Privacy notice
WordRafts is run by James Green, Brisbane, Australia ("we"). This notice explains what information the game handles and why. The short version: we keep as little as we can, we never sell it, and you can delete your account yourself.
Playing without an account
When you open wordrafts.com we set one cookie (wr_session) containing a random identifier. It lets us count your three free voyages a day. It holds no personal details. Your voyage history and best scores are stored only in your own browser's storage and never leave your device unless you sign in and submit a ranked score. Cloudflare, which hosts the site, records standard server logs (including IP address) for security and performance; we use the IP address only to rate-limit sign-in e-mails.
If you create an account
We store your e-mail address, the leaderboard name you choose, and a record of each voyage you finish while signed in (date, mode, score, the words you made and whether the server could verify them). We use this to apply your daily allowance across devices, to rank you on the leaderboards, and to send sign-in codes. Your leaderboard name and score are shown publicly; your e-mail address never is. Sign-in codes are sent through Resend, an e-mail delivery service, which processes your address for that purpose.
If you subscribe
Payments are taken by Stripe on its own secure pages. We never see or store your card number. Stripe sends us your Stripe customer and subscription identifiers and the subscription status so that we can unlock unlimited voyages and let you manage or cancel the subscription. Stripe's handling of your data is described in Stripe's privacy policy.
Where it is kept
Account data is stored in a Cloudflare D1 database on Cloudflare's global network. Sign-in codes expire after ten minutes. We do not use advertising or analytics trackers.
Your choices
You can change your leaderboard name or delete your account at any time from the account screen in the game (menu → Account & leaderboards). Deleting removes your e-mail address, name and voyage records immediately; an active subscription must be cancelled first. You can also e-mail hello@wordrafts.com to ask what we hold about you or to have it corrected or removed. Clearing your browser's cookies and storage removes guest data from your device.
Children
WordRafts does not knowingly create accounts for children under 13. If you believe a child has registered, e-mail us and we will remove the account.
Changes
If this notice changes in a material way, we will update the date above and mention it in the game's "What's new" card. Australian Privacy Principles apply where relevant; if you are in the EU or UK, the legal bases we rely on are performance of our agreement with you (accounts and subscriptions) and our legitimate interest in running a fair, secure game (guest allowances and rate limiting).
← Back to the game