Privacy policy

This policy explains what information WordsGuess (wordsguess.com) collects when you play, why, who helps us process it, and the choices you have. The short version: you can play the daily puzzle without giving us anything, we never sell your data, and optional analytics only run if you allow them.

Who we are

WordsGuess is run by an independent developer, who is responsible for the personal data described here. For any privacy question or request, email guesswordgmae1@gmail.com.

What we collect

If you play without an account

Your game progress, statistics and settings are saved in your own browser's local storage. They are not sent to us.

If you join a battle as a guest

• The display name you type.
• A random account identifier we create for you (no email address is needed).
• Your battle activity: the battles you join, your guesses, scores and results, which other players in the battle can see.

If you create an account

• Your email address, used to sign you in.
• Your display name, if you set one.
• Your password, if you create one. We store only a one-way hash of it (bcrypt), never the password itself.
• When your account was created and when you last signed in.
• Your game statistics (games played and won, streaks and guess distribution), so they follow you across devices.
• Your battle activity, as for guests.

When you sign in by email we send you a one-time code. Codes expire after one hour. We only email you to sign you in; we don't send newsletters or marketing.

Technical data

Like any website, our hosting providers receive your IP address, browser details and the pages or API requests you make, so they can deliver the site, keep it secure and investigate errors.

Analytics

• Vercel Web Analytics (always on): counts page views and basic device and country information. It does not use cookies and does not identify individual visitors.
• Google Analytics (only if you allow it): measures how visitors use the site, using cookies.
• LogRocket (only if you allow it): records how the game page behaves during your visit (clicks, key presses in the game, what appears on screen, and errors) so we can reproduce and fix bugs. If you're signed in with an account, the recording is linked to your account email and display name. Guest sessions are not linked to a name.

We ask before loading Google Analytics or LogRocket. If you decline, they are never loaded.

Why we use it

• To run the game: accounts, sign-in, saving stats and running battles. This is necessary to provide the service you asked for.
• To keep it secure and working: hosting logs and error investigation, based on our legitimate interest in a safe, reliable site.
• To improve the game: Google Analytics and LogRocket, based on your consent, which you can withdraw at any time.

Who processes data for us

We use these service providers. They process data on our behalf, only for the purposes above:

• Vercel: hosts the website and provides Web Analytics.
• Render: hosts the game server.
• MongoDB: database hosting for accounts, stats and battles.
• Twilio SendGrid: sends sign-in emails.
• Google: Google Analytics, only with your consent.
• LogRocket: session recording, only with your consent.

These providers may process data in the United States and other countries outside your own. Where the law requires it, transfers rely on safeguards such as the providers' standard contractual clauses. We don't sell your personal data or share it for advertising.

How long we keep it

• Account, guest, stats and battle data: for as long as the account exists. Email us to have it deleted.
• Sign-in codes: deleted automatically after one hour.
• Data in your browser's local storage: until you clear it.
• Analytics and recordings: kept according to each provider's retention settings, then deleted.

Cookies and local storage

WordsGuess stores a few items in your browser to work properly: your game progress and statistics, your settings, your sign-in session and your analytics choice. If you allow analytics, Google Analytics sets its own cookies (named _ga and _ga_*) and LogRocket stores an identifier for the recording session.

You can change your analytics choice at any time. Clearing it brings the question back the next time you open the game; if you previously allowed analytics, reload the game after choosing to stop them.

Change my analytics choice

Your rights

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or move it to another service. You can withdraw consent for analytics at any time using the button above. To make a request, email guesswordgmae1@gmail.com from the address on your account, or tell us your guest display name and roughly when you played. You also have the right to complain to your local data protection authority.

Children

WordsGuess is a general-audience game and is not directed at children under 13. We don't knowingly collect personal data from children under 13. If you believe a child has created an account, contact us and we'll delete it.

Changes to this policy

If we change how we handle data, we'll update this page and the date at the top.