Privacy

WordleX is a daily word game. There are no analytics, no advertising, no third party trackers, and nothing is sold or shared. This page says exactly what is stored.

Playing without an account

Each Track you open sets one signed, httpOnly cookie named wordlex_game_<language>_<length>, holding an opaque Game id. It expires when that WordleX Day ends. There are at most twelve, and they are the only thing that identifies you.

We keep a record of each Game and each Guess — the words typed and when. Words you type that are not in our Dictionary are recorded too, so a speaker can review them and add the ones we are missing.

No name, no email address, no account, and no advertising or analytics identifier.

Signing in with Google

From Google we receive your name, email address and profile image URL. The scopes we ask for are openid, email and profile and nothing else — we never read Gmail, Drive, contacts, or anything beyond basic profile. The OAuth tokens for that connection are stored on our server.

Each session records its IP address and browser user-agent string, along with the session token and its expiry. Signing in also stores your Games, Guesses, Badges and reviewed-word contributions against your Account rather than against a cookie.

One session cookie is set, httpOnly and Secure, scoped so that signing in once covers the whole site. There are no tracking, advertising or analytics cookies.

Who else sees it

Google, only for sign-in. Vercel, for hosting in Singapore, plus ordinary request logs. Supabase, for the database, in ap-southeast-1 (Singapore).

Nobody else. No analytics, no error tracker, no ad network, and nothing sold or shared. Your data lives in Singapore.

Deleting your Account

Deleting removes the Google connection, the name, the email address, the profile image and every session. The gameplay history stays in the database, unlinked from any person and unreachable — signing in again with the same Google account starts over at zero. We would rather say that plainly than claim everything is erased, because it is not.

There is no delete button in the interface yet. To have an Account deleted, write to TODO: contact email.

Children

WordleX is not directed at children and we do not knowingly collect data from them.

Changes

If this policy changes, the new version appears on this page with a new date above.