Privacy Policy
How GuessWord handles game input, feedback, browser storage, request context, and service providers.
Last updated: 2026-08-05
Scope
This policy describes the active public GuessWord semantic word game. The game can be played without creating an account and does not currently offer account billing or payment features.
Information we handle
When you use the game, GuessWord may handle:
- Game input and events. Words you submit, their normalized form, language and puzzle identifiers, whether an input was accepted, similarity results, cache status, win status, puzzle views and switches, and clue reveals.
- Feedback. The message you choose to send, an optional email address, and the current language, game mode, and puzzle identifier when available.
- Anonymous identifiers. A first-party
gw_vidCookie identifies an anonymous browser visitor. A per-tabgw_tab_session_idinsessionStorageidentifies a browser-tab session. Neither is a GuessWord account. - Request context. IP address, country, region, city, Cloudflare data-center code, IP timezone, browser timezone, user agent, accepted language, referring page, requested path, and whether a request appears to come from a browser or another API client.
- Browser-local state.
localStoragerecords game progress and guess history by language and puzzle, the most recently played puzzle, revealed clues, and game settings. This data stays in that browser unless you clear it.
First-party Cookies and browser storage
gw_vidis anHttpOnly,SameSite=Laxfirst-party Cookie with a maximum age of one year. It lets us group game events from the same browser without an account.gw_tzis aSameSite=Laxfirst-party Cookie with a maximum age of one year. It contains the browser's timezone.gw_tab_session_idis stored insessionStorageand is sent with game requests from that browser tab. It usually remains across a refresh and usually ends with the tab's storage session.- Guess history, progress, clues, the resume pointer, and settings use
localStorage. The game can still work with reduced continuity if storage is unavailable.
Google Analytics
GuessWord uses Google Analytics 4 to understand page views, traffic sources, approximate location, browser and device characteristics, and how visitors engage with the public site. The Google tag uses the measurement identifier G-JBKPV13LLE and may set first-party Cookies such as _ga to distinguish visitors and sessions.
Google may receive the page URL, referrer, IP address and device or browser information when the tag runs. GuessWord does not intentionally send submitted guess words, feedback messages, or optional feedback email addresses to Google Analytics as event parameters.
You can block or clear Analytics Cookies through your browser and learn how Google uses data from sites or apps that use its services. Where applicable law requires consent for Analytics storage or related processing, the Google tag should operate according to the available consent choices.
How we use information
We use this information to provide puzzles and similarity scores, restore browser progress, show clues, understand whether features work, measure traffic and engagement, diagnose errors and abuse, improve puzzles and language quality, and review feedback. We do not use the active game data to create a GuessWord account.
Cloudflare, D1, R2, and OpenRouter
The active game runs on Cloudflare infrastructure:
- Cloudflare Workers receives web requests and request context needed to operate the game.
- Cloudflare D1 stores puzzle data, similarity-pair cache records, anonymous game events, request context, and submitted feedback.
- Cloudflare R2 stores cached word-vector files used for semantic comparison.
When a required word vector is missing from R2, the normalized word is sent to OpenRouter using the openai/text-embedding-3-large model. The returned vector is stored in R2 so later comparisons can use the cache. OpenRouter is not called for that word when the required cached vector already exists.
Sharing and disclosure
We do not sell or rent GuessWord game data. Information is processed by Cloudflare and, on a vector cache miss, OpenRouter for the operational purposes described above. Google processes Analytics data for traffic and engagement measurement. We may also disclose information when reasonably necessary to comply with applicable law, respond to a valid legal request, protect the game and its users, or investigate abuse.
Advertising
The public GuessWord site may load an Infolinks publisher script so Infolinks can verify site ownership and, after account approval, serve ads. In-text keyword highlighting is currently suppressed on page content. Other Infolinks formats could still appear after approval until they are turned off in the Infolinks publisher settings. Infolinks and its advertising partners may use Cookies, IP addresses, web beacons, advertising identifiers, or other device and browser identifiers to serve and measure ads, limit frequency, prevent fraud, and report performance.
Google AdSense is not described as an active ad unit. If Google AdSense is enabled in the future, Google and its advertising partners may use the same kinds of identifiers for the same advertising purposes.
Depending on location, settings, consent, and the mode chosen for the site, those ads may be personalized or non-personalized. Personalized ads may use prior activity or inferred interests; non-personalized ads may still use contextual information, coarse location, frequency controls, fraud-prevention signals, and measurement data.
You can learn how Google uses data from sites or apps that use its services and manage eligible personalization choices in Google Ads Settings. Browser controls can also delete or block Cookies. Where applicable law requires consent before advertising storage or access, an appropriate choice must be presented before that processing is enabled. This policy does not claim that an advertising consent platform is currently active.
Retention
The Cookie and browser-storage durations are described above, and you can clear them earlier. Server-side events, feedback, similarity-cache records, and vectors do not currently use one fixed public deletion deadline. They may be retained for the operational, quality, security, and legal purposes described in this policy. We do not promise a specific deletion period that the active system cannot enforce.
Your choices and requests
You can:
- Play without creating an account and omit the optional email field in feedback.
- Clear or block Cookies through your browser. This may cause a new anonymous GuessWord or Google Analytics visitor identifier to be created later.
- Clear
sessionStorageandlocalStoragethrough browser controls. The game settings also include a control for clearing supported locally saved game progress. - Avoid submitting sensitive information in guesses or feedback.
- Send a privacy question or request through the Contact page.
Because GuessWord does not use an account identity, we may not be able to connect every anonymous record to you. We will review requests using the identifiers and information reasonably available and in light of applicable requirements; this policy does not promise automatic access, export, or deletion tooling.
Children
GuessWord is a general-audience word game and is not designed as a child-directed service. Children who cannot consent to data processing under local law should use it only with a parent or guardian. Do not include a child's email address or other personal details in feedback without appropriate permission. A parent or guardian can raise a concern through the Contact page.
International processing
Cloudflare and OpenRouter may process information in countries or regions outside your own. Privacy and data-protection rules can differ across locations. By operating through these providers, GuessWord's request, event, and vector-processing data may be handled across borders as needed to provide the game.
Security
We use reasonable safeguards appropriate to the active game, including encrypted HTTPS connections on the HTTPS site, an HttpOnly visitor Cookie, provider access controls, and limiting public responses to the data needed for gameplay. No Internet service, transmission method, or storage system can be guaranteed completely secure.
Changes to this policy
We may update this policy as the game, providers, or legal requirements change. The “Last updated” date identifies the current version. Material changes should be explained through the site when appropriate.
Contact
Use the Contact page for privacy questions or concerns. GuessWord does not currently publish a general privacy email or identify a separate legal entity on this page.