← Back to LexiQ

Privacy Policy

Last updated: January 16, 2026

This Privacy Policy describes how LexiQ collects, uses, and protects your information when you use our word game service in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

  • Contract (Article 6(1)(b) GDPR): We process your email address and game progress data to provide the LexiQ game service as requested by you.
  • Legitimate Interest (Article 6(1)(f) GDPR): We process technical data (IP addresses, browser information) for security, debugging, and service improvement, which is necessary for our legitimate business interests while not overriding your privacy rights.
  • Consent (Article 6(1)(a) GDPR): Where required by law, we will ask for your explicit consent before processing certain data.

Information We Collect

Personal Information

We collect minimal personal information:

  • Email address: Used solely for account authentication and game progress saving
  • Game progress data: Your game statistics, scores, and progress to provide the service

Technical Information

For logging and service improvement purposes, the following may be collected:

  • IP addresses: Temporarily logged for security and debugging purposes
  • Browser information: To ensure compatibility and optimize performance
  • Usage patterns: Anonymous analytics to improve the game experience

Third-Party Services

LexiQ uses the following trusted third-party services to provide our game:

Vercel (Hosting)

  • Hosts our application and provides content delivery
  • May log IP addresses and request data for up to 1 day for debugging purposes
  • View Vercel's Privacy Policy: https://vercel.com/legal/privacy-policy

Supabase (Database)

  • Stores your email address and game progress data securely
  • Provides user authentication services
  • Data is encrypted and stored in compliance with GDPR
  • View Supabase's Privacy Policy: https://supabase.com/privacy

Resend (Email Services)

International Data Transfers

Some of our third-party service providers may process your data outside the European Economic Area (EEA):

  • Vercel: May process data in the United States with appropriate safeguards
  • Supabase: Processes data in accordance with GDPR requirements and Standard Contractual Clauses
  • Resend: May process data in the United States with adequate safeguards

We ensure that adequate safeguards are in place for international data transfers, including Standard Contractual Clauses approved by the European Commission, to protect your personal data in accordance with GDPR requirements.

How We Use Your Information

  • To provide and maintain the LexiQ game service
  • To save your game progress and statistics
  • To authenticate your account via email
  • To improve our service and fix technical issues
  • To ensure the security and proper functioning of our service

Data Retention

  • Account data: Retained as long as your account is active
  • Game progress: Retained to provide continuous game experience
  • Log data: IP addresses and technical logs are automatically deleted after 24 hours
  • Inactive accounts: May be deleted after 2 years of inactivity

Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Access (Article 15): Request access to your personal data and information about how we process it
  • Rectification (Article 16): Correct inaccurate or incomplete personal data
  • Erasure (Article 17): Request deletion of your personal data under certain circumstances
  • Restrict Processing (Article 18): Limit how we process your data in certain situations
  • Data Portability (Article 20): Receive your data in a structured, machine-readable format
  • Object (Article 21): Object to processing based on legitimate interests
  • Withdraw Consent: Where processing is based on consent, withdraw it at any time

How to Exercise Your Rights:

Contact us using the information provided in our Imprint.

Response Time: We will respond to your request within one month of receipt, which may be extended by three months for complex requests.

Right to Lodge a Complaint:

You have the right to lodge a complaint with a data protection supervisory authority, particularly in the EU member state where you reside, work, or where you believe a violation has occurred. For Germany, this is the Federal Commissioner for Data Protection and Freedom of Information (BfDI): www.bfdi.bund.de

Data Protection Officer

Based on the nature and scale of our data processing activities, we are not required to appoint a Data Protection Officer under Article 37 of the GDPR. For data protection inquiries, please contact us directly through the information provided in our Imprint.

Automated Decision-Making

We use automated systems to:

  • Calculate your game scores and statistics
  • Determine game progress and achievements
  • Validate word submissions against our dictionary

These automated decisions do not significantly impact your rights or legal status. However, you can request human review of any automated decision by contacting us. You also have the right to express your point of view and contest the decision.

Children's Privacy

Our service is not intentionally directed at children under the age of 16. We do not knowingly collect personal data from children under 16 without appropriate parental consent. If we become aware that we have collected personal data from a child under 16 without verification of parental consent, we will take steps to remove that information from our servers promptly.

Cookies and Tracking

LexiQ uses minimal cookies and local storage for essential functionality:

Essential Cookies (Cannot be disabled)

  • Authentication: Maintaining your login session
  • Game State: Saving your current game progress and preferences

Analytics & Performance

We do not use any third-party analytics, advertising, or tracking cookies. All data processing is done locally in your browser or through our secure backend services.

Managing Cookies

You can control cookies through your browser settings:

  • Most browsers allow you to view, delete, and block cookies
  • Disabling essential cookies will prevent the game from functioning properly
  • Local storage can be cleared through your browser's privacy settings

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, data protection matters, or wish to exercise your rights under GDPR, please contact us through the information provided in our Imprint.

For all data protection inquiries, our response time is within one month as required by GDPR. Complex requests may require up to three months, and we will inform you of any extension within the first month.