Your games, your device.
Guest play uses local storage and an opaque device cookie. Server-validated games are stored for real aggregate comparisons. Optional accounts store a username, public name, password hash, recovery-code hash, history and progress; signed-in players' qualifying Daily results appear publicly under their public name. Your recovery code is shown once for you to save; only its hash is stored on the server. Passwords and session cookies are never published. Imported local records stay personal. No remote analytics or advertising provider is connected. Essential session cookies support login and progress sync. Challenge links expire after 30 days; anyone with the link can see the creator's result and play the same puzzle, without seeing account identities. After a word game, the server requests a dictionary excerpt from Wiktionary and caches it. It sends the puzzle word, never your browser address, account or guesses. Opening the dictionary link visits the external site.
The operator can view aggregate game activity. Optional internal measurement also records visits, arrival sources, active playing time, replays and navigation between games, only when you allow it. Hashed device/account identifiers connect sessions; no advertising provider or external analytics service is connected. Use the preferences below to change your choice.
Publisher and data controller
Publisher and contact details have not yet been completed.
Hosting : Hetzner Online GmbH
Industriestr. 25, 91710 Gunzenhausen, Germany
Helsinki, Finland
How your data is used
Games can be played without an account. A username, a password hash, recovery-code hash, sessions, saved games and results provide account access and progress synchronisation. These functions are necessary to provide the service. Security limits use short-lived hashed address/device buckets to prevent abuse, based on our legitimate interest in protecting the service. Registered display names and eligible daily results appear in leaderboards.
Optional measurement
Only with your consent, internal measurement records pages, arrival sources, approximate active time and actions, linked through hashed account/device identifiers. Referrers contain only a domain, never a complete URL. It helps improve the games and retention. You can withdraw consent at any time in cookie preferences; DNT/GPC are respected. No advertising or external analytics provider is connected.
Retention and recipients
Account history is kept until account deletion; guest history remains associated with the device cookie and can be covered by an erasure request. Measurement events are retained for 90 days and session/source summaries for 390 days, purged during collection or maintenance. Sessions expire after 30 days. Daily private backups expire within 14 days. A restricted deletion journal is kept to prevent deleted accounts reappearing after restoration. Only the operator, authorised administrators and configured hosting/backup providers have access; public leaderboards display limited results, never credentials.
Your choices and rights
Your account settings let you change your public name and delete your account after password verification. Guest progress on this browser remains separate. Contact the controller for access, correction, erasure, restriction, portability or an objection where applicable, including guest data. Do not send your password or recovery code. You may complain to your local data-protection authority. Your choices do not affect access to games.
Cookie preferences
Optional measurement is disabled.
Game records remain necessary for saving your progress. Optional events are kept for 90 days; session summaries for 390 days. No passwords, answers or private links are recorded. You can change your choice here at any time.