Last updated 2026-07-21.
The data controller is UNSEEN FORMS LIMITED, a company registered in England and Wales (company no. 14395660), registered office: 11 Duchy Road, Harrogate, North Yorkshire, HG1 2EZ. Contact: hi@twixtle.games.
Twixtle (formerly Twixt) is a free daily word puzzle. We collect a small amount of anonymous gameplay data so we can tell whether the puzzles are working and where players are coming from. We never sell, share, or use this data for advertising.
When you load the page we record an anonymous event with:
If you complete the first-visit tutorial demo we record one additional anonymous event of the same shape, so we can tell whether the tutorial is helping new players.
For every puzzle play we additionally record:
The fingerprint lets us tell that the same visitor refreshed mid-puzzle (so we count one play, not two) and approximately whether a player has played before in the current 90-day window. It cannot be reversed back to your IP address, and once the salt rotates the old fingerprints can no longer be matched to current ones. We aggregate this data to understand traffic, puzzle difficulty, retention, and growth; we do not build a profile of you.
Your IP address itself is briefly cached server-side so we don't re-resolve the same address repeatedly; cached IPs are deleted after 30 days at the latest, and the cache is not joined back to the play records.
Visit and tutorial-completion events (the rows that carry the source bucket and, where applicable, the referrer hostname) are kept for at most 90 days, then deleted. Puzzle play records are kept indefinitely so we can track puzzle-by-puzzle difficulty over time, but the fingerprint inside them rolls every 90 days, so an old fingerprint can't be matched to a current one even within our own data.
Your streak, completion of today's puzzle, and the in-progress state of an unsolved puzzle are stored in your browser's localStorage. This is "strictly necessary" storage to deliver the game; it is not used for tracking and is never sent to our servers.
We don't store any analytics identifier on your device, so we are not subject to the cookie / device-storage consent rules. Our server-side fingerprint is anonymous, first-party, used only for audience measurement, and falls under the equivalent regulatory exemptions for that use (e.g. France's CNIL audience-measurement exemption).
The only cookies we set are strictly-necessary sign-in cookies: one if you sign in to a Twixtle+ account, and one for our own admin login. Neither is used for tracking, and if you never sign in you never receive a cookie at all.
Playing Twixtle needs no account. If you subscribe to Twixtle+, we store your email address (to sign you in and manage your subscription), your puzzle history (so your streak and past solves follow you across devices), and, if you opt in to the supporters list, the display name you choose. Payments are processed by Stripe; your card details go to Stripe directly and never touch our servers. We can delete your account data on request, and you can cancel the subscription at any time from the account screen.
To resolve IP addresses to country codes we query ip-api.com, a free public lookup service. Twixtle+ payments are handled by Stripe as described above. We do not share data with advertising or analytics providers.
The anonymous play data cannot be tied back to you: nothing in it identifies you personally and the fingerprint is non-reversible, so we cannot locate or delete a specific person's play records on request. Twixtle+ account data (your email and display name) is different: email us and we will delete it.
Questions: hi@twixtle.games.
© 2026 UNSEEN FORMS LIMITED