Worduel: the website worduel.gg and crossword.kz, and the apps for iPhone and Android. Last updated 26 October 2026
Worduel is a free word game. You can play without an account and without telling us who you are. This policy explains what we store, why, and how to get it deleted
Every player gets a random player number. With it we store your games (the words you guessed, the result, how long it took), your rating, your daily streak, which platform you played on (web, iPhone or Android) and the language of the interface. That is what keeps your progress and matches you with opponents close to your rating
When you duel a friend, we hold the room while you play it: the invite code, the hidden word, the guesses and which two player numbers are in it. That is what lets you both see the same board. The room is deleted a few hours after the last move, and your name and picture are shown only to the friend in it with you
Signing in is optional. On iPhone you sign in with Apple, on Android with Google, and on the web with either of the two. From Apple or Google we receive an account identifier, your email address if they share a verified one (Apple may give a private relay address instead), and your name, which only fills in your nickname if you have none yet. You can change the nickname at any time. We also keep the country flag shown next to your name, taken from your device's region setting. Accounts made with an email and a password before sign in with Apple existed keep that email and a salted hash of the password, never the password itself
You can add friends by their name, by their friend code, through your personal invite link, or by playing a duel with them. A friend sees your nickname, picture, country flag, daily streak and rating, and you see theirs. Nothing else is shared between friends. Your friend code and invite link are made from random letters and do not contain your player number. You can remove a friend at any time, and deleting your account removes you from everybody's list
If you allow notifications, we store what is needed to reach that device: on iPhone a push token (Apple delivers the notification), in a browser the push subscription your browser gives us (your browser's own push service delivers it, for example Google's, Mozilla's, Apple's or Microsoft's). The Android app has no push service: it makes a random installation identifier, sends it to us when it starts, even before you allow notifications, and fetches its notifications from us with it. With each we keep your time zone and interface language, so that reminders about your streak, news from your friends and a few other notes about the game reach you at a sensible local time and in your language. You can turn notifications off in your phone's or browser's settings at any time
On the website (worduel.gg and crossword.kz), if you allow notifications in your browser, we store the address of your browser's push subscription at its push service, together with its keys. With it we keep your time zone, the language of the interface, whether the device is a phone or a computer, your answers to the browser's permission prompt and which notifications you tap. We use it to send you a reminder when you have been away, at most once a day, and on worduel.gg sometimes news about our other games. You can switch the notifications off in the game's settings or in your browser's site settings, and deleting your account deletes the subscription and stops them
So that nobody can flood us with made-up subscriptions, we count how many new browser subscriptions and answers to the permission prompt come from one network address in a day. We never store the address itself, only a one-way code made from it that changes every day, and the count is deleted the next day. A browser subscription that belongs to no account and has not checked in for 90 days is deleted, and so are answers to the permission prompt after 180 days
If your account has an email address, we send a few emails about your own game, from king@worduel.gg: a welcome when you sign in, a weekly report, a note when your streak reaches a milestone or burns and can still be won back, and the like. At most one a day besides the welcome. Every email has an Unsubscribe link that works in one click, and your account on the site has a switch for them. The emails are sent through Brevo (Sendinblue SAS, France), which receives your address and the email to deliver it, and tells us when an address bounces or reports an email as spam, so that we stop writing to it
If you answer the short survey, on the website or in an app, we store your star rating and anything you write there, next to your player number. With it we keep the language of the screen and of the words, whether it was the website, iPhone or Android, the app version and the time. We also remember whether you answered or put the survey off, so it does not keep coming back
worduel.gg counts its visits with Ahrefs Web Analytics (Ahrefs Pte. Ltd., Singapore). It sets no cookies, keeps no IP address with what it counts, and shows us only totals: which pages are read, which sites and searches bring people here, and their countries, browsers and devices. crossword.kz and the apps do not use it
The iPhone app and the Android app each show one full-screen ad after a game you won, and nowhere else. The website shows no ads. The ads come from Google AdMob (Google LLC), whose code in the app collects what it needs to show and count them. Google uses this to choose and measure ads, to limit how often they appear and to prevent fraud. Your player number, name and email are never passed to Google for advertising. How Google uses this data: policies.google.com/technologies/partner-sites
On iPhone that code collects your IP address and the approximate location it implies, device and app information, the app's vendor identifier, how you interact with the ads, and the device's advertising identifier, but that one only if you allow tracking when the app asks, and then Google also uses it to make ads closer to your interests. You can stop tracking in your iPhone's settings, under Privacy & Security, then Tracking
On Android that code collects your IP address and the approximate location it implies, device and app information, an app set ID, the device's advertising identifier, how you interact with the ads, and diagnostics (how the app and the advertising code perform, such as launch time, hang rate and energy use). Android has no tracking prompt: you can reset or delete the advertising identifier in your phone's settings, under Privacy, then Ads, or under Google, then Ads, depending on the phone
In the European Economic Area, the United Kingdom and Switzerland both apps ask for your consent through Google's consent form before any ad, and Privacy settings on the account screen lets you change your answer
Remove Ads is a one-time purchase in both apps. On iPhone Apple takes the payment and on Android Google Play does; we receive no payment details. The app asks Apple or Google Play whether your Apple ID or your Google account has bought it. Once bought, the app shows no ads, does not load Google's advertising code, and does not request an ad or the consent form
We do not sell or rent your data, and apart from the advertising in the iPhone and Android apps described above, the apps contain no third party analytics, advertising or tracking code
Only to run the game: to save your progress and bring it to another device, match you by rating, keep your streak and its freezes, show you and your friends to each other, send the notifications you allowed and the emails described above, and count anonymous totals that help us improve the game
We do not share your personal data with anyone for their own use. Apple and Google take part in signing in, Apple delivers iPhone notifications, your browser's push service delivers browser notifications, Brevo delivers emails, and Ahrefs counts visits to worduel.gg. We may disclose information if the law requires it
In both apps, Google receives the advertising data described under Ads in the apps, to show the ads
Data is stored on our own server and travels over encrypted connections (HTTPS)
You can delete your account at any time from inside the app or on the site: tap your avatar, then Delete account. Step by step instructions, and a way to ask by email if you can no longer open the app, are on worduel.gg/delete-account
Deletion removes your nickname, email address, country, password, friends, invite link and the link to your Apple or Google account, and stops notifications. The gameplay history stays, with no name or login attached, so the anonymous totals stay correct. We keep an internal copy of the email address of a deleted account for our own records; it is never shown and never used to contact you, and we erase it when you ask
Worduel is not directed at children under 13 and we do not knowingly collect their personal data
We post short videos about our games on our YouTube channel. To upload them we use YouTube API Services in one internal tool that only we use. It uploads our own videos to our own channel and shows no YouTube data to anyone
The tool asks our channel's Google account for permission to upload videos and to read the channel name and ID. It keeps only its sign-in token, on our own computer. We store no YouTube data on our servers and share none. Google sign-in for players does not use YouTube
By using YouTube API Services we agree to the YouTube Terms of Service (youtube.com/t/terms). How Google handles data is in the Google Privacy Policy (policies.google.com/privacy)
Access can be removed at any time in the Google security settings (myaccount.google.com/permissions). When it is removed, or when you ask us under Contact, we delete the token within 7 days
Questions or deletion requests: abzal@erumaru.com