← Back to the game

Privacy Policy

How GuessWord handles game input, feedback, browser storage, request context, and service providers.

Last updated: 2026-08-05

Scope

This policy describes the active public GuessWord semantic word game. The game can be played without creating an account and does not currently offer account billing or payment features.

Information we handle

When you use the game, GuessWord may handle:

  • Game input and events. Words you submit, their normalized form, language and puzzle identifiers, whether an input was accepted, similarity results, cache status, win status, puzzle views and switches, and clue reveals.
  • Feedback. The message you choose to send, an optional email address, and the current language, game mode, and puzzle identifier when available.
  • Anonymous identifiers. A first-party gw_vid Cookie identifies an anonymous browser visitor. A per-tab gw_tab_session_id in sessionStorage identifies a browser-tab session. Neither is a GuessWord account.
  • Request context. IP address, country, region, city, Cloudflare data-center code, IP timezone, browser timezone, user agent, accepted language, referring page, requested path, and whether a request appears to come from a browser or another API client.
  • Browser-local state. localStorage records game progress and guess history by language and puzzle, the most recently played puzzle, revealed clues, and game settings. This data stays in that browser unless you clear it.

First-party Cookies and browser storage

  • gw_vid is an HttpOnly, SameSite=Lax first-party Cookie with a maximum age of one year. It lets us group game events from the same browser without an account.
  • gw_tz is a SameSite=Lax first-party Cookie with a maximum age of one year. It contains the browser's timezone.
  • gw_tab_session_id is stored in sessionStorage and is sent with game requests from that browser tab. It usually remains across a refresh and usually ends with the tab's storage session.
  • Guess history, progress, clues, the resume pointer, and settings use localStorage. The game can still work with reduced continuity if storage is unavailable.

Google Analytics

GuessWord uses Google Analytics 4 to understand page views, traffic sources, approximate location, browser and device characteristics, and how visitors engage with the public site. The Google tag uses the measurement identifier G-JBKPV13LLE and may set first-party Cookies such as _ga to distinguish visitors and sessions.

Google may receive the page URL, referrer, IP address and device or browser information when the tag runs. GuessWord does not intentionally send submitted guess words, feedback messages, or optional feedback email addresses to Google Analytics as event parameters.

You can block or clear Analytics Cookies through your browser and learn how Google uses data from sites or apps that use its services. Where applicable law requires consent for Analytics storage or related processing, the Google tag should operate according to the available consent choices.

How we use information

We use this information to provide puzzles and similarity scores, restore browser progress, show clues, understand whether features work, measure traffic and engagement, diagnose errors and abuse, improve puzzles and language quality, and review feedback. We do not use the active game data to create a GuessWord account.

Cloudflare, D1, R2, and OpenRouter

The active game runs on Cloudflare infrastructure:

  • Cloudflare Workers receives web requests and request context needed to operate the game.
  • Cloudflare D1 stores puzzle data, similarity-pair cache records, anonymous game events, request context, and submitted feedback.
  • Cloudflare R2 stores cached word-vector files used for semantic comparison.

When a required word vector is missing from R2, the normalized word is sent to OpenRouter using the openai/text-embedding-3-large model. The returned vector is stored in R2 so later comparisons can use the cache. OpenRouter is not called for that word when the required cached vector already exists.

Sharing and disclosure

We do not sell or rent GuessWord game data. Information is processed by Cloudflare and, on a vector cache miss, OpenRouter for the operational purposes described above. Google processes Analytics data for traffic and engagement measurement. We may also disclose information when reasonably necessary to comply with applicable law, respond to a valid legal request, protect the game and its users, or investigate abuse.

Advertising

The public GuessWord site may load an Infolinks publisher script so Infolinks can verify site ownership and, after account approval, serve ads. In-text keyword highlighting is currently suppressed on page content. Other Infolinks formats could still appear after approval until they are turned off in the Infolinks publisher settings. Infolinks and its advertising partners may use Cookies, IP addresses, web beacons, advertising identifiers, or other device and browser identifiers to serve and measure ads, limit frequency, prevent fraud, and report performance.

Google AdSense is not described as an active ad unit. If Google AdSense is enabled in the future, Google and its advertising partners may use the same kinds of identifiers for the same advertising purposes.

Depending on location, settings, consent, and the mode chosen for the site, those ads may be personalized or non-personalized. Personalized ads may use prior activity or inferred interests; non-personalized ads may still use contextual information, coarse location, frequency controls, fraud-prevention signals, and measurement data.

You can learn how Google uses data from sites or apps that use its services and manage eligible personalization choices in Google Ads Settings. Browser controls can also delete or block Cookies. Where applicable law requires consent before advertising storage or access, an appropriate choice must be presented before that processing is enabled. This policy does not claim that an advertising consent platform is currently active.

Retention

The Cookie and browser-storage durations are described above, and you can clear them earlier. Server-side events, feedback, similarity-cache records, and vectors do not currently use one fixed public deletion deadline. They may be retained for the operational, quality, security, and legal purposes described in this policy. We do not promise a specific deletion period that the active system cannot enforce.

Your choices and requests

You can:

  • Play without creating an account and omit the optional email field in feedback.
  • Clear or block Cookies through your browser. This may cause a new anonymous GuessWord or Google Analytics visitor identifier to be created later.
  • Clear sessionStorage and localStorage through browser controls. The game settings also include a control for clearing supported locally saved game progress.
  • Avoid submitting sensitive information in guesses or feedback.
  • Send a privacy question or request through the Contact page.

Because GuessWord does not use an account identity, we may not be able to connect every anonymous record to you. We will review requests using the identifiers and information reasonably available and in light of applicable requirements; this policy does not promise automatic access, export, or deletion tooling.

Children

GuessWord is a general-audience word game and is not designed as a child-directed service. Children who cannot consent to data processing under local law should use it only with a parent or guardian. Do not include a child's email address or other personal details in feedback without appropriate permission. A parent or guardian can raise a concern through the Contact page.

International processing

Cloudflare and OpenRouter may process information in countries or regions outside your own. Privacy and data-protection rules can differ across locations. By operating through these providers, GuessWord's request, event, and vector-processing data may be handled across borders as needed to provide the game.

Security

We use reasonable safeguards appropriate to the active game, including encrypted HTTPS connections on the HTTPS site, an HttpOnly visitor Cookie, provider access controls, and limiting public responses to the data needed for gameplay. No Internet service, transmission method, or storage system can be guaranteed completely secure.

Changes to this policy

We may update this policy as the game, providers, or legal requirements change. The “Last updated” date identifies the current version. Material changes should be explained through the site when appropriate.

Contact

Use the Contact page for privacy questions or concerns. GuessWord does not currently publish a general privacy email or identify a separate legal entity on this page.