Last updated 26 September 2026. Published by WordJax.
This policy explains what Glitch by WordJax collects, why, who else sees it, and what you can do about it. It covers the iPhone and Android app and the website at wordjax.com/glitch. If anything here is unclear, email us and we'll answer in plain words.
1. Who we are
WordJax is a trade name of Jordan Axelrod, an individual based in Florida, USA. When this policy says "we" or "us", that's who it means. We decide how your information is used, which makes us the "controller" under European and UK data protection law. Contact: jordan@wediorknot.com.
2. The short version
- Glitch has no accounts, no sign-in, no profiles and no social features. We never ask for your name or your email address.
- We record your game results and anonymous gameplay events under a random player ID. Words you type are never sent to us.
- The game is paid for by ads from Google AdMob. Google collects device information to show and measure those ads.
- We don't sell your information for money.
3. What we collect
- A random player ID the app makes up the first time you open it, plus when it was first and last seen.
- A recovery code, shown in Settings, that moves your streak to a new phone. Our server stores only a scrambled one-way version of it.
- Game results: for each daily, the date, the puzzle number, whether you solved it, how you did, how long it took, and whether you used a hint.
- Gameplay events, such as "a puzzle was started", "a hint was used" or "an ad was shown", with your player ID, the app version, your platform and the time. They only hold counts, times, fixed choices and IDs the app made up, never a word you typed.
- Device and advertising information collected by Google, such as your IP address, device type, operating system, rough location from your IP address, and how you interact with ads. On Android that can include your advertising ID. On iPhone, Google can only use your advertising identifier if you allow tracking when Apple asks. We don't receive your advertising ID ourselves.
- Your privacy choices, stored on your phone, and a yes or no event telling us which answer was given.
- Support emails you send us.
Reminders, if you turn them on, are scheduled by your phone itself. There's no push server and we never receive a notification address for your phone. The app also keeps your settings, streaks, progress and a copy of the daily schedule on your phone.
4. Why we use it, and our legal basis
- To run the game (results, streaks, moving to a new phone): performance of our agreement with you, our terms of use.
- To keep the game safe and working, and to improve it using gameplay events: our legitimate interests. The events are kept to numbers and fixed choices so this has very little effect on you.
- To show ads that pay for the game: your consent where the law requires it (for personalised ads, and in the EEA and UK for storing or reading information on your device for ads), and otherwise our legitimate interest in funding a free game with non-personalised ads.
- To answer your emails and data requests: our legitimate interest in helping you, and our legal obligations.
5. Ads, consent and tracking
Glitch shows a banner on some screens (never over the board), an occasional full-screen ad between practice rounds, and short videos you choose to watch in return for a hint, a streak repair, or older puzzles. Before any ads load, where it's required (for example in the EEA, the UK, Switzerland and US states with their own privacy laws), Google's consent screen asks for your choices. On iPhone, after your first finished puzzle, a short screen from us explains Apple's tracking question, and if you continue, Apple asks. Personalised ads are only requested if you've agreed on the consent screen and, on iPhone, allowed tracking. Saying no changes nothing about the game.
To change your choices later: use Manage privacy choices in the app's Settings; on iPhone, turn tracking off for Glitch in the Settings app under Privacy & Security, then Tracking; on Android, delete or reset your advertising ID in your phone's Google or Privacy settings; or delete and reinstall the app, which clears the stored choices.
6. Who we share it with
- Google AdMob and its advertising partners, to show, measure and protect ads. Google's own use is covered by its privacy policy at policies.google.com/privacy.
- Supabase, which hosts our database in the United States (us-east-1) and processes data on our behalf.
- Vercel, which hosts the website and handles your IP address to deliver the pages.
- Authorities or others, if the law requires it, or to protect safety, our rights or the game from fraud.
If WordJax is ever transferred to a new owner, for example into a company, your information would move with it under the same promises.
7. International transfers
We and our servers are in the United States. If you play from elsewhere, including the EEA or the UK, your information is transferred to the US, protected by the safeguards our providers offer, such as standard contractual clauses or the EU-US Data Privacy Framework and its UK extension.
8. How long we keep it
Game results, your streak copy and gameplay events aren't yet deleted on a fixed schedule. They're tied only to your random player ID. If you'd like them deleted, email us and include your recovery code so we can find them. Failed recovery code attempts are kept for about 24 hours. Support emails stay in our mailbox until you ask us to delete them. Backup copies held by our hosting provider may last a short while longer.
9. Your rights
Wherever you live, you can email us to ask what we hold about you, for a copy, for a correction, or for deletion.
If you're in the EEA, the UK or Switzerland, you have the right to access, correct and erase your data, to restrict or object to our use of it, to data portability, to withdraw consent at any time, and to complain to your data protection authority (in the UK, the Information Commissioner's Office).
If you're in California or another US state with a privacy law, you have the right to know, delete and correct your personal information, and to opt out of its "sale" or "sharing" for targeted advertising. We don't sell personal information for money, but personalised ads can count as "sharing". Opt out by declining personalised ads on the consent screen or in Manage privacy choices, by turning off tracking or resetting your advertising ID, or by emailing us with "Do Not Sell or Share" in the subject line. We won't treat you differently for using your rights.
To make a request, email jordan@wediorknot.com. We may ask for your recovery code to find your records and confirm they're yours. We'll reply within one month, or sooner where the law requires it.
10. Children
Glitch isn't made for or directed at children, and you need to be at least 13 to play. In some countries you need to be 16 to consent to personalised ads yourself; if you're younger than that where you live, please don't agree to them. If you think a child under 13 has given us personal information, email us and we'll delete it.
11. Security
Everything the app sends us is encrypted in transit, our database only accepts requests through functions that check what's allowed, and your recovery code is stored on our side only in scrambled form. No system is perfectly secure, and if something goes wrong that affects you, we'll tell you.
12. The website
The website at wordjax.com/glitch keeps your progress and settings in your browser's local storage, which never leaves your device. It has no ads, no cookies, no analytics and no tracking pixels today, loads nothing from any other company's servers, and asks search engines not to list its pages. It's hosted by Vercel.
13. Changes and contact
If we change how we handle your information, we'll update this page and the date at the top, and tell you in the app if the change is significant. Questions go to WordJax (Jordan Axelrod), Florida, USA, at jordan@wediorknot.com.