Privacy Policy

Last updated: October 17, 2026

Overview

GuessThePassword is a puzzle game you can play on our website and in our Android app. Your privacy is important to us. We keep the data we collect to a minimum, and this page explains what it is and why.

Data Collection

The game collects the following data:

Hacker Alias (Username): To play, you pick an alias. It is stored securely to identify you on the leaderboard. We create an account for you automatically, with no email or password needed.
Game Progress: Your progress is saved to your account: your current level, stars and guesses for each level, the hints you have unlocked, your hint points, toolkit items, your day streak and the date you last played.
Solved Levels: When you crack a level, our server records which level it was, your stars, how many guesses you took and when.
Your Guesses: Every guess is sent to our server to be checked. We do not save your guesses.
Email Address (optional): If you secure your account with an email and password, our sign-in service (Supabase) stores your email address. Your password is stored hashed, never as plain text. Your email is used to sign you in and for account emails such as password resets.
Google Account (optional): If you sign in with Google, our sign-in service stores the email address, name and profile picture link that Google shares with us. The game does not show or use your name or picture.
Feedback (optional): If you send us feedback from the game, we receive the message you write.
The game does not ask for your phone number, your contacts or your device's location
No advertising SDKs or ad networks are used, and the game shows no ads

Public Leaderboard: Your alias, level, total stars, longest streak and results for each level (such as stars and guesses) are public. Anyone can see them on the leaderboard and on your player profile. Your email address is never shown.

Local Storage

Game progress (current level, star ratings, and best scores) is saved locally on your device using standard browser storage (localStorage). Your alias, settings and sign-in session are kept there too. This data:

Is partly saved to your account too: your alias and game progress, as described above
Is not accessible by any third party
Is removed from your device, including your alias and sign-in, when you clear the app's data in your device settings, or this site's data in your browser. That does not delete your account or your place on the leaderboard; use the Delete My Data form for that

You can reset your game progress at any time with Reset Progress in the game. That starts you again from level 1 but keeps your alias, settings and sign-in.

On Android, the home screen streak widget keeps a copy of your streak and next level on your phone, and the optional streak reminder is scheduled on your phone. Neither sends anything to us.

Third-Party Services

We use these services to run the game:

Supabase: handles sign-in and stores your account, alias, game progress and solved levels.
Vercel: hosts the website and the server that checks your guesses.
Vercel Web Analytics and Speed Insights (website only): these record anonymous visit and performance data on the website. That covers the pages you visit, game events such as starting or cracking a level or using a hint, how fast pages load, the site you came from, your browser, operating system, device type, connection speed and approximate location (country, region and city). Web Analytics does not use third-party cookies, and Vercel does not tie this data to you or your IP address. The Android app does not use them.
Google: if you sign in with Google, Google confirms your account for us. The Android app also uses Google Play to offer updates and show the rating prompt.
Web3Forms: delivers feedback and data deletion requests to our email.

We do not use any advertising networks.

Children's Privacy

The game content is suitable for all ages, and the game shows no ads. It collects the same data from every player, including children: an alias, game progress and solved levels; an email address, or the details Google shares, only if the player chooses to add them; any feedback they send; and, on the website only, anonymous visit data. The alias appears on the public leaderboard, so we recommend picking one that is not your real name.

Permissions

The website does not ask for any permissions. The Android app does not ask for your camera, microphone, location or contacts. It uses these permissions:

Internet access: to check guesses, save your progress and load the leaderboard.
Vibration: for short vibrations as you play.
Notifications (optional): only used if you turn on the streak reminder, and you can turn it off at any time.
Run at startup and prevent the phone from sleeping: these come with the notifications the streak reminder uses, so a reminder you turned on still arrives, even after your phone restarts.

Changes to This Policy

If we ever update this privacy policy, the changes will be reflected on this page with an updated date.

Contact

If you have any questions about this privacy policy, please contact us at:

Email: irnotech@gmail.com

Delete My Data

You can request the deletion of any data associated with your account (e.g. your Hacker Alias and scores stored on our servers). Fill out the form below and we will process your request within 30 days.