Privacy policy
Last updated: 5 November 2026
This policy explains what information the Wardle app ("Wardle", "we", "us") collects, why, and the choices you have. Wardle is available worldwide. If you have questions, email support@wardle.in.
What we collect
- Account details: your email address, the username you choose, and your password. We store only a secure hash of your password, never the password itself.
- Game data: your ratings, the matches you play (opponent, guesses, result and time), and your daily and practice results.
- Notification token: if you allow notifications, your device gives us a push token so we can tell you when a friend challenges you or a match is ready.
- Technical data: our servers briefly process your IP address and request details to keep the service running, prevent abuse and enforce rate limits.
We do not collect your name, phone number, contacts, location, photos or payment details. Wardle does not show ads and does not use advertising identifiers.
How we use it
- To create and secure your account, and to send verification and password-reset emails.
- To run matches, calculate ratings, and show leaderboards and your match history.
- To send notifications you have allowed.
- To detect cheating, abuse and technical problems.
We process this information because it is needed to provide the game you asked for (performance of a contract) and for our legitimate interest in keeping Wardle fair and secure.
What other players see
Your username, ratings and match results are visible to other players, for example on leaderboards and in an opponent's match history. Your email address is never shown to other players.
Who we share it with
We do not sell your personal information. We share it only with service providers that help us run Wardle, under their own privacy and security terms:
- DigitalOcean for hosting our servers.
- MongoDB Atlas for storing account and match data.
- Resend for sending account emails.
- Expo, together with Google Firebase Cloud Messaging and Apple Push Notification service, for delivering notifications.
We may also disclose information if required by law.
International transfers
Our providers may store and process data in countries other than yours. Where required, they use safeguards such as standard contractual clauses.
How long we keep it
- Account details and ratings are kept until you delete your account.
- Sign-in sessions expire after 30 days of inactivity.
- Notification tokens expire after 60 days unless your device refreshes them.
- Match records may remain in your opponents' history after you delete your account, but they are no longer linked to an account.
Your choices and rights
- You can change your username and turn notifications off at any time.
- You can delete your account in the app under Profile → Delete account, or by following the steps on our account deletion page.
- Depending on where you live, including the EU, UK, California and India, you may have the right to access, correct, delete or export your data, or to object to its processing. Email support@wardle.in and we will respond within 30 days. You may also complain to your local data protection authority.
Security
We use encrypted connections (HTTPS), hashed passwords, short-lived access tokens and rotating sign-in tokens. No system is perfectly secure, but we work to protect your information.
Children
Wardle is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.
Changes
We may update this policy. If the changes are significant, we will tell you in the app. The date at the top shows when it was last updated.