Every game is recorded: the two words, the route you took, how many steps and words it cost,
how long it took, and a random identifier that exists only inside that game. No name and no address is
attached to any of it. These records are kept indefinitely, because the leaderboard is made of them.
Your account
Your email address and the username you chose. If you signed in with Google, also the account identifier
Google gives us and the tokens that sign-in produced; a Google sign-in is joined to an existing account
only when Google says the address is verified. Kept until you delete the account. You need to be 16 or
older to create one.
Staying signed in
One row per device you sign in on, and a cookie on that device holding a random token. Your IP address is
not stored on it. Kept for 180 days, or until you sign out.
Sign-in links
A one-time token for each login link, kept for minutes. Alongside it, a short-lived counter keyed by IP
address, so nobody can use the login form to send mail to strangers. That counter is read for nothing else
and expires within the hour.
On your device
A login cookie, a short-lived cookie during Google sign-in, and two entries in your browser's local
storage: one that lets you rejoin a game after a reload, kept for 24 hours, and the day you first opened
the site, which is what lets it count a visit as a return. Nothing in that count says which browser it was.
Who else sees it
Cloudflare hosts the site and the database, sends the login email, and routes the requests to
the language model. Their network sees your IP address in order to deliver the site at all. Its web
analytics counts page views without a cookie or an identifier, and the site itself counts games, finishes,
shares and visits the same way: as tallies, never as a record of a person.
OpenAI, in the United States, writes the definitions: Cloudflare's AI Gateway sends the
words a game is played with to OpenAI, and to a model running on Cloudflare's own network when OpenAI does
not answer. Player names and account details are never sent. Only the words themselves, which is also why
a definition, once written, is kept and shown again to everyone who reaches the same words.
Google sees a sign-in only if you choose to sign in with Google, and handles it under its own
privacy policy.
This runs on a global network, so the data is processed in whichever country is closest to whoever is using it,
and the companies above are in the United States. Cloudflare and Google are certified under the EU-US Data
Privacy Framework; OpenAI processes under its standard API terms.
What is public
If you have an account and choose a username, that username appears beside your best runs on the public
leaderboard for a board, and search engines can index those pages. The words you picked are never published,
since they are the answer to a puzzle other people are still playing, though you can download your own. A
board's map does draw the shape of the routes taken on it, without any of the words.
Play without signing in, or without choosing a username, and nothing of yours carries a name.
What you can do
On your account page you can download everything held about you as a file, change your
username, or delete your account. Deleting anonymizes the games you played, leaving them on the boards with no
name. You can choose to delete them instead.
Anything else, write to contact@wortex.me. If you think something here is
being done wrongly, you can also complain to the data protection authority where you live.