Privacy policy

In short

Wordantle needs no account: your games then stay in your browser. An optional account, opened with Google, also keeps them on our server so you find them on all your devices. We sell no data and ask Google for neither your name nor your email address.

What stays on your device

Your games, stats, streaks, settings, nickname and your cookie choice are kept in your browser's storage. They never leave your device: clearing the site's data in your browser erases them.

Two cookies run the game itself and need no consent: feelword_<game>_<language> brings back your free game in progress (30 days), feelword_lang remembers the language you chose (1 year).

If you sign in, two more cookies hold your session, with no consent asked since the account you ask for needs them: feelword_session (the session's token, which pages cannot read) and feelword_account (only says this browser is signed in), 400 days, renewed on each visit. feelword_google lives only for the 10 minutes of a sign-in.

What the server receives

Each word you guess is sent to the server to work out its answer; without an account, it is not kept with your identity. The server counts the games won and given up per game and level, and how many players found each daily challenge, with no IP address or identifier.

In a room, your nickname and your words are shown to the other players and kept in memory while the room lives: they are gone after 3 hours without activity.

To protect the site from abuse, the server's relay logs each request with the visitor's IP address. These logs are used for security only and are erased after 6 months at most.

Your account, if you open one

Signing in goes through Google, and Google only. We ask it for your Google account's identifier alone (the “openid” scope): neither your name, nor your email address, nor your picture. We keep only a hash of it (SHA-256), used only to know you at your next sign-in. On Google's page, Google's privacy policy applies to what Google sees.

While the account exists, the server keeps: that hash, your nickname and your photo if you add one (shown to other players in rooms; the photo is cropped and saved again by your browser, without its metadata such as GPS location), the day the account was made, your games and stats as your browser saves them (guessed words included), and a hash of each open session, erased when you sign out or after 400 days without a visit.

Legal basis: providing the service you ask for by opening the account (GDPR article 6.1.b). This data is never sold, shared, or used for ads.

On the “My account” page you change your nickname and photo and delete the account: it is then erased from the server at once; the server's backup copies, kept on site, go as they are renewed. A copy of all the account's data is sent to you on request at [email protected]. Signing out makes the device forget your games; the account keeps them.

When you find a daily or free game (alone and without hints), the server keeps the number of guesses, their pace and your progress (not the words you tried), linked to your account when you are signed in, anonymous otherwise: these games will be opponents in the coming ranked mode. Deleting the account makes them anonymous.

Analytics and ads, only with your consent

If the site measures its audience or shows ads, it does so with Google: Google Analytics (page views, device, approximate country) and Google ads, personalized only if you agree. Without your consent, none of these cookies is set.

Your choice is kept for 6 months, then asked again. The “Manage cookies” link at the foot of every page changes it at any time.

Service providers

Cloudflare (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA) relays and protects the traffic: it sees your IP address. It is certified under the EU–US Data Privacy Framework. Google only comes in with your consent (see above), or when you choose to sign in with it.

The games' pictures are served by our server and the fonts are hosted on the site: your browser contacts neither Wikipedia, nor Wikimedia Commons, nor Google Fonts.

Your rights

You can ask to access, correct or erase your data, or object to its processing, by writing to [email protected]; with an account, the “My account” page does it too, at once. You can also complain to the CNIL, the French data protection authority.

Data controller: Félix Lecuyer, [email protected].