Privacy Policy
Last updated: June 2026
Words Are Snake is a browser game. This page explains what data the game collects, why, and how long it is kept.
What we collect
Game sessions and moves
Every game — both the daily challenge and Duel mode — is assigned a random ID with no connection to your identity. The words you submit during gameplay and your scores are recorded under that ID to help us understand how the game is played and improve it over time. This data is kept indefinitely.
Leaderboard initials
Both the daily challenge and Duel leaderboards accept up to three uppercase letters (A-Z, plus Æ, Ø, Å) that appear publicly alongside your score. This limit is enforced server-side. These initials are stored permanently. Do not use your real name or any identifying information.
Push notification subscriptions
If you enable daily reminders, your browser generates a push subscription containing a delivery endpoint URL and a pair of encryption keys used to send you notifications securely. We also store your preferred notification hour. All of this is deleted from our server as soon as you turn off notifications in Settings.
IP addresses (rate limiting)
To prevent abuse, your IP address is temporarily stored when you submit words or scores. These records are periodically purged once they are more than 24 hours old.
Legal basis (GDPR)
For players in the EU, the legal basis for each type of processing is:
- Game session analytics: legitimate interest in improving the game
- Leaderboard submissions: your consent via voluntary submission
- Push notification endpoint: your explicit consent via the opt-in prompt
- IP addresses for rate limiting: legitimate interest in security and abuse prevention
Your rights
Under GDPR you have the right to request access to, correction of, or deletion of your personal data. Because game sessions carry no identity, the only personal data we can act on a deletion request for is a push notification subscription (which you can remove yourself via Settings) or a leaderboard entry you can identify to us.
To exercise your rights, contact: privacy@sorevage.no
Browser storage
The game stores a small amount of data in your browser's localStorage: your settings (theme, accessibility preferences, animation speed, word preview toggle), your notification preference, your daily results and streak counters, and whether you have already submitted a score for today's challenge. Your initials are held in sessionStorage for the duration of your browser session so you do not have to retype them. A version flag is also held in sessionStorage to avoid repeated page reloads when the game updates. None of this data is sent to our servers except when you explicitly submit a leaderboard score. No cookies are used.
Third-party services
Cloudflare Web Analytics
This site uses Cloudflare Web Analytics to measure page views and performance. It is cookieless and does not track individual users across sessions or sites. Cloudflare collects aggregate data including which pages were visited, the referring URL, device type, browser, and the approximate country derived from your IP address at their network edge. Your IP address is not stored by Cloudflare for this purpose. No advertising or user-profiling takes place. Cloudflare's own privacy policy applies to this data.
Railway (hosting)
The game is hosted on Railway. Your connection passes through their infrastructure. Railway's privacy policy applies to network-level data.