Privacy Policy

1. What we collect

You can play without an account. Your results are then kept only on your device, in your browser or in the app, and never reach us.

If you create an account, we collect:

• Your email address, used to sign you in. If you sign in with Apple and choose to hide your email, we receive an Apple relay address instead.
• Your name, and from Google or Facebook your profile picture, if the provider you sign in with shares them.
• Your username, and whether your profile is public or private.
• Your game results: the puzzle, your guesses, how many tries and how long it took, the difficulty, and whether you won. Streaks are not stored; they are worked out from your results whenever they are shown.
• Feedback you send us: the category you pick and your message, linked to your account.
• Reports you make: when you report another player's username, we store who reported whom and the name at that moment, so we can review it. The player you report is not told who reported them.
• Words you guess that are not in our word list, with the difficulty and the puzzle, linked to your account. They are sent automatically so we can find words to add. This happens only while you are signed in; when you play without an account, your guesses stay on your device.

2. How we use your data

Your data is used only to run the game: to sign you in, keep your results in sync across your devices, show your statistics, place you on the leaderboard, read and answer your feedback, and find words missing from our list. We do not sell your data, use it for advertising, or track you across other apps and websites.

Players you block are hidden from your leaderboard. That list is kept only on your device and is never sent to us.

If your profile is public, other players can see your username, your results and your place on the leaderboard. If you make it private, you are left off the leaderboard and your profile page cannot be viewed. You can change this at any time in your profile.

3. Third-party services

• Your account, results, feedback and word reports are stored on our own server, hosted with DigitalOcean.
• Sign-in codes are emailed through SendGrid, which receives your email address for that purpose.
• Apple, Google and Facebook are optional ways to sign in. If you use one, its privacy policy applies to the data processed through its service.
• The website is served by Vercel, whose analytics count page visits and measure loading speed without cookies. The iOS app contains no analytics.

4. Keeping and deleting your data

Your data is kept for as long as your account exists. You can delete your account yourself at any time: open your profile and choose Delete bo profil. This removes your account, your results, your feedback and the words you reported. If you cannot sign in any more, see our data deletion page.

5. Contact

For any privacy-related questions, contact us at hi@palabradidia.com.