01 / Scope
What this covers
This notice describes the processing visible in the current Daily Games codebase. It applies to the four daily games—Fivefold, Connections, Pathfind and Sudoku—plus the optional sign-in, profile and leaderboard features.
It does not describe services that are not present in this version. In particular, the website does not include a newsletter, third-party feedback handling, advertising or an analytics script.
02 / Information handled
Information handled by the features
- Account information. If you choose Google sign-in, the Supabase authentication client handles the resulting account session. The site reads the account identifier and Google profile information made available to it, such as a display name and, where supplied, an email address.
- Profile information. An authenticated player can save a display name and avatar selection to the profile service.
- Game and leaderboard information. The games handle dates, scores or ratings, attempts, streak-related data, elapsed time where relevant, and the display name used for results. Submitted scores are used for the leaderboard and account statistics.
- Local game information. Current puzzle state, notes, settings, names and streak information are saved in browser storage so play can continue on the same device.
- Fivefold guesses. A guessed word can be sent to the dictionary validation service described below. The request contains the word, not an account profile.
The source does not contain a contact form, newsletter collection flow, payment flow, advertising identifier or third-party embedded media.
03 / Use
How the site uses this information
- To run the daily puzzles, restore progress and show a player’s local statistics.
- To create and maintain an optional signed-in account and profile.
- To submit, display and calculate leaderboard scores, ratings and streak-related statistics.
- To validate Fivefold guesses through the word-validation request.
- To operate and secure the technical services that deliver the site. The repository does not identify the hosting operator or its log-retention settings.
Important: the repository does not record the legal entity responsible for Daily Games or its chosen lawful bases for processing. The owner must add those details before relying on this notice as a complete privacy policy.
04 / Services in the code
Services used by the current site
Supabase
Supabase is used for Google-based authentication, profiles, game-score and leaderboard data, and some authenticated game-state features. The site connects to the configured Supabase project through its browser client and API endpoints.
Google is used as the configured OAuth sign-in provider. Google Fonts are also loaded for the site typography; loading a font is a request to Google’s servers.
Dictionary API
Fivefold sends a proposed word to dictionaryapi.dev to check whether it is a valid word. The current request is formed from the guessed word rather than account data.
International processing
These providers may process information outside your country. The configured source does not state the provider regions, transfer safeguards or the site operator’s location, so the owner must confirm those details.
05 / Your device
Browser storage and sessions
Daily Games uses localStorage, not application-set HTTP cookies, for current-game saves, names, preferences, streaks and the compact storage-information notice. The Supabase client is configured to persist an optional signed-in session in browser storage. The codebase does not use sessionStorage or document.cookie.
Clearing site data in your browser can remove locally stored game progress, preferences and the local authentication session. It does not by itself delete data already submitted to Supabase.
See Cookies and storage information for a current storage table and how to reopen the notice.
06 / Retention and deletion
Retention and deletion
Local browser data stays on the device until it is cleared, overwritten by the games or removed through browser site-data controls. The codebase does not define a server-side retention schedule for profiles, submitted scores or account records.
There is no verified deletion-request contact route in the project. The owner must provide a contact method and document how account, profile and leaderboard deletion requests are handled.
07 / Your rights
Your rights
Privacy rights depend on the law that applies to you and the identity of the service operator. If UK data-protection law applies, people may have rights to request access, correction, erasure, restriction, objection or portability, and to complain to the ICO. The operator must publish verified contact and jurisdiction details so those rights can be exercised.
The current source has no age gate or parental-consent flow. If Daily Games is intended for children, the owner must review and complete an age-appropriate privacy notice before launch.
08 / Owner confirmation required
Details still to be confirmed
This source does not provide a controller name, postal address, privacy contact, data-protection contact, hosting provider, retention periods, lawful bases or confirmed international-transfer safeguards. Those details are deliberately not guessed here. Please add them before publishing this policy as a complete legal notice.