Privacy & Community Rules

Play with just a nickname

Registration is optional. Guest players receive a randomly assigned nickname and a random session cookie. The cookie is necessary to resume rounds, scores, and game progress in the same browser. You can customize a nickname. After you finish your first daily round, your nickname, verified score, and round progress may appear on the public global leaderboard even if you remain a guest. The leaderboard does not publish your session cookie, private player ID, guesses, or puzzle answers. The separate Weekly Cup continues to require a saved profile. You do not need to give a legal name, address, telephone number, or email.

What data stays

The game stores your chosen nickname, account creation/activity time, your guesses and scores, and any challenge invitations or chat messages you create. Claimed profiles can have public passkey credentials and one-time recovery-code hashes. The server never stores passkey private keys or unencrypted recovery codes. A guest cookie and username are not a promise of complete anonymity: the network service may temporarily process your IP for anti-abuse controls, and operational server logs may contain connection information.

Browser local storage stores sound/music preferences, blocked chat senders and a recent invitation reference. We do not embed third-party advertising scripts in the game. If you choose an external social sharing platform, that platform applies its own policies.

Weekly Wordzule Cup

The global Weekly Cup is an optional nickname-based championship for saved Wordzule profiles. Player nicknames and verified completed daily point totals appear on global weekly leaderboards. After each Monday-to-Sunday Central week ends, finalized standings and winner nicknames are archived and may remain publicly visible. Guest sessions are not eligible for Cup rankings, and guest gameplay remains available without registration. Cup archives do not display secret answer words, raw guesses, passkeys, or recovery codes. Deleting your profile removes your own archived Cup entry under our account-deletion rules; historical aggregate metadata may remain.

Optional Arcade practice games

Wordzule Arcade is a separate, optional unlimited practice mode. We store each practice game's selected difficulty, answer, your own guess history, completion status, and practice-only statistics under your player ID. Arcade results never contribute official daily scores, streaks, public leaderboards, Club scores, or weekly Cup points. Arcade game answers are deliberately separate from the official daily answer bank. Practice history is available only to your own session; older finished practice-game records are periodically trimmed while your aggregate practice statistics remain. All associated Arcade records are deleted when your Wordzule account is deleted.

Friday Mystery / Special Events

The optional Friday Mystery stores the event Friday date, your guesses, results, time started and finished, and event-only achievements in our protected game database. These results never contribute to official daily scores, global leaderboards or private club rankings. Other players cannot inspect your Mystery guesses or history. We retain events you participated in so you can revisit them and earn awards; they are deleted when you delete your player account. Our independently authored wordplay prompts link to dictionary sources after completion.

Private Wordzule Clubs

Clubs are optional, invite-only leagues available to saved player profiles. Club members can see one another's chosen nicknames, membership, and server-verified daily and weekly results. Only current members can access the full member list and standings; never share private club links publicly. Invitations contain unpredictable secret tokens, expire after seven days or ten joins, and club owners can revoke them. Joining always requires your consent. Club owners can remove members or transfer/delete the club. Your game guesses, passwordless recovery methods, and puzzle answers are never published to clubs.

We store club names, owners, membership, invitation-token hashes, joining times, and abuse reports in the existing protected game database. Owners can remove members, and members can leave; deleting an account also deletes clubs owned by that player and removes the account from any other clubs. Reports are available for operator moderation. Club data is not sold to advertisers.

Chat & the leaderboard

Chat is visible to other game participants. Do not post private contact details, harassment, threats, hate speech, links, spam or answers to today's puzzles. You may report messages and hide a sender on your own browser. Moderators can review reports, hide messages, mute accounts, block abusive participants and pause the lounge. Ordinary chat is generally retained up to 14 days; messages under unresolved moderation review may be kept longer. Resolved reports may remain for up to 90 days.

Only users who choose to claim a nickname and finish all three rounds appear in the public leaderboard. Unclaimed guests still see their own personal scores. One-on-one challenge scores are shared between competitors only after both complete that day’s three puzzles.

Questions and contact requests

If you choose to contact us, we receive the name, email address, topic, and message you enter. We use that information to handle your question, feedback, accessibility concern, or safety report and to reply when appropriate. Contact messages are delivered securely through Microsoft 365 email services and may remain in the support mailbox according to its retention settings.

To reduce spam, the contact form uses a privacy-friendly proof-of-work challenge, one-time challenge validation, a hidden bot-trap field, and submission limits. We do not require you to sign in or disclose your Wordzule recovery codes to send a message. Questions & Feedback.

Account recovery, export & deletion

Claiming your profile generates eight one-time recovery codes, displayed once, which must be saved privately. Passkeys are tied to the domain where they were created. Passkeys are tied to the website address where they were enrolled. When Wordzule moves to its new domain, passkeys will need to be enrolled again using an unused recovery code. A guest who clears the cookie without claiming an account will generally lose access to that progress. There is no email recovery in this version. Keep your one-time recovery codes safe.

Use the Account → Privacy & your data controls to download your game history and delete your profile. Claimed account deletion requires an unused recovery code or recent verified passkey sign-in. Deletion removes active game, account, chat, invitation records, and all stored Web Push subscription endpoints and encryption keys linked to the deleted profile. Protected backups and server logs may persist after deletion until their retention periods elapse. Daily database backups currently have a 30-day rotation; protected source and release snapshots are managed separately.

Optional daily notifications

Wordzule can send one daily reminder through the standard browser Web Push system only after you choose Enable and grant your device notification permission. To deliver reminders, we store a push-service subscription endpoint and its cryptographic encryption keys, your Wordzule profile identifier, your chosen reminder time, your time zone, and quiet-hour preferences. The push infrastructure run by your browser provider (including Apple, Google, or Mozilla) routes notifications to your device. We do not ask for a phone number or email address for Web Push.

Reminders are disabled by default. You can customize the reminder time in fifteen-minute steps and set quiet hours; a reminder scheduled during quiet hours is rejected rather than silently skipped. You can turn reminders off for this device, or choose to turn them off on every browser subscription associated with your current Wordzule profile. A multi-device opt-out disables those server-side subscriptions, even if another device is offline; your browser may also revoke notification permission separately in device settings. Expired or rejected endpoints are deactivated automatically, and subscriptions that are no longer refreshed are excluded from sending after 120 days. A local reminder test can be requested manually. We do not use notifications to show puzzle answers, run hidden tracking, or sell subscription information.

Age and community safety

Wordzule and its public chat are not intended for children under 13. Please do not post anyone’s sensitive personal information, private contact details, or threatening and discriminatory content. Chats can be reported and moderated; if you need to raise a concern, use the Report control near the message.

Security and availability

This game is available over HTTPS. We maintain protections against spam and unauthorized access, but no internet service is entirely risk-free.