Analytics and Tracking on 128ordle

What is measured

Page views, recorded as the page path only. Query strings and fragments are removed before a page view is sent.

Game events such as starting or finishing a puzzle, the mode and board count, sharing a result, opening the leaderboard or stats, and creating or joining a Party room.

Account and shop steps such as opening the sign-up form, completing sign-up, viewing a shop item, starting checkout, and returning from checkout. Payment session identifiers are stripped before these events are sent.

How you arrived: the first page you opened, the name of the referring site, and campaign tags in the link you followed.

Uncaught errors, so that crashes can be diagnosed.

Automatic capture of every click and keystroke is switched off. The site sends a fixed list of named events instead.

The tools involved

PostHog receives the events above for every visitor. Purchases and guest result submissions are also recorded from the server so that they are counted even if your browser blocks analytics.

DataFast counts visits, referrers, and a few goals such as completing sign-up.

Vercel Web Analytics counts page views, and Vercel Speed Insights measures page loading speed. Both run for every visitor and work without cookies.

Google Analytics receives page views and events only if you choose Accept on the consent banner.

The Cookie and Browser Storage Policy lists what each tool stores on your device.

What is linked to you

If you play without an account, analytics sees an anonymous visitor ID, not your name or email.

If you sign in, your account ID and email address are attached to your analytics profile in PostHog. This lets support trace a problem you report and lets the site tell new players from returning ones.

If you turn on the daily reminder email in Settings, 128ordle stores that choice, the days a reminder was sent to you, and whether you opened the play link in it. With your game results, that shows whether reminders bring players back. The email has no tracking pixel, and the reminder is off unless you turn it on.

Leaderboards, profiles, and friends are public features, not tracking. What they show is described in the Privacy Policy.

IP addresses and location

Every website receives your IP address when your browser asks for a page, and the hosting and analytics providers process it as part of serving the request.

128ordle uses it for two things. It works out a two-letter country code to pick a shop currency and to show a flag in Party rooms. And when a result or a report of an unfinished game is sent, it stores a salted one-way hash of the address, which limits how many one network can send in an hour, along with a random ID created in your browser so one browser counts once for each puzzle. The record keeps the hash, not the address. How stats are counted has the detail.

The site never asks your browser for precise location, and the location permission is blocked by the site's own security headers.

What 128ordle does not do

128ordle does not sell personal information, does not use Google Sign-In data for advertising, and does not use it to train AI models.

It does not see or store card numbers. Those go straight to Stripe.

It does not request access to your camera, microphone, contacts, or precise location.

How to limit tracking

Choose Decline on the consent banner, or change your choice later on the cookie page, to keep Google Analytics off.

PostHog, DataFast, and the Vercel tools are not controlled by the banner. A content blocker or browser tracking protection stops them, and the game works normally without them.

Play without an account to keep your activity unlinked from an email address. To remove an account and its records, see Your Data.