all assets in an initial HTTP/2 bundle and requires no ongoing telemetry.
6. A Dark Room (Doublespeak Games)
A purely text-based adventure, this minimalist strategy game uses basic DOM elements and standard typographic styling. Without canvas-heavy rendering or outbound ad calls, automated inspection engines register its traffic as static text delivery.
7. Slowroads.io
Slowroads delivers procedurally generated scenery via client-side WebGL. It processes graphics locally on the client's GPU, demanding minimal ongoing network bandwidth after the browser caches the core engine assets.
8. Hextris (Open-Source GitHub Deployment)
A fast-paced puzzle game based on hexagonal rotation, Hextris requires minimal bandwidth. Like 2048, its presence on hundreds of open GitHub repositories allows users to load it from sites classified as developer documentation.
9. Browser Tetris (Static Canvas Engines)
Modern, unmonetized clones built directly on HTML5 Canvas display predictable resource consumption and generate no tracking cookies. These micro-games rarely trigger category alarms because their asset footprints mimic modern interactive web applications.
10. GeoGuessr Community Clones (OpenStreetMap Engines)
Open-source variations that pull geographical data directly from OpenStreetMap rather than commercial API endpoints frequently slip through academic filters. Content engines routinely mark OpenStreetMap queries as cartographic research.
