Privacy policy
This notice explains how the weejiwords game uses information when you visit or vote.
Voting and browser storage
Voting does not ask for a name or email address. In the online game, Supabase Authentication creates a pseudonymous session identifier stored in your browser. Votes are associated with that identifier. Tabs in the same browser profile share the voting session; this is not proof of a unique person or device.
Browser storage also remembers your theme, sound, animation and timezone preferences and synchronizes your selected vote between tabs. Session storage also remembers whether a cooldown reminder has been shown in the current tab. The local demo uses a first-party session cookie. These functional storage items support the game; this version does not include advertising or analytics trackers.
What is public
Aggregate vote totals, completed answers and their completion times are public. Raw individual vote records are not exposed through the public game API. Do not put personal information into the shared answers.
Service providers and abuse prevention
The deployed hosting provider and Supabase process requests to operate the game. Infrastructure logs may include IP addresses, request times, browser information and errors. If verification is enabled, Cloudflare Turnstile also processes information under its own privacy policy. Vote-change timing and cooldown records help limit abuse.
Sharing completed answers
Share-card images are generated in your browser. Choosing a social, text or email sharing option opens the selected service or your device’s sharing tools with public answer text or the site link. A generated image is only passed to another app when you choose to share it. Third-party services handle information under their own policies.
Private owner access
The private admin console uses a confirmed owner email account, a separate sign-in session and registered security-key public credentials. It stores public keys, credential identifiers, verification counters, temporary challenges, key-session records and an audit trail of administrative actions. Private security-key material stays on the authenticator. Admin email and key records are not exposed through the public game API.
Your choices and requests
You can reset preferences or remove stored session data in your browser. Removing browser storage does not delete votes or server-side records and may remove the link needed to identify your session. Contact the operator about access, deletion, retention or other privacy questions. Provider log retention depends on the deployed service configuration.