Privacy Policy

This policy covers the WordBowl marketing site at www.wordbowl.app and any account you create here. The WordBowl mobile apps have their own in-app privacy notices that cover gameplay data stored on your device.

What we collect

• Waitlist email. If you join the waitlist, we store the email address you submit plus the page you joined from, your user agent, and your IP. We use this only to email you at launch and to fight spam signups.
• Account email and password. If you create an account, we store your email address and a hashed password through our auth provider, Supabase. We never see your password in plain text.
• Google sign-in. If you choose “Continue with Google,” Google shares your email address and basic profile info (name, avatar) with us through OAuth. We only use this to identify your account.
• Session cookies. Signing in sets first-party cookies so you stay logged in between visits. These are required for the site to work and are not used for advertising.
• Deletion requests. If you submit the account deletion or data deletion form, we store the email you provided, the categories you asked us to delete (data deletion only), any notes you wrote, your user agent, and your IP. We use this only to verify the request, action it, and keep an audit trail of what was deleted and when.
• Support requests. If you contact support through /support, we store your name, reply email, optional account email, topic, platform, message, user agent, and IP. We use this only to answer your question, investigate issues, and keep a record of what we told you.

What we do not do

• No third-party advertising trackers on this site.
• No selling of your data, ever.
• No profile building across other sites.

Who processes your data

• Vercel hosts this site and handles incoming requests.
• Supabase stores the waitlist table and the auth users table, and issues session cookies.
• Google provides optional sign-in. Their terms apply when you use it.
• Resend sends internal email notifications for waitlist and support form submissions so we can reply quickly.

Your choices

• Delete your account. Use the in-app option under Profile, Delete account, or submit the public form at /delete-account. We email you to confirm and then delete within 30 days.
• Delete some of your data without deleting your account. Use the form at /delete-data to pick specific categories (game history, decks, custom bowls, push tokens, profile data, analytics) and we will wipe just those within 30 days.
• Unsubscribe from the waitlist. Email hello@wordbowl.app and we will remove your waitlist entry the same day.
• Sign out. You can sign out any time from /account.
• Other questions or requests. Email hello@wordbowl.app. We handle GDPR access, portability, and correction requests through the same address.

How long we keep things

• Waitlist entries: kept until launch, then we email you and delete on request.
• Account data: kept until you delete your account.
• Deletion request records: kept for one year after we action them as an audit trail, then deleted.
• Support requests: kept for up to two years after the last response, then deleted unless we need them for safety, fraud, or legal reasons.
• Backups: rotated within 30 days, so deleted data fully clears backups within that window.

Children

WordBowl is not directed at children under 13. Please do not sign up if you are under 13.

Changes

If we change this policy in a way that matters, we will update the date at the top and notify account holders by email.

Contact

Questions go to hello@wordbowl.app.