Privacy Policy

Information Tungle collects

Tungle records gameplay information such as puzzle progress, found and revealed words, scores, hints, solve times, streaks and completion history. It also records the settings and social connections needed to provide the features you choose to use.

Technical information may include browser and device details, approximate location derived from an IP address, referring pages and diagnostic information. Tungle does not send the words you trace, usernames, email addresses or player IDs to Google Analytics.

Anonymous players and accounts

You can play without an account. An anonymous player is represented by a persistent random identifier and a player name so progress, settings, friends and statistics can be restored on that device.

If you create an account, Tungle stores your email address, a secure password hash, account timestamps, email preferences and the link to your existing player profile. Passwords are never stored in plain text. Creating an account upgrades the current player rather than creating a separate set of gameplay data.

Local storage and cookies

Local storage keeps the anonymous player identity, puzzle progress, replay state, preferences and other small interface choices on your device. This supports fast loading and offline single-player play.

Registered accounts use a secure, HTTP-only session cookie. Tungle’s advertising and analytics providers may also use cookies or similar technologies, subject to their own policies, your browser settings and any consent choices required where you live.

Analytics

Google Analytics 4 helps measure page visits and broad gameplay events, such as starting or completing a puzzle and using a hint. Event data is limited to non-identifying metadata such as word length, outcome, points, board dimensions and completion time.

Microsoft Clarity helps identify usability problems through aggregated behaviour and session replay. Multiplayer invite routes are excluded so private invite tokens are not captured. These providers may process technical information under their own privacy terms.

Friends and playing together

Friend features store the relationship between player profiles and the daily progress needed for the friends view. Live Play Together sessions store participants’ stable player identities, display names, presence, accepted-word attribution, contribution scores and shared puzzle state. This information is shown only as needed to people in that session.

Invite links contain an unguessable session or friendship token. Treat them as private links and share them only with people you intend to invite. Active live sessions expire after inactivity; completed session records are retained for a limited period for reconnection and results.

Payments and advertising

Tungle+ purchases are processed by Stripe. Stripe handles payment-card and billing details. Tungle stores the Stripe customer identifier needed to check subscription status and open subscription management; it does not store full card details.

Free players may see advertising supplied by Google AdSense. Google may process device, cookie and advertising information to deliver, limit and measure adverts. Premium players do not receive AdSense placements from Tungle while their subscription is active.

Retention and security

Gameplay and account records are retained while they are needed to provide progress, history, social features and subscriptions. Session credentials expire, and temporary Multiplayer data has its own shorter lifecycle. Some records may be kept where reasonably required for security, fraud prevention, accounting or legal obligations.

Tungle uses access controls, secure password hashing, scoped session tokens and encrypted connections in production. No online service can guarantee absolute security, but access to personal information is limited to what is necessary to operate the service.

Third-party services

Tungle currently relies on MongoDB for application data, Vercel for hosting, Stripe for payments, and Google Analytics, Microsoft Clarity and Google AdSense for analytics or advertising. Information handled by those providers is also governed by their respective privacy policies.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete or restrict the use of your personal information, and to object to or withdraw consent from certain processing. Browser controls can be used to clear local storage and manage third-party cookies, though doing so may remove anonymous progress from that device.

To ask a privacy question or make a data request, email max@andreassentech.com. Tungle may need to verify that a request relates to your account or player profile before acting on it.