Privacy policy
Last updated [date]. This policy is a template; have it checked before relying on it.
[Business or trading name] runs Omitsy. This page explains what we collect and why.
What we collect
- Without an account: a random identifier stored in your browser, so the server can hold you to one game per puzzle a day. No name or email.
- Random matching: if you ask to be matched with a stranger, the other player sees a nickname we make up, never your name. If you report a player, we keep a note that the two of you shouldn't be matched again.
- Game data: the games you play, including the names you type in and your moves, buddy streaks, and a
history of your daily games (levels cleared and turns), which Premium shows as your stats.
- With an account: your email address, your Premium status and your theme.
- Anonymous counts: to see how the game is doing, we count per day whether a device visited, started a
game, sent or accepted an invite, cleared a level or shared a result, and where a first visit came from (an invite,
a search engine, social media, an app store or directly). These are stored against a one-way scramble of the
random identifier above, never your name or email, and only appear in totals.
- Problem reports: if you report a problem with a puzzle, the text you write and which puzzle it was about.
- Notifications (phone apps): if you allow them, a notification token from Apple or Google so we can tell
you when it's your turn, delivered through Google Firebase Cloud Messaging. Turn them off any time in your phone's
settings.
- Payments: on the website, handled by Paddle, our reseller. In the apps, handled by the App Store or
Google Play, with RevenueCat keeping track of the subscription for us. We never see your card details; they tell
us whether your subscription is active.
Puzzles
The daily puzzles (secret words and their omit lists, and a simulated par) are made ahead of time with the help of an AI model. No
personal data is sent to it: only dictionary words.
Where it's kept
On Microsoft Azure (data stored in Southeast Asia). Sign-in emails are sent through Azure Communication Services.
The services named above (Paddle, Apple, Google, RevenueCat) keep what they need under their own privacy policies.
What we don't do
We don't sell your data. The only ad today is the optional break before a second chance, and it shows our own
promotions, with no ad network or tracking. When we add an ad network, we'll update this page first and ask for your
consent where the law requires it.
Your choices
Games are kept for 90 days after the day they were played, then deleted. Anonymous level results (how many turns a
level took) are kept for the game's statistics. You can delete your account yourself on the account page; that
removes your email, streaks, game history, the games you played, buddies, reminders and notification tokens. You can also sign out, clear your browser's site data, or ask us at
[support email address] for a copy of your data.