Privacy

Public reading and optional external content

Word stories, topic collections, guides and social-post transcripts can be read without signing in. The social pages are hosted by Lexifour and do not load TikTok embeds. Choosing an original-post link takes you to TikTok under its own privacy policy. The Word of the Day page has an optional Wordsmith widget, loaded only when you select its button. That connects your browser to Wordsmith, which receives ordinary connection information such as your IP address and browser details. We do not send Wordsmith your Lexifour account, email, answers or learning history. You can read the Lexifour word without loading the widget.

What Lexifour collects

You can play Timed Play without giving us an email address. Lexifour assigns an opaque random device identifier and stores gameplay such as runs, answers, response times, hint use, streaks, and leaderboard eligibility. We also record bounded product events such as screens reached, review and sharing outcomes, login, Learn, newsletter, Checkout and promo steps, content reports, and privacy-safe error codes. Reliability events use broad browser-family and viewport-size buckets plus the app deployment version; they never include arbitrary URLs, stack traces, form contents, answer text, secrets, advertising identifiers, or raw IP addresses.

If you sign in, Google provides a verified account identifier and email address. Lexifour does not receive your Google password. You may optionally provide a display name, leaderboard visibility, and a country, province or state, and city selected from our location catalog; we do not infer location from your IP or GPS.

Learn stores queues, answers, ratings, saves, learning history, scheduling state, timezone, and conflict revisions so practice can continue across devices. Saved vocabulary and full learning history are Pro features; existing legacy Premium access is preserved. We also store account, consent, entitlement, moderation, and operational records needed to provide and protect the service.

Mobile apps

Player-name reports are retained for up to 90 days for moderation. Hidden-player preferences remain until you unhide the player or the relevant account is deleted. Reports and hiding preferences are not shared with advertising providers.

Optional practice reminders and their preferences stay on your device. Result images are generated locally. Sharing an image or exporting account data opens your phone’s share sheet; only the destination you select receives the file. Temporary export files are kept in private cache and cleared on the next app launch. Native account deletion can be requested without waiting for a paid period to expire; processing may take up to 30 days. Deletion does not cancel billing: cancel separately with the subscription provider to stop future charges.

Our mobile apps use the same Lexifour account, gameplay records, Learn progress, and entitlements as the website. Google sign-in opens a system browser; your Google password is not sent to Lexifour. The app stores a session cookie and limited recovery data on your device so accepted work can survive closing and reopening. Signing in restores account progress from our servers.

Mobile app packages include Google’s AdMob and consent SDKs rather than the website’s AdSense H5 integration. Advertising is currently disabled in development builds. Google’s mobile SDKs may process technical data including IP address (which can indicate approximate location), device or advertising identifiers, app interactions, and diagnostic information for advertising, analytics, and fraud prevention. We do not send your private answers, scores, account email, or Learn history to ad providers.

When store purchases are available, Google Play or Apple processes the payment. Lexifour verifies the purchase with the store and retains its platform, product, purchase reference, expiry, and subscription state to provide access, restore purchases, and process renewal or revocation updates. An opaque account identifier binds the purchase to your Lexifour account. Lexifour does not receive your card details. Manage a subscription through the platform where you bought it; provider transaction-retention obligations are separate from Lexifour account deletion.

Advertising and choices

Free play may include Google AdSense H5 fullscreen ads at natural breaks, never during a timed question. Pro and qualifying legacy or complimentary access are ad-free. Advertising remains off until provider approval and consent configuration are complete. If ads are blocked, unavailable, or declined, gameplay still works.

When advertising is enabled, Google’s consent service manages applicable advertising choices. We request non-personalized ads only after the required consent and opt-out checks. Google and its advertising partners may process technical data such as IP address, browser information, page origin, cookies and similar identifiers under their own policies. Lexifour does not send account emails, answers, scores, private learning history, or billing data to the advertising provider. This is separate from our first-party telemetry, which does not retain raw IPs or advertising identifiers.

Advertising choices include an immediate browser-level opt-out and provider consent withdrawal. We honor Global Privacy Control by not requesting ads. Local operational storage remembers ad breaks, up to three recent visit dates, and a seven-day upgrade-prompt cooldown; old break records expire after 90 days. This state is specific to the browser, is not sent to the ad provider, and can be cleared with site data. Bounded ad-outcome and promotion telemetry uses the same 90-day raw retention, aggregates, account export and deletion rules as other product events. Actual ad impressions and revenue are measured by Google, not inferred from our ad requests. See how Google uses information from partner sites.

Cookies

Lexifour uses essential host-only cookies for anonymous identity, Google sign-in transactions, and signed-in sessions. They are Secure, HttpOnly, SameSite=Lax, limited to the current hostname, and are not advertising cookies. Beta and production cookies are separate.

How data is used and retained

Gameplay data supports the daily game, Learn, streaks, leaderboards, abuse prevention, reliability, product improvement, and question-quality analysis. Raw answers, behavioral events, client errors, and content reports are retained for 90 days, then removed after de-identified daily and question-level aggregates are produced. Account activity and identifiable Learn history remain while the account exists. De-identified aggregates may remain after deletion.

Public leaderboard visibility is controlled in your account. Location leaderboards show results only when enough opted-in players are available. Display and group names may be blocked, held for review, hidden, or removed under the moderation policy.

Service providers

Google

Google provides authentication. Lexifour requests only OpenID identity and email access.

Stripe

Stripe processes subscriptions and hosts Checkout and the Customer Portal. Lexifour stores billing identifiers, subscription status, tier, renewal state, and entitlement timing, but not full card details. Stripe may retain transaction records under its own legal obligations after a Lexifour deletion.

Buttondown

Buttondown delivers the optional weekly newsletter. Lexifour sends the verified account email only after explicit consent and requests double opt-in. A weekly email may contain a limited summary of your own activity, answer correctness, and approved vocabulary you encountered; Lexifour does not send raw gameplay history, location, leaderboard, or payment data to Buttondown. Newsletter unsubscribe is separate from account deletion: use the unsubscribe link in any newsletter email. Withdrawing newsletter consent stops newsletter processing but does not delete gameplay or Learn data.

Cloudflare

Cloudflare hosts the application, databases, security, and operational monitoring.

Export and deletion

Signed-in users can download a machine-readable export from the account panel. It covers profile, groups, entitlements, newsletter consent, runs, answers, Learn state, Learn history, Learn sessions, identifiable product telemetry, and content reports.

You can request account deletion from the account panel. Requests complete within 30 days, revoke account sessions and complimentary access, and remove or anonymize Lexifour profile, gameplay, Learn data, and identifiable telemetry. An active paid subscription must be cancelled first. Stripe record retention and Buttondown unsubscribe are separate as described above.

Contact

For privacy, export, deletion, or moderation questions, email support@lexifour.com.