Privacy
The short version: you can play everything without an account, and even with one we don't ask for your email address, don't run third-party trackers, and don't sell anything to anyone.
If you don't have an account
Nothing about you is stored on our servers. Your progress, streaks and settings live in your own browser's local storage and never leave your device. Clearing your browser data clears them.
If you create an account
We store only:
- Your username, which is public — it appears on leaderboards.
- A hash of your password (PBKDF2-SHA256, 100,000 iterations, with a random salt). We can't read your password, and we can't recover it for you.
- One result row per daily you play: the game, the date, whether you won, your score, how many guesses you used and how long it took.
- Which achievements you've earned.
We do not collect your email address, real name, phone number, date of birth, IP address, device fingerprint or advertising identifiers.
Cookies
One cookie, atd_session, set only when you sign in. It identifies your
account and nothing else. It's HttpOnly, SameSite=Lax,
sent only over HTTPS, and expires after 30 days. There are no advertising or
tracking cookies, so there's no consent banner to click through.
Analytics
We use Cloudflare Web Analytics, which is cookieless and doesn't fingerprint or track visitors across sites. It tells us page view counts and rough referrer information. It cannot identify you.
Third parties
When you play, your browser or our servers may contact:
- Deezer — Song Quiz audio previews and artwork load directly from Deezer's servers, and song search is proxied through ours. Deezer sees the requests for the audio files your browser loads.
- dictionaryapi.dev — after you finish a round of Words, your browser looks up a definition of the answer. That request reveals the solved word to that service.
- Cloudflare — hosts the site, the database and the Workers AI text-to-speech that reads out Spelling Bee words.
Your data
From your profile page you can download everything we hold about you as a JSON file, or delete your account outright. Deleting removes your account, every result and every achievement immediately and permanently. There's no grace period and no backup copy we can restore from.
Children
AllTheDailies isn't directed at children under 13. Because we collect no personal information, an account holds nothing beyond a chosen username and puzzle results.
Changes
If this policy changes materially, the date at the top of this page changes with it.
Contact
Questions about any of this: [email protected].