Privacy Policy

Effective date: July 13, 2026

Definition Scramble ("we," "us," or "our") operates the Definition Scramble application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

1.1 Information You Provide

• Account information: When you create an account, we collect your email address, display name, and a hashed version of your password. We never store plaintext passwords.
• Authentication data: If you sign in via Google, we receive your name, email address, and profile image from Google, as authorized by you during the OAuth consent flow.
• Purchase information: When you subscribe to a premium plan, payment information is processed directly by Stripe, Inc. We do not store credit card numbers or other payment card details on our servers. We retain only a Stripe customer identifier and subscription status.

1.2 Information Collected Automatically

• Puzzle progress: Your puzzle-solving progress (chapters completed, answers entered, streak data) is stored locally on your device via browser localStorage. If you are logged in, this data is also stored server-side to enable progress sync across devices.
• Analytics: We use PostHog for product analytics (page views, feature usage events). When logged in, PostHog associates events with your user ID and email to help us understand how the Service is used. We also use Vercel Analytics and Vercel Speed Insights, which collect anonymous page view and performance data. We do not use advertising identifiers or targeting cookies.

1.3 Information We Do Not Collect

• Geographic location
• Browsing history on other sites
• Social media profiles or connections
• Health or biometric data
• Information from third-party data brokers

2. How We Use Your Information

We use the information we collect solely to:

• Provide, maintain, and improve the Service
• Process your account creation and authentication
• Track your puzzle progress and sync it across your devices when logged in
• Process subscription payments and manage your account
• Respond to your support inquiries
• Detect and prevent fraud, abuse, or security incidents

We do not use your information for targeted advertising, profiling, or automated decision-making that produces legal or similarly significant effects.

3. How We Share Your Information

We do not sell your personal information. We share information only in the following limited circumstances:

• Payment processing:We share transaction-related data with Stripe, Inc. to process payments. Stripe's use of your information is governed by the Stripe Privacy Policy.
• Hosting and infrastructure: Your data is stored on infrastructure provided by Neon (database) and Vercel (application hosting). Their use of your data is governed by their respective privacy policies.
• Legal requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Definition Scramble, our users, or the public.

4. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Passwords are hashed using scrypt, a memory-hard key derivation function
• All data transmission occurs over encrypted HTTPS connections
• Access to databases is restricted and authenticated
• Session tokens are cryptographically random and expire automatically

No method of transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

5. Data Retention

• Account data: We retain your account information for as long as your account is active. When you delete your account, we delete your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention records).
• Puzzle progress: Server-side progress data is deleted when your account is deleted. Local browser data stored in localStorage is under your control and is deleted when you clear your browser data or uninstall the application.
• Payment records: Stripe retains payment transaction records in accordance with their data retention policies and applicable law.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

6.1 Rights Under GDPR (European Economic Area, UK, and Switzerland)

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure:Request deletion of your personal data ("right to be forgotten").
• Restriction: Request restriction of processing in certain circumstances.
• Data portability: Request receipt of your data in a structured, commonly used, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, withdraw it at any time.

6.2 Rights Under CCPA/CPRA (California Residents)

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to delete: Request deletion of your personal information.
• Right to correct: Request correction of inaccurate personal information.
• Right to opt out: We do not sell personal information, so there is no opt-out requirement.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

6.3 Exercising Your Rights

To exercise any of these rights, contact us at the email address listed below. We will respond to verified requests within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before processing your request.

7. Children's Privacy

The Service is not directed to children under 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us. We will delete such information promptly.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from the laws of your jurisdiction. By using the Service, you consent to such transfers. We ensure that appropriate safeguards are in place, including Standard Contractual Clauses where required by applicable law.

9. Third-Party Links and Services

The Service may contain links to third-party websites or services (e.g., payment processors). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party service you access through the Service.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Effective date" above. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, contact us at:

Email: privacy@definitionscramble.com