Privacy

Last updated 14 November 2026

Who we are

Wordflation is run by J. Southon, a sole trader trading as Wordflation (postal address available on request). For anything about your data, contact [email protected].

What stays on your device

The game saves your best score, recent results, settings (like sound), a run in progress, how many free Endless runs you've used today, and whether you've unlocked Unlimited in your browser's local storage. This never leaves your device unless you use an account (below). Clearing your browser data removes it.

What we store on our servers

• A random account ID, created automatically the first time you play the daily, so the daily challenge is one go per player. It isn't linked to your name or email unless you sign in.
• Daily results: the date, rounds survived, how the run ended, in-game money earned, and for each round the category, the cost of your answer, how long you took, how many tries were rejected and any "starting with" letter. We do not store the words you type, except one you choose to report with Should count?: that word, the prompt and your account ID are kept privately so we can review missing answers. Reports are never shown publicly.
• If you sign in with Discord (or another service we offer): your email address, display name and profile picture as provided by that service, and its account identifier. We never see your passwords.
• The leaderboard: if you're signed in, your display name (or a nickname you pick in the game; Google names are shortened to first name and last initial) and that day's rounds are shown publicly on the daily leaderboard. Guests are never listed by name. Everyone's rounds count anonymously towards the "better than X% of today's players" figure.
• If you buy Unlimited: a record that your account has it, and Stripe's payment reference. Card details are handled entirely by Stripe and never reach us. Each time checkout is opened we note your account ID and the time, to stop card fraud; these notes are deleted after about a day.
• If you claim a gift link: which link your account claimed, so each link works the number of times it should.
• If something goes wrong with a payment: a short support record (your account ID, the Stripe payment reference and what happened), so we can put it right.
• Anonymous usage counts: how many times a day things happen in the game (the site was opened, the demo was watched or skipped, a daily was started or finished, a result was shared). Only the daily totals are stored, with nothing that identifies you or your device, and no cookies.
• If you turn on reminders: your browser's push subscription and your time zone, so the reminder arrives in the morning where you are.

Why we use it

• To run the game and your account, and to provide Unlimited if you buy it (performance of a contract).
• To keep the daily fair and to balance the game from aggregated results, for example how many rounds people typically survive (our legitimate interests).
• To send reminders, only if you turn them on (consent, which you can withdraw in your browser settings).

Who processes it for us

• Supabase (database, sign-in and server functions), hosted in the EU (Ireland).
• Netlify (serves the website). Netlify is based in the US; transfers are covered by its standard data protection terms.
• Stripe (payments for Unlimited). Purchases are sold through Link, Stripe’s merchant of record service, which also handles tax and receipts under its own privacy policy.
• Discord or Google, only if you choose to sign in with one of them.
• Your browser's push service (e.g. Google, Apple or Mozilla), only if you turn on reminders.
• GitHub (our private issue tracker) and Discord (a private staff channel), only if something goes wrong with a payment: an automatic support note with your account ID and payment reference. Never your name, email or card details.

We don't use advertising networks or third-party analytics. Fonts are served from our own site.

How long we keep it

• Account and results: until you delete your account.
• Guest accounts (never signed in) with no daily played and no reminders: deleted after 7 days.
• Guest accounts that haven't played a daily for 12 months: deleted, with their results.
• Anonymous usage counts: kept as daily totals; they contain nothing about you.
• Purchase records: as long as the law requires for tax and accounting, typically 6 years.
• Checkout fraud notes: about a day.
• Payment support records: until the problem is sorted, then as long as our accounting records need them.

Your rights

You can delete your account and its data from the game (Account → Delete account). You can also ask us for a copy of your data, to correct it, or to stop processing it, by emailing [email protected]. If you're unhappy with how we handle your data you can complain to the UK Information Commissioner's Office (ico.org.uk), or to your local data protection authority if you live outside the UK.

Children

Wordflation isn't directed at children under 13. Accounts are not intended for them.

Changes

If this policy changes in a way that matters, we'll say so in the game before it takes effect.