Every game is recorded: the two words, the language, the route you took, how many steps and words it cost, how long it took, and a random identifier that exists only inside that game. No name and no address is attached to any of it. These records are kept indefinitely, because the leaderboard is made of them.
Your email address and the username you chose. If you signed in with Google, also the account identifier Google gives us and the tokens that sign-in produced. Kept until you delete the account.
One row per device you sign in on, and a cookie on that device holding a random token. Your IP address is not stored on it. Kept for 180 days, or until you sign out.
A one-time token for each login link, kept for minutes. Alongside it, a short-lived counter keyed by IP address, so nobody can use the login form to send mail to strangers. That counter is read for nothing else and expires within the hour.
A login cookie, a short-lived cookie during Google sign-in, and one entry in your browser's local storage that lets you rejoin a game after a reload, kept for 24 hours. All three are needed for the site to work.
This runs on a global network, so the data is processed in whichever country is closest to whoever is using it.
If you have an account and choose a username, that username appears beside your best runs on the public leaderboard for a board, and search engines can index those pages. The words you picked are never published, since they are the answer to a puzzle other people are still playing, though you can download your own. A board's map does draw the shape of the routes taken on it, without any of the words.
Play without signing in, or without choosing a username, and nothing of yours carries a name.
On your account page you can download everything held about you as a file, change your username, or delete your account. Deleting anonymizes the games you played, leaving them on the boards with no name. You can choose to delete them instead.
Anything else, write to [email protected].
Last updated 24 August 2026.