Privacy
Updated October 24, 2026
On your device
Your name, look, stats, history and settings are saved in your browser. Clearing browser data or tapping Erase in Settings deletes them.
While you play
Your browser talks to your partner's through public relay servers (broker.emqx.io, test.mosquitto.org) under your room code. Messages include your name, look, letters, words and timings. The relays are run by others and may log traffic. Anyone with your room code could read them. Keep codes unguessable and private details out of names.
Transfer codes
Your save is encrypted in your browser before it is uploaded. The relay only holds unreadable data. Cancelling clears it.
Google sign-in (optional)
- Google shares your name, email and photo. Nothing else. No Drive access.
- These stay in your browser, not in the cloud save.
- Your save is one record in Google Firebase (Cloud Firestore), tied to your account. Rules let only you read or write it. The project owner can technically see records in the Firebase console and does not read them.
- Sign out or delete the cloud save in Settings.
- Use of Google user data follows the Google API Services User Data Policy, including Limited Use.
Third parties
GitHub Pages hosts the site. Google Fonts serves the font. Google and Firebase load only if you sign in. Each can see your IP address.
No tracking
No cookies, ads or analytics.
Children
Not directed at children under 13.