Back to play →

A LITTLE CLARITY.

Privacy policy

What Ludle uses to keep your game going, and what other players can see.

Effective

Who operates Ludle

Ludle is an independently operated personal project based in Québec, Canada. This policy describes the current website at ludle.app. It does not cover the independent practices of websites you visit through external links.

Information used to run the game

  • Accounts: Supabase manages your account identifier, email address, authentication sessions, and sign-in records. Google sign-in can supply basic profile information such as your name, email, and profile image. Ludle does not receive your Google password or request access to your Gmail messages or contacts.
  • Guest play: Playing without registering on the connected website still uses a Supabase guest identifier and stores gameplay on the server. Guest play does not ask you to provide a name or email address, but its records remain linked to that identifier.
  • Progress: Puzzle dates, your timezone, guesses, results, and thumbs-up or thumbs-down votes support game rules, saved progress, statistics, and puzzle feedback. Your timezone determines the local daily reset; it is not precise GPS location.
  • Technical information: Hosting and authentication providers process connection information, such as IP addresses and request/device details, to deliver and secure the service. Requests are rate-limited to reduce abuse.

What is public

A registered player who saves a public name and wins a daily puzzle can appear on the leaderboard with that name, rank, and number of guesses. Do not use your real name or other personal details as your public name unless you want them displayed. Your email address is not included in leaderboard results.

Sharing a result is optional. The share action copies or sends result text using your browser; the destination you choose has its own privacy practices.

Browser storage and cookies

Ludle uses browser local storage for authentication sessions, a temporary guest-progress transfer token, and a flag remembering that this browser has signed in before. That flag contains no email address or username and remains after sign-out. The separate practice preview stores its game progress in this browser rather than uploading it.

Clearing site storage removes those local values and may sign you out or lose guest access. It does not delete server-side accounts or progress. Cloudflare Web Analytics does not use cookies or local storage to track individual visitors. Cloudflare uses security cookies to help protect Ludle against automated abuse and malicious traffic. These cookies support website security and are not used for advertising.

Service providers and game data

  • Supabase provides authentication, the database, and backend functions. Ludle's production database is hosted in Oregon, United States. Authentication emails are sent through Supabase's configured email delivery service.
  • Cloudflare hosts and delivers the website and provides network security. Its analytics help us understand aggregate traffic and website performance, including loading speed, responsiveness, and layout stability. Web Analytics does not track individuals over time using cookies or fingerprinting. Security and operational processing are separate and may include IP addresses and request information.
  • Google handles Google sign-in when you choose that option.
  • IGDB supplies game information. Search text may be sent from Ludle's backend to IGDB to find additional games. Loading externally hosted game images also sends connection information to the image host.

Information is processed outside Québec and Canada, including in the United States. Ludle currently has no advertising or subscription checkout in the application.

Retention and account deletion

Account and gameplay records currently remain in the database until removed. Automatic cleanup of inactive accounts is planned but is not yet running. Provider logs and backups have separate retention settings; removing active account records does not immediately erase those copies.

You can request deletion of your account and associated data by emailing support@ludle.app. Requests are handled manually. We may need to verify that the records belong to you before removing them. For a registered account, contact us from the email address used for that account where possible. Do not send passwords, sign-in links, or session tokens.

For guest play, keep the browser session you used to play if possible. Guest records are linked to a generated identifier rather than your email address. If you have lost that session, we may be unable to identify and verify which guest records belong to you from an email request alone.

Removing a Ludle authentication account also removes its linked profile, attempts, guesses, and votes from the active database. It does not delete your Google account or shared game data. Clearing your browser or signing out is not account deletion. There is currently no self-service delete-account button.

Your choices and privacy requests

You can choose whether to register, sign in with Google, choose a public name, or share results. You may request access to or correction of your personal information, raise a privacy concern, or request account deletion, subject to applicable law and identity verification. Contact the privacy and support address below. We will request only the information needed to identify the relevant records and verify your request.

Changes to this policy

We update the effective date above when this policy changes. Material changes to data practices, including future advertising or payments, require an updated policy and any notice or consent required by law. This policy does not request consent to future tracking.

For support, privacy questions, or a manual data-deletion request, email support@ludle.app. Do not send passwords, sign-in links, session tokens, or identity documents with your initial request.