Last updated: June 1, 2026.
This Privacy Policy explains how 128ordle handles information when you play the game, create an account, submit scores, use leaderboards, contact support, or make a purchase.
If you create an account, 128ordle may store account identifiers, username, display name, profile settings, badges, achievements, friend or profile interactions, submitted results, and subscription or entitlement status. If you contact support, the information you include in that message may be used to respond.
If you choose Continue with Google, 128ordle uses Google Sign-In through Supabase Auth to create or sign you in to a 128ordle account. For this sign-in flow, the app is intended to request only the basic Google OAuth scopes openid, https://www.googleapis.com/auth/userinfo.email, and https://www.googleapis.com/auth/userinfo.profile. Google may provide your Google account identifier, email address, email verification status, name, and profile picture or avatar.
128ordle uses that Google user data to authenticate you, keep you signed in, create your 128ordle profile, link gameplay progress, stats, streaks, achievements, leaderboards, friend features, support requests, purchases, subscriptions, and account security to the same account. 128ordle does not use Google user data to access Gmail, Drive, Calendar, Workspace, or Data Portability APIs, does not sell it, does not use it for ad targeting, and does not use it to train AI or machine learning models.
Google sign-in data is stored by Supabase Auth and in 128ordle account or profile records as needed to operate your account. The app uses Supabase-issued session tokens in browser storage to keep you signed in; it does not use Google access tokens to call Google APIs after sign-in or store Google refresh tokens in application tables.
128ordle stores game progress, preferences, statistics, consent choices, and other gameplay state in your browser storage so puzzles can continue across sessions. Signed-in features may also save selected results or profile data remotely through Supabase.
128ordle may use analytics and hosting tools such as Vercel Analytics, PostHog, Google Analytics, Cloudflare, and Supabase to understand usage, diagnose issues, and run the app. Paid checkout, subscriptions, and billing portals are handled by Stripe, which processes payment information under its own terms and privacy policy. If you buy a paid feature, your account email may be shared with Stripe for checkout, receipts, billing, fraud prevention, and subscription management.
You can play without an account, clear browser storage, adjust browser privacy controls, decline optional tracking where consent tools are shown, cancel subscriptions through billing management, revoke Google Sign-In access from your Google Account permissions, or contact support about account and profile data.
Questions about privacy can be sent through the contact page. The rules for using 128ordle are available in the Terms of Service.