Last updated:
Privacy policy
What DailyGames stores on the website and in the app, why, and what you can do about it, in plain language.
The short version
- You can play without an account. We never ask for your real name or a password. An email address only reaches us if you choose to sign in with Apple or Google in the app.
- The first time you play, your browser or the app gets a random guest ID, so your results, streak and points can be saved.
- No ads, no tracking across other websites or apps, and we don't sell data. We count website visits with privacy-friendly analytics that uses no cookies and can't identify you; the app has no analytics.
- The website only uses two cookies: one remembers your language, the other is only for site administrators. The app uses none.
Who we are
DailyGames (the website and the DailyGames app) is run by Fatih Dursun ("we", "us"), who is responsible for the data described here. For any question about this policy or your data, write to hello@getdailygames.com.
What we store about players
When you start your first game, our server creates a guest player for your browser or app. It's identified by a random ID, not by who you are. With that guest player we store:
- the random player ID and a sign-in token (kept on our side only in a scrambled, hashed form), so your browser or app can keep playing as the same player;
- the name and avatar you choose on your profile, if any (you don't have to use your real name);
- the games you starred as favourites;
- your play history: which daily puzzles you started and finished, when, your moves and guesses, the result and the points you earned;
- if you sign in with Apple or Google, the account you linked (see below).
We use this to run the games (checking answers and counting attempts), to show your progress, streak and stats, and to build the leaderboards.
Signing in with Apple or Google
In the app you can sign in with Apple or Google, so your progress is kept safe and you can continue on another device. This is optional; you can always keep playing as a guest. When you sign in, we receive from Apple or Google:
- an account ID that stays the same for this app, so we know which player is yours;
- your email address, if the account shares one. Apple lets you hide it, and then we only get a private relay address.
We use these only to sign you in as your player. They're never shown to other players and never used for newsletters or advertising. We don't receive your password, and we don't store the name on your Apple or Google account. With Apple, we also keep a token Apple gives us, so that we can withdraw the app's access to your Apple account when you delete your account.
What other players can see
The leaderboards show the name and avatar you chose (or "Player #" with a four-digit number if you haven't picked a name) and your points. They never show your player ID or the account you signed in with. Pick a name you're happy for others to see.
What stays on your device
On the website, some data is kept in your browser's local storage, so the site responds instantly and remembers you between visits:
- dailygames-player: your guest player ID and its sign-in tokens;
- dailygames-play-history: your recent results and the days you played, for your streak;
- dailygames-avatar and dailygames-favorites: your name, avatar and favourite games;
- dailygames-save:…: your progress in each of the day's puzzles, removed after a week;
- dailygames-theme, dailygames-how-to-play-seen and dailygames-badges-seen: your light or dark theme, and which game rules and badges you've already seen.
Local storage isn't a cookie and stays on your device; the site uses it to talk to our server as your guest player and to keep your name, avatar and favourites in step with it. You can clear it at any time in your browser settings. If you do, this browser becomes a new guest player and can no longer reach its old history.
The app keeps the same kind of data on your phone: your player's sign-in tokens in the system's secure storage (the Keychain on iPhone), and your recent results, saved puzzles (removed after a week), name, avatar, favourites, language, theme and reminder settings in the app's own storage. Deleting the app removes them. As a guest, a new install is a new guest player; if you signed in, sign in again to get your progress back.
Daily reminders
If you turn on the daily reminder in the app's settings, your phone schedules the notification itself, at the time you chose. Nothing about it is sent to us or to a push notification service. You can turn it off in the app or in your phone's settings at any time.
Server logs and security
Like any online service, our servers receive your IP address and basic technical information, such as your browser or app version, with every request. We use the IP address to limit how many requests can be made in a short time, which protects the games from abuse and automated guessing. Technical logs (for example the time, the requested address and the response status) are kept for a short period for security and troubleshooting.
Visitor statistics
To see which games people enjoy and whether the website works well, we count visits with a privacy-friendly analytics service. It sets no cookies, stores nothing in your browser, doesn't track you across websites and doesn't build a profile of you; IP addresses are only used briefly to count unique visits and are not stored. Besides page views it records a few anonymous events, such as a game being started, finished or its result shared, with only the game's name and whether it was solved. If your browser sends a Do Not Track signal, it isn't counted at all. The app doesn't use any analytics.
Error reports
When something breaks, the website, the app and our server send an error report to Sentry, a service that helps us find and fix bugs. A report contains the error, the screen, page or request it happened on, and technical details such as the browser, phone model and app or system version. We have configured it not to collect IP addresses, cookies or what you typed. Reports are deleted automatically after at most 90 days.
Other websites and service providers
The photos in Hindsight and Backlot come from public archives such as Wikimedia Commons, but they're loaded through our server, so those websites don't see you. On the website, fonts, flags and avatars come from us too.
The app draws your avatar with DiceBear (api.dicebear.com): it loads the picture from there, so DiceBear receives your phone's IP address and the avatar options you picked, but nothing that says who you are.
If you sign in with Apple or Google, that sign-in is handled by Apple or Google under their own privacy policies.
We don't sell or rent your data and don't share it for advertising. It's processed on our behalf by the companies that host our servers and database, by our analytics provider and by Sentry (error reports), and disclosed to authorities only when the law requires it.
How long we keep data
- Your player, profile and play history are kept so your history and the all-time leaderboard stay complete, until you delete your account in the app or ask us to delete them.
- A sign-in token stops working after 180 days without use, and tokens that no longer work are deleted. A guest player that never played a game and can no longer be signed into is deleted automatically after that.
- Technical server logs are kept for a short period, then deleted; error reports after at most 90 days.
- Data on your device stays until you clear your browser's storage or delete the app; the website and the app remove recent results and saved puzzles themselves after about a week.
Your choices and rights
You can change your name and avatar on your profile and clear your browser's storage at any time.
If you signed in with Apple or Google, you can delete your account yourself in the app (Profile → Delete account). That immediately deletes your player, profile, play history and linked accounts, takes you off the leaderboards, and, for Apple, withdraws the app's access to your Apple account. It can't be undone.
To get a copy of your data, have it corrected, or have a guest player and its history deleted, write to hello@getdailygames.com. Tell us the name you play under and roughly when you last played (or the email of the account you signed in with), so we can find you.
Depending on where you live, data protection laws such as the GDPR in the European Union give you further rights, for example to object to processing or to complain to your data protection authority.
Children
DailyGames is for players of all ages. Signing in is optional and we don't ask for names or other contact details, so nobody needs to share personal information to play. If you believe a child has entered personal information in their player name, contact us and we'll remove it.
Changes to this policy
If we change how we handle data, we'll update this page and the date at the top. Important changes will be pointed out on the site and in the app.