Privacy

Last updated 2026-06-11.

Twixtle (formerly Twixt) is a free daily word puzzle. We collect a small amount of anonymous gameplay data so we can tell whether the puzzles are working and where players are coming from. We never sell, share, or use this data for advertising.

What we collect

When you load the page we record an anonymous event with:

If you complete the first-visit tutorial demo we record one additional anonymous event of the same shape, so we can tell whether the tutorial is helping new players.

For every puzzle play we additionally record:

The fingerprint lets us tell that the same visitor refreshed mid-puzzle (so we count one play, not two) and approximately whether a player has played before in the current 90-day window. It cannot be reversed back to your IP address, and once the salt rotates the old fingerprints can no longer be matched to current ones. We aggregate this data to understand traffic, puzzle difficulty, retention, and growth; we do not build a profile of you.

Your IP address itself is briefly cached server-side so we don't re-resolve the same address repeatedly; cached IPs are deleted after 30 days at the latest, and the cache is not joined back to the play records.

How long we keep it

Visit and tutorial-completion events (the rows that carry the source bucket and, where applicable, the referrer hostname) are kept for at most 90 days, then deleted. Puzzle play records are kept indefinitely so we can track puzzle-by-puzzle difficulty over time, but the fingerprint inside them rolls every 90 days, so an old fingerprint can't be matched to a current one even within our own data.

What stays on your device

Your streak, completion of today's puzzle, and the in-progress state of an unsolved puzzle are stored in your browser's localStorage. This is "strictly necessary" storage to deliver the game; it is not used for tracking and is never sent to our servers.

Why we don't show a cookie banner

We don't store any analytics identifier on your device, so we are not subject to the cookie / device-storage consent rules. Our server-side fingerprint is anonymous, first-party, used only for audience measurement, and falls under the equivalent regulatory exemptions for that use (e.g. France's CNIL audience-measurement exemption).

Third parties

To resolve IP addresses to country codes we query ip-api.com, a free public lookup service. We do not share data with advertising or analytics providers. The only cookie we set is for the admin login, and only an admin signing in ever receives it.

Your rights

Because nothing we collect identifies you personally and the fingerprint is non-reversible, we cannot locate or delete a specific person's records on request.

Contact

Questions: hi@twixtle.games.

← back to game