School Emails and School Data on 128ordle

What is stored when you verify a school email

The school email address, the part after the @ sign, the school it matched, the time you verified it, whether your badge is switched on, and the time you claimed your pack.

Verification codes are six digits, last ten minutes, and are stored only as a one-way hash, so the code itself cannot be read back. Records of old codes are deleted within about a week.

What is stored when you request a pack

The request form in Settings works with any account. It stores the school name and optional note you typed, linked to your account, and emails them to the person who runs 128ordle together with your username and sign-in email so the request can be answered.

A request is not checked against anything. If it is granted, the school is linked to your account without a school email. Requests are cleared after a year.

What it is used for

Giving you your school pack, showing your optional badge, and running a leaderboard that only members of your school can open. Limits on codes and requests also use these records to stop abuse.

A verified school email can also be used to sign in to your account.

What it is never used for

128ordle does not contact your school, tell it that you play, or share your results, account or activity with it. It has no connection to any school system and cannot see your grades, timetable or anything else your school holds.

School email addresses are sent verification codes you ask for and nothing else. No marketing or newsletters go to them. A daily reminder is sent only to the address you sign in with, and only if you turn it on yourself in Settings.

School emails, school names and memberships are not sold, not given to advertisers and not used to target advertising.

Who can see it

Your school email address is never shown to other players. It is visible to you and to the person who runs 128ordle, who uses it to approve schools and to help with problems.

Members of the same school can see your username and results on the school leaderboard, in the same way they appear on the public leaderboard.

University members can choose to show a badge with the university name next to their username. It is off until you switch it on. College and school memberships are never shown publicly, because those communities are small enough that a badge could identify someone.

Companies involved

Verification emails are sent by Resend, which receives the address and the email. Open and click tracking are switched off. Memberships and requests are stored in the 128ordle database, hosted by Supabase.

To recognise a university, only the part of your address after the @ sign is checked, against 128ordle's own list and a public list of university email domains. Your full address is not sent for that check.

When a school email is verified, the analytics tool records that it happened and which school it matched, so the feature can be monitored. The email address is not part of that record. If you sign in with your school email, it is your account email and is treated as described in Analytics and Tracking.

Younger players

School email verification does not accept school pupil addresses, such as those ending in .sch.uk or on k12 domains. It is meant for colleges and universities.

128ordle is not directed to children under 13. If you are under the age of majority where you live, ask a parent or guardian before making an account or sending a pack request. A parent or guardian can email [email protected] to have a child's account or request reviewed and removed.

Removing it

Open Settings, choose School, and remove your school email or leave your school. The membership, badge and pack are removed straight away. If you sign in with your school email, add a personal email first so you are not locked out.

Deleting your account removes your school membership and any pack requests along with everything else. See Your Data for what deletion covers, or email [email protected] to have a single request removed.