This Privacy Policy explains how Typonyms ("we", "us", or "our") collects, uses, and safeguards personal data
when you visit typonyms.com and play the game, in compliance with the
General Data Protection Regulation (GDPR) and international privacy laws.
We do not sell, rent, or monetize your personal data. We only collect the minimal information necessary
to run the game and provide optional cloud progress synchronization.
1. Data Controller
The Data Controller responsible for your personal data is:
2. Information We Process & Legal Bases (Art. 6 GDPR)
A. Guest Players (Unauthenticated)
Data: Game progress, streaks, solve times, and settings preferences are stored
exclusively on your device using browser localStorage.
Legal Basis: No personal data is transmitted to or stored on our servers.
B. Authenticated Players (Google Sign-In)
Data: If you voluntarily sign in with Google to enable cloud synchronization, we store
your Google User ID, email address, public profile name, avatar URL, puzzle completion history, solve
times, and settings preferences.
Purpose: To synchronize and restore your game progress across multiple devices and
browser sessions.
Legal Basis: Performance of a contract / consent (Art. 6(1)(a) & (b) GDPR) requested
when you explicitly choose to sign in.
C. Privacy-Preserving Analytics
Data: Anonymous, aggregated website metrics (e.g., total puzzle solves, page views, and
referral domains).
Service: We use GoatCounter, an open-source, privacy-first analytics tool. GoatCounter
does not use tracking cookies, does not collect personal identifiers, and hashes IP addresses to protect
user identity.
Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR) to monitor application uptime,
detect errors, and understand overall aggregate gameplay trends.
3. Cookies and Local Storage
We do not use invasive tracking cookies or third-party advertising trackers. We utilize browser
localStorage solely for functional gameplay purposes (preserving your theme preference, sound
settings, and offline puzzle progress).
4. Third-Party Processors & International Transfers
We use trusted third-party service providers (sub-processors) to host and operate the game:
Google Firebase / Google Cloud Platform (Google LLC): Authentication (Google Sign-In)
and cloud database storage (Cloud Firestore). Data may be stored on secure servers in the United States
under standard contractual clauses and the EU-US Data Privacy Framework.
GoatCounter: Privacy-focused aggregate web analytics.
5. Data Retention & Deletion
Local data remains on your device until you clear your browser cache/storage. Cloud sync data is retained as
long as your account is active.
Right to Erasure ("Right to be Forgotten"): You have full control over your data. You can
delete all your stored cloud progress and your authentication account instantly at any time by opening the
Settings modal in the game and clicking "Delete Account". You may also
request deletion by contacting us directly.
6. Your Rights Under GDPR
Under the GDPR, European Union / EEA residents have specific rights regarding their personal data:
Right of Access & Rectification (Art. 15, 16): The right to review and update your
stored gameplay and profile information directly in the game interface.
Right to Erasure (Art. 17): The right to have all your cloud account records
permanently deleted at any time via the in-app "Delete Account" feature.
Right to Restriction & Objection (Art. 18, 21): The right to object to processing or
discontinue cloud syncing at any time by signing out or deleting your account.
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory
Data Protection Authority (DPA) in your EU member state if you believe your data has been handled
unlawfully.
7. United States & State Privacy Disclosures (CalOPPA, CCPA/CPRA)
If you are a resident of California or other US states with applicable privacy regulations:
No Sale or Sharing of Personal Data: We do not sell your personal data or share it with third parties for cross-context behavioral or targeted advertising.
"Do Not Track" Signals (CalOPPA): Because we do not track visitors across third-party websites or engage in behavioral advertising, this website does not alter its functionality or practices in response to browser "Do Not Track" (DNT) or Global Privacy Control (GPC) signals.
Consumer Rights: You may request access to, correction of, or deletion of any stored personal information at any time via the in-game Settings modal or by emailing us directly.
8. Children's Privacy (COPPA)
Typonyms is designed for a general audience and is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided personal information to us (such as by signing in with a Google account), please contact us at ben@bendeeb.com and we will promptly delete all associated records.
9. Contact Us
If you have any questions, requests, or concerns regarding this Privacy Policy or your data, please contact
Ben Deeb at ben@bendeeb.com or via bendeeb.com.