Effective November 1, 2026
Word Wash is a word game made by BoarBeard (Leif Norcott). This policy covers the Word Wash app on Android and desktop, and the web version of the game. It explains what the game collects, why, and what you can do about it.
The short version: Word Wash has no accounts, no ads, and doesn't ask for your name, email, contacts, or location. It sends a random ID and your scores only for friend challenges. The web version on blog.iterary.com also uses Google Analytics to see how the game is played.
Your progress, settings, and Daily Wash history are saved on your device (or in your browser's local storage for the web version). They are never sent to us. Uninstalling the app or clearing the browser's site data deletes them.
Friend challenges let you compare a Daily Wash score with people you send a link to. The game talks to our server (wordwash-api.nibuen.workers.dev, hosted on Cloudflare) in these cases:
Each time, it sends:
The server stores the best score per device for each wash or Daily, so it can show the leaderboard to everyone who has the link. Leaderboards show scores and word counts only, never names.
To stop spam, the server also counts requests per IP address. It never stores your IP address itself, only a one-way salted hash that changes every day and can't be turned back into the address. When the web version sets up a challenge board, Cloudflare Turnstile checks that you're a person. Cloudflare's own privacy policy covers that check.
On Android and desktop, if you never open a wash link, nothing is sent.
The web version on blog.iterary.com uses Google Analytics to record gameplay events: a run started or ended, the round reached, a score, a charm picked, a Daily played or shared. These events contain no personal information. We use them to tune the game's difficulty. Google Analytics uses cookies and receives your IP address. Google's privacy policy explains how Google handles that data, and you can opt out with the Google Analytics opt-out add-on or an ad or tracking blocker.
The Android and desktop apps, and the itch.io web version, don't use Google Analytics or any other analytics.
When you share a Daily result, the game puts a picture and text on your clipboard or opens your device's share menu. Nothing is sent until you choose where to share it.
We don't sell or rent any data, and we don't share it with anyone except the services named above that run the game (Cloudflare, and Google Analytics on the web).
Word Wash shows no ads.
Word Wash isn't directed at children under 13, and we don't knowingly collect personal information from them. The game doesn't collect names, emails, or other contact details from anyone.
Scores on wash and Daily leaderboards are kept so the boards keep working. They're linked only to the random device ID. Clearing the app's data or uninstalling it creates a new ID, which cuts off the old scores from anything you play afterward. To have scores deleted, email us with the wash code and roughly when you played, and we'll remove them.
Everything the game sends to our server is sent over HTTPS. No method of sending or storing data is perfectly secure, but we keep what we collect small for that reason.
If this policy changes, we'll update this page and the effective date at the top. Big changes will also be mentioned in the game's release notes.
Questions or deletion requests: nibuenss@gmail.com