Privacy, in plain language
Privacy Policy
This policy explains what information Word Chain handles when you play, sign in, appear on a leaderboard, start a Phrase session, send feedback, or visit pages that use analytics.
Who this policy covers
Word Chain is a browser-based word game operated by Wordchain Team through wordchain.net. In this policy, “Word Chain,” “we,” and “us” refer to Wordchain Team as the operator of that service. Questions and privacy requests can be sent to [email protected].
Information kept on your device
Word Chain uses browser storage so the game can work across visits. Depending on the features you use, local storage may contain settings, statistics, a device identifier, detailed Classic and Daily run history (including word chains), Wordy progress and streaks, a guest identifier and name, a preferred display name, and a local Phrase session identifier. Session storage may remember a temporary cloud-sync error for the current browser session.
This information normally remains on your device. Clearing site data in your browser removes it from that browser, although it does not delete information that was already sent to our cloud services. Blocking browser storage may prevent progress, settings, and some game modes from working correctly.
Accounts and authentication
If you choose Google sign-in, Firebase Authentication provides us with a Firebase user ID and the account information Google makes available for sign-in, such as your display name, email address, and profile photo. Phrase mode can use anonymous authentication automatically so one browser can securely own its pass-the-phone session; that anonymous Firebase account has a user ID but no Google profile information.
Google and Firebase may also process IP addresses, browser or device information, and security signals to authenticate users, prevent abuse, and keep sessions working.
Cloud gameplay and leaderboards
For signed-in players, Cloud Firestore stores aggregate game statistics such as best scores, best streaks, total games, total words, and difficulty-specific records. Daily and Wordy leaderboards store the best submitted result for a date, including score or completion time, streak or tries, mode or difficulty, and an update time. Detailed Classic and Daily run history stays in browser storage; the current cloud sync sends aggregate statistics and eligible leaderboard results, not the full local run log.
Leaderboard records are publicly readable. A leaderboard record can include your display name, profile photo URL, Firebase user ID, and game result. Choose a display name and profile photo you are comfortable making public.
Phrase mode stores its pass-the-phone session in Firestore for the session owner. That record can include the anonymous or signed-in owner ID, player names, submitted words, turn outcomes, hints, response times, scores, settings, and timestamps. We also create operational Phrase events from that session data to understand timeouts, hints, rematches, and round outcomes. Phrase sessions are not public leaderboards and are restricted to the authenticated owner by our database rules.
Feedback
When you send feedback, we store your email address, message, the page path where you opened the form, your browser user agent, the submission time, and your Firebase user ID if you are signed in. We use this information to understand the report, respond when needed, prevent abuse, and improve the service.
Analytics, security, fonts, and dictionary lookups
- Google Analytics is initialized on game pages after the first interaction or a short delay and on generated guide pages during page load. It helps us understand page visits and general use of the site and may use cookies or similar identifiers and process page URLs, approximate location, browser and device details, and interaction information.
- Firebase App Check uses reCAPTCHA to assess requests to protected cloud features. Google may process browser, device, network, and interaction signals for security and abuse prevention.
- Google Fonts receives standard web requests when the browser loads the typefaces used by the site. Datamuse receives the word or letter prefix you ask the game to validate or use for suggestions, along with standard request information such as an IP address and user agent.
- Our hosting and infrastructure providers may process IP addresses, request details, timestamps, and error or security logs needed to deliver and protect the service.
How we use information
- Provide gameplay, remember preferences and progress, authenticate accounts, sync aggregate statistics, run Phrase sessions, and publish eligible leaderboard results.
- Respond to feedback and privacy requests, diagnose failures, measure performance and use, improve the service, and prevent fraud, cheating, abuse, or security incidents.
Cookies and privacy choices
Browser storage used for settings, progress, authentication, and security supports features you request. Analytics controls differ by region, browser, and provider configuration. You can clear or block cookies and site data in your browser and use Google’s Analytics opt-out browser add-on. Some essential account, security, or game features may not work if their storage is blocked.
International processing
Word Chain and its service providers may process information in the United States and other countries where they operate. Word Chain’s Firebase functions are configured for the United States. Those countries may have privacy laws that differ from the laws where you live. We use providers that publish data-protection and security commitments, but government and legal access rules can vary by location.
Retention
Information in browser storage remains until it expires, the game replaces it, or you clear it. Cloud account, leaderboard, Phrase-session, feedback, analytics, and security data is retained for periods that depend on the feature, account status, integrity and support needs, legal obligations, provider settings, and backup cycles. We keep personal information only as long as reasonably needed for the purposes described here, then delete or de-identify it where practicable and legally permitted.
Your choices and rights
You can play many features without Google sign-in, sign out at any time, clear local site data, and avoid submitting feedback. Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information; withdraw consent; object to or restrict certain processing; or complain to a privacy regulator.
Send a request to [email protected]. We may need to verify your identity and may retain information where the law permits or requires it, including for security, fraud prevention, dispute handling, or preserving an accurate record after removing direct identifiers. Deleting cloud data does not clear browser storage on your devices, and clearing browser storage does not delete cloud records.
Children
Word Chain is a general-audience service and is not directed to children under 13. We do not knowingly collect personal information from a child under 13 without authorization required by law. If you believe a child provided personal information, contact us so we can review and delete it where appropriate.
Security
We use access rules, authentication, App Check, encrypted connections, and service-provider safeguards intended to protect information. No online service can guarantee absolute security, so please use an appropriate display name and avoid putting sensitive personal information into player names, submitted words, or feedback.
Changes to this policy
We may update this policy when the product, providers, or legal requirements change. The effective date at the top identifies the current version. If a change materially affects how we use personal information, we will provide additional notice where required.
Contact
For privacy questions or requests, email [email protected].