Effective Date: 10/25/2026
This Privacy Policy explains how Spella Word Game ("we", "us", or "our") collects, uses, discloses, and safeguards your information when you use our online word game ("Service"). By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.
When you sign in, we collect your email address so we can send you a sign-in link and keep track of your account. If you provide your name, we use it to personalize the Service. This information is used for authentication and to enhance your gaming experience.
Whether or not you sign in, we collect how you play each puzzle: where you place each tile and in what order, how long each move takes, the letters you choose for wild and choice tiles, words you search for in the in-game dictionary, whether you finish the puzzle, and your score. Gameplay data is linked to a random identifier stored in your browser and, if you are signed in, to your account.
If you turn on the daily puzzle reminder, we store the push address your browser gives us (and the keys needed to send to it), your time zone, and the anonymous or account identifier used for your games. We use these only to send one notification a day, and to skip it when you've already played. Turning the reminder off, or blocking notifications, removes or stops it.
If you request email reminders, we store your email address, chosen frequency, time zone, confirmation status and last delivery date. We send reminders only after you confirm your address. Each reminder includes an unsubscribe link. We use Resend to deliver these emails; we do not add tracking pixels.
We store a private browser identity in an HttpOnly cookie for up to one year so guests can keep their first puzzle results and circle memberships. Signing in can connect these to your account. Clearing browser storage without signing in can prevent you from recovering your guest identity.
When you create a challenge, anyone with its link can see the invitation name, puzzle number, score, accomplishment and scoring pattern. The link keeps its original result. Players who finish that puzzle can compare completed boards. Joining a circle shares your chosen name, daily scores and weekly participation with people who have its invitation link. Circle pages do not show your email address or board placements. Hosts can replace invitation links, remove members or close a circle; members can leave.
We use PostHog to understand product usage and diagnose problems. For challenge and circle flows, we collect masked session recordings of page layout and interactions, retained for 30 days. Input values, visible text and element attributes are masked; recording excludes network request and response bodies and headers, console logs, URL query strings and private circle codes. Existing research opt-outs also disable these recordings. Backend diagnostics record operation timings and success or failure without board contents or raw error messages.
We automatically collect information about your interaction with our Service. This may include your IP address, browser type, browser version, pages visited, and other diagnostic data to help us understand how our Service is used.
We also measure onboarding, puzzle starts and finishes, sharing and copying, board comparisons, sign-in, and reminder choices. We store referral sources and random invitation identifiers so we can understand which links lead to play and return visits. These product events use random browser and session identifiers and are linked to your account when you sign in. They do not contain your email, name, authentication links, dictionary search text, or full board. Recent events may be held in your browser for up to seven days while offline.
We use the collected information for the following purposes:
Gameplay data helps us understand and model how people reason through word puzzles. We use it for research and to train and evaluate AI models. Research datasets do not include your email address, name, or IP address. If we share gameplay data with others for these purposes, it will be de-identified.
To ask us to delete gameplay data we have already collected, contact us using the details below.
We do not sell or rent your personal information. We may share information in the following limited circumstances:
We use cookies and similar tracking technologies to monitor activity on our Service and store certain information. Most browsers allow you to refuse cookies, but if you do so, some parts of our Service may not function as intended.
We take reasonable measures to protect your information from unauthorized access and disclosure. However, no method of transmission over the Internet or method of electronic storage is completely secure.
Our Service may contain links to external sites that are not operated by us. Please note that we have no control over the content and practices of these sites, and we cannot be responsible for their privacy policies.
You have the right to access, update, or delete your personal information. If you wish to exercise these rights or have any questions about your personal data, please contact us using the details provided below.
Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe that we have collected information from a child under 13, please contact us immediately.
We may update this Privacy Policy from time to time. When changes are made, we will update the "Effective Date" at the top of this page. We encourage you to review this Privacy Policy periodically for any updates.
If you have any questions or concerns about this Privacy Policy, please contact us at:
Email: matt@spellagame.com