Cookies & privacy

Effective September 14, 2026

Your words belong to you. Wordfront uses browser storage to keep your game working and secure. Optional Wordfront usage analytics are switched off, so there is no analytics consent popup or choice required to play, sign in, or buy Plus.

What stays in your browser

Guest saves. The essential ww_guest cookie connects this browser to your saved game. It lasts up to one year. Clearing it starts a new guest identity and can make an unsigned-in save inaccessible. A free account lets you keep playing across devices.

Drafts and reliable saves. Local storage holds unfinished guesses, requests waiting to save, and a sign-out signal for your other tabs. Account drafts and pending requests clear when you sign out or switch accounts; successful saves clear the corresponding pending request. Original Wordwave backups stay in this browser until you remove them.

Sign-in and checkout continuity. Tab storage remembers which account is open and where you were playing when you chose to sign in or buy Plus. Purchase intent is valid for 30 minutes; checkout return context for 24 hours. These entries are removed when consumed or found expired, and tab storage ends when the browser session ends.

Security. Our hosting provider Cloudflare sets a __cf_bm cookie to help distinguish people from bots. It expires after 30 minutes of inactivity. Hosting and sign-in services may also use storage to secure and maintain your session.

You can clear or block browser storage in your browser settings. Blocking essential storage can prevent guest saves, sign-in, or checkout from working. Download a backup or sign in before clearing it. Browser expiry or clearing storage does not itself delete server records.

Your game, account, and payments

Wordfront stores submitted guesses, results, collected words, badges, settings, daily allowances, and save/import records on its server to provide the game. Your streaks and personal statistics are part of your progress, and continue to work with optional analytics off.

ChatGPT sign-in supplies an account identifier and verified email. Wordfront uses the identifier to link your account and the email to match reserved guest passes. Reserved passes can contain email addresses before first sign-in. Accounts are not automatically merged by email. Recovery records help protect and restore account access.

Stripe hosts the payment form. Wordfront keeps customer, purchase, legacy subscription, and payment-status records to provide access and handle refunds or disputes; it does not store card numbers. Plus costs $3.99 USD once for permanent unlimited play in the current worlds, with no subscription or automatic renewals. Future expansions require a separate purchase. Complimentary passes require no payment. A full refund removes its unlock; a disputed payment pauses it while under review. Your saved progress and free play remain available.

Shared puzzles and service providers

Anyone with your challenge link can open it for 30 days. It shows your optional public nickname, score, world, and puzzle rules, but not your account identity or guesses. Signed-in senders can withdraw links in Shared puzzles, alongside streaks and badges.

OpenAI/Sites and Cloudflare provide hosting and account services, and Stripe processes payments. They receive information needed to deliver those services, such as connection details, account information, or payment details. Their own pages and services have their own privacy controls. See the OpenAI cookie policy, Cloudflare cookie information, and Stripe cookie policy.

Optional tracking is off

Wordfront no longer creates analytics session identifiers or records optional puzzle, sharing, or purchase-conversion events. Old open tabs cannot restart that collection. The previous tab analytics identifier is removed when the updated game loads. Wordfront does not load advertising trackers. This behavior is the same whether or not your browser sends Do Not Track or Global Privacy Control signals; those signals do not switch off essential game, security, or payment storage.

Your choices and how long records remain

Account → Backup & restore lets you download your game data or import a backup. Imports preserve the original browser backup. Account deletion removes account game history and withdraws its invitations; billing references and provider receipts remain separately for payment support, disputes, and applicable recordkeeping obligations. Contact support for access, correction, deletion, or other privacy requests, including help with an unsigned-in save. We may need to verify that the records are yours.

Game saves and import receipts remain until deleted so you can return to your collection. Expired challenge links stop working after 30 days; maintenance can redact their content after a further 30 days. Historical usage events collected before this update may still exist. Maintenance removes events older than 90 days when run; this is not an automatic 90-day deletion guarantee. Protected backups may also retain earlier records until replaced or removed. Security and billing records are kept as needed for recovery, fraud prevention, disputes, and legal obligations.

Contact and changes

For Wordfront privacy questions or requests, contact nick@nickrivers.net. Depending on where you live, you may also have the right to complain to your local data protection authority.

Changes to this notice will appear here with a new effective date. If optional tracking is introduced later, Wordfront will explain it and request any required consent before it starts. Essential storage does not grant permission for optional analytics.