Privacy
Last updated November 1, 2026
wordle (wordle.adams33.com) is a small, ad-free word game run by Dan Adams. It collects only what it needs to run the game, never sells or shares your data, and uses no ads, analytics or third-party trackers.
What we store
- Guests: a random, signed player id in a cookie, plus your games (guesses, result, time taken) so your stats and streak survive a refresh. No name or email.
- Accounts: username, display name, avatar color/emoji, email address, a bcrypt hash of your password (never the password itself), your games, badges, people you follow, and when you joined/last logged in.
- Passkeys (Face ID / Touch ID): only the passkey's public key and a usage counter. Your face, fingerprint and the private key never leave your device.
- Server logs: standard web server logs (IP address, time, page requested, browser) used to keep the site secure and working. They're kept only as long as needed for troubleshooting.
What's public
If you have an account, your username, display name, avatar, badges, game stats and leaderboard positions are visible to others (the answer to today's puzzle is never shown). Your email is never shown. Guest games never appear on leaderboards.
Cookies
Only essential cookies, no tracking:
wordlet.sid— keeps you signed in and protects forms (session, expires after 30 days of inactivity).wordlet.gid— your anonymous guest player id (up to 400 days; cleared when you log out).wordlet.prefs— your settings: theme, colorblind and hard mode.
Your browser's local storage also remembers whether you've seen the help screen and dismissed the cookie notice.
Your email is used only to reset your password. No newsletters, no marketing.
Your choices
- Change your profile or password, and add or remove passkeys, on your profile page.
- Delete your account and all its data any time from your profile page (Delete my account). Deletion is immediate and permanent; database backups roll off within 30 days.
- Clear your browser's cookies to drop guest data from your device.
- Questions or requests: adams33@gmail.com.
Security
The site is HTTPS-only. Passwords are hashed with bcrypt, sessions are server-side, forms are CSRF-protected, and logins are rate limited.
wordle is an independent word game and isn't affiliated with The New York Times.