Privacy & Cookie Policy
Last updated: 3 September 2026
A working template, not legal advice. Replace the example.com
addresses, confirm the partner list in section 3 matches what you actually run,
and have it reviewed against the law where you and your readers are based. Then
delete this box.
1. The short version
- The game runs entirely in your browser. Your guesses are never transmitted to us or anyone else.
- There are no accounts, and we do not collect email addresses.
- We show advertising, and our ad partners set cookies and may profile you.
- You can opt out — see section 6.
2. What we collect ourselves
- Nothing about how you play. Guesses are checked in the page against a word list already downloaded to your browser. We never see them.
-
Your streak and statistics are saved in your browser's local
storage under keys beginning
wordbox-. They stay on your device, we cannot read them, and clearing your browser data resets them. - Server logs. Our host records standard request data — IP address, timestamp, page requested, referrer, user-agent — for security and fault diagnosis, retained for a limited period.
- Email you send us. Kept as long as needed to deal with it.
3. Advertising
This site is funded by advertising served through Adsterra and its demand partners. When a page loads, those partners may set and read cookies or similar identifiers, receive your IP address, approximate location, device and browser characteristics and the page you are on, and use that to build a profile for selecting ads here and elsewhere.
They act as independent controllers of that data. We never receive the profiles and cannot delete them on your behalf. Their policy governs what they do: adsterra.com/privacy-policy.
Advertising partners never receive your guesses or your statistics.
4. Cookies
We set no cookies of our own. Every cookie on this site comes from the advertising partners described above, used for ad selection, frequency capping, and measurement. You can block or clear them in your browser settings; ads will still appear, just selected without a profile.
5. Legal bases (UK/EU visitors)
Where the GDPR applies we rely on legitimate interest for server logs and on your consent for advertising cookies. Consent must be collected before those scripts run and be as easy to withdraw as to give.
This template ships without a consent management platform. If you have EU or UK
visitors you need one, gating the ad scripts until consent is given. See
README.md for where that hooks into the loader.
6. Your choices
Depending on where you live you may have rights to access, correct, delete, or port your data, to object to processing, and to opt out of the sale or sharing of personal information. Email privacy@example.com.
Industry opt-outs for interest-based advertising:
7. Children
This site is for a general adult audience and is not directed at children under 13 (or 16 where local law sets that threshold). We do not knowingly collect their data.
8. Transfers and changes
Our hosting and advertising partners operate internationally, so data may be processed outside your country, including in the United States. We will update this page when our practices change and revise the date above.