Privacy Policy.
A quick summary
Womble is a free daily puzzle website. You can play without creating an account. If you sign up, we use a username and password to run your account and save your scores. You can optionally add a recovery email and a profile picture.
We do not sell your personal information, run advertising trackers, or send marketing emails. We do use essential cookies, basic security records, and service providers to keep Womble working. This page explains the details.
Information we collect
- When you create an account: your username, account creation date, and password information stored in a protected, hashed form—not your readable password.
- If you choose to provide it: your verified recovery email address and an uploaded profile picture. You control whether your picture is visible publicly.
- When you play: games started and completed, answers or game progress needed to check results, scores, and the dates you play. Archived practice games are not added to your scored puzzle counts.
- When you visit: first-party session, guest and browser replay-prevention cookies, plus limited security records (including a protected hash derived from your IP address) to help prevent abuse.
- If you contact support: the email and message you send to womblesupport@gmail.com, so we can reply.
How we use this information
- Create and secure accounts, sign players in, and help them reset passwords.
- Save scores, show stats, manage daily limits, and display leaderboards.
- Let people search for players and view public profiles.
- Send verification and password-reset emails you request (not marketing emails).
- Protect the site from spam, repeated login attempts, score abuse, and other misuse.
- Fix bugs and keep the daily games working.
What other people can see
If you register, your username, join date, daily puzzle totals, game-by-game completion counts, and leaderboard scores may be visible to anyone, including people who are not logged in. If you choose to make your profile picture public, people can see it too.
Your password, optional recovery email, private profile picture, session cookies, and security records are not displayed on public profiles or leaderboards. Guest scores do not appear on the leaderboard.
Cookies and browser identifiers
Womble uses first-party cookies for sign-in, guest play, and one-attempt-per-game-per-day limits. The sign-in and guest cookies normally expire after 21 days; the browser replay-prevention cookie normally expires after 45 days. Clearing cookies can sign you out or affect saved guest progress.
The replay-prevention cookie is a randomly generated browser token, not a hardware ID or device fingerprint. Womble does not currently use third-party advertising or analytics cookies.
Service providers
We use Cloudflare to host Womble, store account and game information, and generate some daily questions using AI. Puzzle generation uses question prompts and dates, not player account details. Cloudflare may process technical request information to operate and protect its services.
We use Resend to deliver account-verification and password-reset emails when you request them. Resend receives the destination email address and message needed to send that email.
If you email our support address, your message is handled using Gmail. These providers process information to provide their services and follow their own privacy terms. We may also disclose information if legally required or necessary to protect users and the service.
How long information is kept
Account information and scored game history are kept while the account remains active, unless removed or required to be kept for a legitimate reason. When you delete your account, Womble removes your account, attached recovery email, profile picture, login sessions, and scored daily game records from its active database.
Temporary browser identifiers, security records, provider logs, and backups may remain for limited periods while they expire or are cleared. We do not promise that all copies disappear instantly. Daily puzzles and anonymous aggregate gameplay information may remain after account deletion.
Your choices
- Play as a guest instead of registering.
- Make a profile picture public or private, change it, or remove it.
- Add or remove your optional recovery email.
- Delete your account using the account settings (you will need your password).
- Clear your browser cookies or request help by contacting womblesupport@gmail.com.
Age requirements
Womble is intended for people aged 13 or older, including guest visitors. If you are under 13, do not use Womble or submit personal information. If we learn that we have collected personal information from someone under 13 in a way that requires action, we will take appropriate steps to remove it. Parents and guardians can contact us at womblesupport@gmail.com.
Visitors in some places may need permission from a parent or guardian to use online services.
Security
We take practical steps to protect account information, including hashed passwords, secure session cookies, limits on repeated account requests, and one-time expiring recovery links. No online service can guarantee perfect security. Use a unique password and do not post private information in your public username or profile photo.
Changes and contact
If our data practices change, we will update this page and the effective date. Significant changes may require additional notice or choices.
Questions, privacy requests, or account concerns? Email womblesupport@gmail.com.
Friends and badges
Friend requests and friend lists are private to the players involved. Public profiles may show account badges, including Beta Tester, Owner, Developer, and Puzzle Enthusiast.