Privacy Policy

The controller of your data is Popular Guess Only, Mica Sirena 28, Mosnita Noua. For anything in this policy — including access or deletion requests — email hello@popularguessonly.com.

• Your guesses. The answer you type each day, a normalized version of it used to group identical answers, and the time you submitted. This is the core of the game.
• Your streak.A counter and the last day it was applied, so streaks survive across devices and can't be edited from the browser.
• Account details (only if you create an account): your email address, an optional display name, a securely hashed password if you set one, and timestamps for creation, email verification and last login.
• Sign-in security data. For each active session we store the IP address and browser user-agent that started it, so you can review and revoke sessions. We also log failed login attempts (email address and IP address) to throttle password guessing.
• Google Sign-In data(only if you use that button): your Google account identifier, email address and name, taken from the identity token Google returns. We never receive your Google password, and we don't request access to any other Google data or ongoing access to your account.
• Push subscriptions (only if you turn on reminders): the notification endpoint your browser generates and its encryption keys.
• Aggregate usage analytics. Page views and basic performance data, which we see only in aggregate.

We don't ask for your real name, address, phone number or payment details, and the game has no need for them. Please don't type personal information about yourself or anyone else into an answer — answers are shown publicly (see below).

• Play identity(1 year) — a random, signed identifier that lets us enforce one guess per day and remember your streak without an account. It is not linked to your identity and can't be read by scripts.
• Session (30 days, accounts only) — an opaque token that keeps you signed in. Logging out deletes it on both ends.
• Google sign-in (10 minutes) — a temporary value that protects the sign-in redirect against tampering. It is deleted as soon as sign-in finishes.
• Consent preferences— our consent banner stores your cookie choices so it doesn't ask again.

The first three are strictly necessary for the game to work. Our analytics does not use cookies to track you across sites.

The daily board shows answers and how many people gave each one. Your answer therefore becomes part of a public, aggregated result, and the most common spelling of an answer is displayed as its label. We never publish your email address, your display name, your IP address, or which specific answer came from you.

• To run the game — recording guesses, building boards, keeping streaks, and providing your account. This is necessary to perform our agreement with you (GDPR Art. 6(1)(b)).
• To keep accounts secure — session records, login throttling, email verification and password resets. Our legitimate interest in preventing abuse and account takeover (Art. 6(1)(f)).
• To moderate content — filtering slurs and profanity before an answer is stored or displayed. Legitimate interest in a safe, usable service (Art. 6(1)(f)).
• To send reminders — only if you opt in to notifications, which you can withdraw at any time (Art. 6(1)(a)).
• To understand aggregate usage — legitimate interest in improving the game (Art. 6(1)(f)).

We keep the list of third parties deliberately short. Each acts as our processor under contract and only on our instructions:

• Vercel — hosting, content delivery and aggregate analytics.
• Neon — the managed Postgres database where game and account data live.
• Resend — sending verification and password-reset emails.
• Google— only if you choose Google Sign-In; Google's own privacy policy governs your Google account.
• CookieYes — recording your cookie consent choices.

Some of these providers operate outside the European Economic Area. Where that happens, transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard. We do not sell your data or share it for advertising.

No advertising network is currently active on this site, and no advertising or profiling cookies are set. If that changes, we will update this policy and ask for your consent first where the law requires it.

• Answers and boards are kept indefinitely — past days stay browsable in the archive, which is part of the game. They are detached from your account if you delete it.
• Account data is kept while your account exists, and erased as soon as you delete it from your account page.
• Sessions expire after 30 days of inactivity, or immediately when you log out, change your password, or revoke other sessions.
• Verification and password-reset tokens are single-use and expire within hours; they are deleted once used.
• Failed login records are only consulted for a short window and are kept no longer than needed to investigate abuse.
• Push subscriptionsare deleted when you unsubscribe or when your browser's endpoint stops working.

If you are in the EU or UK you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to processing based on legitimate interests. You can also withdraw consent for notifications at any time and complain to your local data protection authority.

Most of this you can do yourself from your account page: update your display name or password, revoke other sessions, and — under Delete account — erase your account immediately and permanently. Turn off reminders with the notification toggle. For anything else, email hello@popularguessonly.com from the address on the account and we will action it within one month.

Deleting your account removes your email address, display name, password, any linked Google identity, your streak, your notification subscriptions, and your session and login records including the IP addresses stored with them. Guesses already counted into a public board stay in that board as anonymous, aggregate data — they are detached from you first, so nothing connects them to you, and removing them outright would rewrite past results for other players.

Passwords are stored only as salted PBKDF2 hashes, never in readable form. Session, identity and sign-in cookies are HTTP-only, so page scripts can't read them, and sessions live server-side where they can be revoked. All database queries are parameterized, traffic is encrypted in transit, and login attempts are rate-limited. No system is perfectly secure, but we keep the amount of data we hold small on purpose.

The game is not directed at children. You need to be at least 16 to use it. If you believe a child has given us personal data, contact us and we will delete it.

If we change how we handle data we will update this page and its "last updated" date, and for significant changes we will say so in the game itself.

Privacy questions and requests: hello@popularguessonly.com. Anything else: hello@popularguessonly.com. See also our Terms of Service.