Privacy Policy

1. What we collect

You can play without an account. Your results are then kept only on your device, in your browser or in the app. We receive only the usage data described below, which is not linked to any account.

If you create an account, we collect:

• Your email address, used to sign you in. If you sign in with Apple and choose to hide your email, we receive an Apple relay address instead.
• Your name, and from Google or Facebook your profile picture, if the provider you sign in with shares them.
• Your username, and whether your profile is public or private.
• Your game results: the puzzle, your guesses, how many tries and how long it took, the difficulty, and whether you won. Streaks are not stored; they are worked out from your results whenever they are shown.
• Your punto: the points you earn by playing the daily word and spend on hints, what each one was earned or spent on, and in which games you used a hint.
• Feedback you send us: the category you pick and your message, linked to your account.
• Reports you make: when you report another player's username, we store who reported whom and the name at that moment, so we can review it. The player you report is not told who reported them.
• Words you guess that are not in our word list, with the difficulty and the puzzle, linked to your account. They are sent automatically so we can find words to add. This happens only while you are signed in; when you play without an account, your guesses stay on your device.

With or without an account, the website and the apps also send us:

• Usage data: which screens you open and what you do in the game, such as starting and finishing the daily word, how many tries it took, whether you used a hint, sharing a result, and which steps of the introduction you saw. With it come your device type, operating system, app version, language, and an approximate location (country and city) worked out from your IP address. Your guesses, the answer, your email address and your username are never part of it. If you are signed in, it is linked to your account's id, so your phone and your browser count as one player. On the website it is kept in memory only: no cookies are set, and you count as a new visitor on every visit.
• Crash and error reports: what went wrong and where in the code, with your device type, operating system and app version. They are not linked to you or your account.

2. How we use your data

Your data is used only to run the game: to sign you in, keep your results in sync across your devices, show your statistics, place you on the leaderboard, read and answer your feedback, and find words missing from our list. We do not sell your data, use it for advertising, or track you across other apps and websites.

Usage data and crash reports are used only to see which parts of the game people use, where they get stuck, and what breaks, so we can improve it.

Daily reminders are scheduled by your phone itself, not sent from our server. Whether you turned them on, and the time you picked, are part of the usage data.

Players you block are hidden from your leaderboard. That list is kept only on your device and is never sent to us.

If your profile is public, other players can see your username, your results, whether you used a hint, and your place on the leaderboard. If you make it private, you are left off the leaderboard and your profile page cannot be viewed. You can change this at any time in your profile.

3. Third-party services

• Your account, results, feedback and word reports are stored on our own server, hosted with DigitalOcean.
• Sign-in codes are emailed through SendGrid, which receives your email address for that purpose.
• Apple, Google and Facebook are optional ways to sign in. If you use one, its privacy policy applies to the data processed through its service.
• The website is served by Vercel, whose analytics count page visits and measure loading speed without cookies.
• Usage data is processed by PostHog, on its servers in the European Union.
• Crash and error reports are processed by Sentry, on its servers in the European Union.

4. Keeping and deleting your data

Your data is kept for as long as your account exists. You can delete your account yourself at any time: open your profile and choose Delete bo profil. This removes your account, your results, your punto, your feedback and the words you reported. Usage data linked to your account's id is deleted on request: email us at the address below. Crash reports are deleted automatically within 90 days. If you cannot sign in any more, see our data deletion page.

5. Contact

For any privacy-related questions, contact us at hi@palabradidia.com.