Privacy Policy

Puzzle grids, word lists, puzzle titles, generated answer keys, image scan previews, OCR results, and manual edits are intended to remain in your browser unless you choose a feature that clearly requires server processing.

For the Sudoku generator, puzzle generation, answer keys, difficulty settings, and print layout settings are intended to run in your browser. Word Puzzle World does not store generated Sudoku grids or answer keys on our servers for the v0 Sudoku generator. If you copy a share link, the link may include a seed and settings so the same puzzle can be regenerated.

When you use manual puzzle tools, please avoid entering student names, email addresses, school IDs, private classroom records, confidential information, or other sensitive personal information.

The solver offers two image scan modes. Standard Scan uses browser-based image processing and self-hosted OCR model assets on your device. If you deliberately choose Advanced Scan, the full puzzle image is sent through our server to a third-party AI model provider so the letter grid and word list can be extracted together. Advanced Scan does not automatically fall back to Standard Scan when it fails. You may switch modes yourself or be asked to retake, straighten, crop, improve the photo, or type the words manually.

Image scan processing may include uploaded puzzle images, screenshots, camera captures, extracted OCR text, extracted puzzle grids, extracted word lists, file type, file size, processing time, detected row and column counts, confidence scores, warnings, and editable review state.

We use images and OCR results only to provide the scan, create editable puzzle text, check the result, improve reliability, and troubleshoot failures. Uploaded images and extracted puzzle content are not intentionally written to our database or object storage, and production diagnostics are designed not to log request bodies, image data, raw OCR text, grids, or word lists. The third-party AI model provider may process an Advanced Scan image and extraction request under its applicable terms and privacy practices.

We do not intentionally send uploaded images, puzzle grids, word lists, OCR text, puzzle titles, student names, emails, school identifiers, or private classroom content to analytics providers.

Please do not upload images that contain student records, student names, email addresses, school IDs, personal photos, confidential materials, sensitive personal information, or content you do not have permission to process.

Some account features may require signing in with Google. If you choose to sign in with Google, Google may share certain account information with us, such as your Google account identifier, email address, display name, and profile picture, depending on your Google settings and the permissions shown during sign-in.

We use Google Sign-In information to create or maintain your Word Puzzle World account, keep you signed in, provide support, apply OCR usage limits, secure the service, and prevent abuse. We do not request access to your Gmail, Google Drive, contacts, calendar, or other Google account content.

We use Google Sign-In information only for authentication, account management, usage limits, support, security, and abuse prevention. We do not sell Google account information or use it for advertising profiling.

When you use the feedback form, we receive your message, feedback type, the page and language you were using, browser and referral details, and the email address you provide so we can reply. You may also choose to attach up to three screenshots.

Feedback screenshots are stored in a private Cloudflare R2 bucket for up to 30 days. A support notification sent through Discord includes the feedback summary, a reference number, and one protected link that opens all screenshots attached to that feedback; the images themselves are not attached to the Discord message. Anyone who receives the complete protected link can view the images until they expire, so the link should not be shared.

To deliver that notification reliably, we may briefly keep an encrypted copy of the feedback details in Cloudflare D1. It is removed after successful delivery, or within 30 days if delivery cannot be completed. The delivery queue receives only a random reference, not the feedback text, contact details, or protected screenshot link.

Feedback submissions use Cloudflare Turnstile and a short-lived daily counter under a keyed hash of the request's IP network to prevent abuse. We do not intentionally store the raw IP address in the feedback attachment or submission-limit record.

Please do not attach student records, names, faces, personal photos, account details, confidential material, or other sensitive information. Include the feedback reference number when requesting early deletion of feedback screenshots.

The current solver image scan does not spend account OCR credits, but request limits may apply to protect availability and control processing cost. Advanced Scan uses a Cloudflare security check once per browser session and applies daily browser and IP-network limits before an image is sent to the AI model provider. Standard Scan remains available when an Advanced limit is reached.

For these limits, we store short-lived daily counters under keyed hashes of a browser identifier and IP network. The raw IP address, uploaded image, base64 image content, raw OCR text, extracted grid, word list, and puzzle title are not stored in these counter records.

We do not use OCR credit or usage counts to infer sensitive information about you. Credit rules and usage limits may change over time to protect the service from abuse or excessive cost.

When you visit the site, limited technical information may be processed to operate, secure, and improve the website. This may include IP address, browser type, device type, pages visited, referring pages, approximate region, request metadata, and security logs.

If you sign in or use OCR image scan, additional safe technical signals may be processed to keep the feature available, debug failures, apply usage limits, and prevent abuse. We do not intentionally log request bodies, base64 images, raw OCR text, extracted grids, or word lists in production logs.

Word Puzzle World is hosted on Cloudflare Workers with Cloudflare DNS, CDN, HTTPS, security services, D1 database services, and private R2 object storage for optional feedback screenshots. Cloudflare may process technical request data and security logs to deliver the site, prevent abuse, and keep the service available. Advanced full-image puzzle scans may be sent from our Cloudflare-hosted service to a third-party AI model provider for extraction.

Plausible cookie-less analytics may load to measure aggregate usage and site health. When configured, Google Analytics 4, Microsoft Clarity, and Ahrefs Web Analytics load only after you choose Accept in the analytics cookie banner.

Microsoft Clarity page content is globally masked in code with an inherited root-page mask before Clarity records it.

Analytics events are limited to non-content usage signals such as page views, tool button clicks, print clicks, game completion events, OCR provider type, scan status, grid dimensions, confidence, warning count, and issue count. Analytics events must not include puzzle grids, word lists, puzzle titles, images, base64 image data, OCR raw text, emails, student names, school names, Google account IDs, or private classroom content.

We use or plan to use Google AdSense to display and measure advertising. Google, its advertising partners, and other third parties may place or read cookies, use web beacons, or collect IP addresses and device or browser identifiers as a result of ads being served on this site. This information may be used to deliver, personalize, limit, secure, and measure ads, detect fraud, and produce reporting.

Depending on your location, consent choices, and Google settings, you may see personalized ads, non-personalized ads, or limited ads. We do not intentionally send puzzle images, puzzle grids, word lists, raw OCR text, student names, or private classroom content to Google AdSense as ad-request data.

Before serving Google ads where consent is required in the European Economic Area, the United Kingdom, or Switzerland, we will use Google's certified consent management platform for AdSense advertising choices. The Google message will be separate from our analytics cookie banner, which controls Google Analytics 4, Microsoft Clarity, and Ahrefs Web Analytics.

Learn more about how Google uses information from sites and apps that use its services in Google's partner sites and apps notice. You can also review Google's advertising controls in My Ad Center.

Essential technologies are used to deliver, secure, and operate the website. Advanced Scan uses an essential browser identifier cookie for daily limits and an essential session cookie after Cloudflare completes its security check. If account features are enabled, we may also use essential cookies to keep you signed in, secure the login process, remember authentication state, prevent CSRF attacks, and verify OAuth state or nonce values. These essential technologies are separate from analytics technologies.

Plausible is designed to be cookie-less and may load without the optional analytics consent banner. Google Analytics 4, Microsoft Clarity, and Ahrefs Web Analytics load only after analytics consent when configured.

The site stores your analytics choice in localStorage under the key wordpuzzleworld_analytics_consent. Image scan previews may also keep a temporary browser-side draft in sessionStorage so you can review a selected image during the scan flow. You can reopen the analytics banner from Cookie Settings in the footer or clear browser-side values through your browser settings.

Google AdSense, Google Analytics, Microsoft Clarity, Ahrefs, Google Sign-In, and other third-party services may use cookies or similar technologies according to their own policies when enabled and applicable. Before serving Google ads where advertising consent is required, we will handle that consent through Google's certified consent message.

We may use Cloudflare for hosting, DNS, CDN, HTTPS, security, database services, and private feedback screenshot storage; Discord to receive support and feedback notifications with protected screenshot links; a third-party AI model provider for Advanced full-image puzzle extraction; Google Sign-In or Google Identity Services for authentication if account features are enabled; Google AdSense for advertising and, once configured where required, Google's certified consent management platform for advertising choices; Plausible for privacy-friendly analytics; Google Analytics 4 for traffic measurement; Microsoft Clarity for aggregate behavior insights; Ahrefs Web Analytics for search measurement; Google Search Console for site ownership verification and search diagnostics; and an email provider or Cloudflare Email Routing to receive support messages.

Each third-party service processes information according to its own terms, privacy policies, and data processing settings. We try to use only the information needed to provide and protect the service.

Word Puzzle World may be useful for teachers, parents, homeschool users, and students. The site is intended for general educational use with appropriate adult guidance.

We do not knowingly collect personal information from children under 13. If you are a student, use this site with permission from a parent, guardian, or teacher. Do not upload personal information, student records, school IDs, or private classroom materials.

If you believe a child has provided personal information to us, contact us so we can review and delete it where appropriate. If the service is used in a school or with children under 13 in a formal setting, the school, teacher, or parent should ensure they have the necessary permissions and should avoid uploading student personal information.

Puzzle inputs that are manually typed are intended to remain in your browser and are not intentionally stored by us. Uploaded puzzle images are processed transiently for OCR and are not intentionally stored in our database or object storage after the response is returned. Separate Cloudflare, AI model provider, and Google service logs may be retained according to their settings and policies.

Optional screenshots attached to feedback are a separate support feature. They are stored privately for up to 30 days and then expire; the protected viewing endpoint stops serving them at the recorded expiration time, while physical deletion by the storage lifecycle may complete shortly afterward.

Account information may be retained for as long as your account remains active or as needed to provide the service, comply with legal obligations, resolve disputes, maintain security, or prevent abuse. OCR diagnostic records are retained for up to 7 days for troubleshooting, cost review, and abuse prevention.

Technical logs, Cloudflare logs, analytics data, and support emails are retained according to operational needs, provider settings, applicable law, and the settings available for those services.

You can use browser privacy controls, clear cookies and local storage, or choose not to enter personal information into puzzle tools. Use Cookie Settings in the footer to reopen the analytics banner and change the choice that controls Google Analytics 4, Microsoft Clarity, and Ahrefs Web Analytics. If Google's certified advertising consent message is enabled and applies to you, use its privacy options to manage or withdraw advertising consent.

If you are signed in, you can use Delete account from the top-right account menu to delete your Word Puzzle World account, active sessions, and scan credit records from our D1 account database. This does not delete separate provider logs, Cloudflare security logs, analytics records, or support emails that may be retained according to provider settings, operational needs, applicable law, or security requirements.

You may also request deletion of your account or related personal information by contacting support@wordpuzzleworld.com. When we delete your account, we will delete or anonymize account identifiers and related usage records unless we need to retain limited information for legal, security, fraud prevention, dispute resolution, or operational reasons.

To request early deletion of feedback screenshots, contact support@wordpuzzleworld.com and include the reference number shown after submission.

If you contact support@wordpuzzleworld.com or use the feedback form, we may receive your contact details, message content, support context, and any optional screenshots you submit. We use this information to reply to your request, handle feedback, process deletion requests, or address support issues.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date.

Questions about this Privacy Policy can be sent to support@wordpuzzleworld.com.