中文
Let's Wordy 由 ApexT 运营。本政策适用于 Let's Wordy 的网页以及 iPhone、iPad、macOS 应用，包括 WORDY、WORDIER、WORDIEST、WORDED 和 WORDACTED 等游戏。
1. 我们处理哪些数据
- 离线使用：内置词库和离线游戏在设备上运行。游戏设置、语言、部分游戏进度和未登录时的成绩可保存在浏览器或应用的本地存储中。完全离线游玩不需要向服务器提交猜词。
- 访问统计：访问首页时，我们会在本地存储随机访客 ID 和会话 ID，并在网络可用时将其发送至服务端，用于去重统计访问人数和访问人次。这不是设备指纹；清除本地网站数据后会生成新 ID。
- 网页性能分析：Cloudflare Pages 已启用 Cloudflare Web Analytics。访问网页版或本网站的公开页面时，Cloudflare 可能自动加载性能统计脚本，用于汇总页面访问与加载性能。此脚本不属于离线应用包。
- 账号：注册或登录时处理用户名、六位 UID、加盐哈希后的密码、登录会话及账号设置。为保障账号安全和管理服务，账号记录还可能保存最近访问 IP、由连接信息推断的大致地区、最近在线时间以及对局与猜测统计。密码明文不保存。
- 在线功能：多人房间会处理玩家名称、房间设置、秘密词、猜测、成绩和时间记录；题目挑战会处理创建者、题目设置、秘密词及参与者答题记录。好友功能会处理好友申请、关系、留言、已读状态和房间邀请。联系技术支持时，我们会处理你主动提供的邮箱和邮件内容。
2. 用途和可见范围
这些数据用于提供登录、同步、对局、排行榜、好友通信、访问统计、安全维护和技术支持。公开挑战可能展示创建者名称和参与者的成绩、用词与耗时；同房玩家或观战者可依据房间设置看到对局信息；好友留言会提供给对应好友。授权管理员可为运营、安全和支持需要查看账号资料、最近 IP/地区及对局记录。我们目前不在应用中投放第三方广告，也不使用广告跟踪 SDK。
3. 存储、安全与第三方服务
在线服务由 Cloudflare Pages、Workers 与 Durable Objects 承载。Cloudflare 作为基础设施服务商会处理提供服务所需的网络请求和连接信息；处理地点可能随其全球网络而变化。账号密码以加盐哈希保存，登录会话使用 HttpOnly Cookie，传输使用 HTTPS。你也可以查看 Cloudflare 隐私政策。
4. 保留与删除
- 登录会话最长 30 天；好友留言及邀请卡片在创建约 15 天后过期清理。
- 题目挑战及其答题记录通常在创建约 30 天后清理；创建者可提前删除自己创建的题目。
- 房间在所有人离开约 2 分钟后清理；与账号关联的成绩统计可能继续保留。
- 账号、好友关系、成绩统计、最近 IP/地区及访问计数 ID 没有统一的自动到期时间，可能持续保存，直到删除请求得到处理或服务不再需要这些数据。
5. 你的选择与请求
你可以在应用中更改用户名、关闭好友搜索、删除自己创建的题目，或通过主界面用户名菜单自行删除账户。删除账户会清理账号、登录会话、好友关系与留言、账号关联的在线成绩和答题记录，以及你创建的题目及其答题记录；设备上的离线游戏记录和独立的匿名访问计数不会随之清除。正在进行的房间数据会按房间的正常过期规则清理。清除本地数据不会自动删除服务器上的账号。若要查询、更正或请求处理其他关联数据，请通过下方邮箱联系我们；我们可能需要核实账号归属，并会告知处理结果。法律要求保留的数据可能例外。
6. 更新与联系
我们可能因功能或数据处理方式变化更新本政策，并在本页调整生效日期。隐私问题、数据请求或技术支持请联系：
xiangyu1371@gmail.com
English
Let's Wordy is operated by ApexT. This policy covers the Let's Wordy website and iPhone, iPad, and macOS apps, including WORDY, WORDIER, WORDIEST, WORDED, and WORDACTED.
1. Information we process
- Offline play: The built-in dictionary and offline games run on your device. Preferences, language, some game progress, and unsigned-in results may be stored locally. Fully offline play does not send guesses to our servers.
- Visit counts: On the home screen, random visitor and session IDs are stored locally and, when online, sent to our service to count unique visitors and visits. These IDs are not device fingerprints. Clearing local site data creates new IDs.
- Website performance analytics: Cloudflare Web Analytics is enabled for our Pages site. When you visit the web version or these public pages, Cloudflare may automatically load a performance beacon to aggregate page views and loading performance. This beacon is not part of the offline app bundle.
- Accounts: Registration and login use a username, six-character UID, salted password hash, session, and account preferences. For security and service administration, account records may also store the latest IP address, approximate region inferred from connection data, last-seen time, and game statistics. We do not store plaintext passwords.
- Online features: Multiplayer processes player names, room settings, secret words, guesses, results, and timing. Challenges process creator details, challenge settings and answers, and participants' attempts. Friends features process requests, relationships, messages, read status, and room invitations. If you contact support, we process the email address and message you provide.
2. Purposes and visibility
We use this information to provide accounts, synchronization, games, leaderboards, friend communication, visit counts, security, and support. Public challenges may show creator names and participants' scores, words, and times. Room participants or spectators may see game activity according to room settings. Friend messages are shown to their recipients. Authorized administrators may access account details, recent IP/region, and game records for operating and securing the service. We currently do not show third-party ads or use advertising-tracking SDKs in the app.
3. Storage, security, and service providers
Online features run on Cloudflare Pages, Workers, and Durable Objects. Cloudflare processes the network requests and connection information needed to provide this infrastructure, potentially across its global network. Passwords are salted and hashed, login sessions use HttpOnly cookies, and data is transmitted over HTTPS. See Cloudflare's privacy policy.
4. Retention and deletion
- Login sessions last up to 30 days. Friend messages and invitation cards expire and are cleared about 15 days after creation.
- Challenges and their play records are normally cleared about 30 days after creation. Creators can delete their own challenges earlier.
- Rooms are cleared about two minutes after everyone leaves; account-linked game statistics may remain.
- Accounts, friendships, game statistics, recent IP/region, and visit-count IDs do not share a fixed automatic expiry and may remain until a deletion request is processed or they are no longer needed for the service.
5. Your choices and requests
You can edit your username, disable friend discovery, delete challenges you created, or delete your account from the username menu on the home screen. Account deletion removes your account, login sessions, friendships and messages, account-linked online results and plays, and challenges you created together with their play records. Offline game records on this device and independent anonymous visit counts are not cleared. Active room data follows the normal room expiry rules. Clearing local data alone does not delete a server account. For access, correction, or other related data requests, email us below; we may need to verify account ownership. Information that must be retained by law may be excepted.
6. Changes and contact
We may update this policy when features or data practices change and will update its effective date here. For privacy requests or technical support, contact:
xiangyu1371@gmail.com