// privacy
Privacy
Discodle is a daily word game. You don't need an account to play, and we don't use cookies. This page explains what the game keeps on your device, what we keep if you create an account, and what we measure.
What stays on your device
The game saves your progress in your browser's local storage, so you can close the page and carry on later. That's:
- each day's progress: the words you've entered, which hints you took, and your time (kept for 90 days, then deleted);
- your lifetime stats: days played, levels solved, hint-free solves and your streak;
- a list of the levels you've finished (date, level, time, hints and the coloured squares);
- whether you've seen the How to play guide;
- if you sign in, the sign-in tokens that keep you signed in.
Unless you create an account, this never leaves your device. Clearing your browser's site data for Discodle deletes it.
If you create an account
An account is optional. It keeps your results and streak safe and lets you see your history on any device. We keep:
- your email address and a scrambled form of your password (stored by Amazon Cognito; we never see your password);
- the levels you finish: the date, level, time, number of hints and the coloured squares.
We use your email only to send sign-up and password-reset codes. We don't send marketing and never share or sell it. We keep your account until you delete it: your account page has a "Delete my account" button, which removes your email and all your saved results straight away. The lawful basis is our contract with you to provide the account.
What we measure
When a page loads, the game counts one anonymous visit, noting only whether it's a phone, tablet or computer. To find out which puzzles are too hard, it also sends a few anonymous events while you play: when you start and finish a level (with your time and number of hints), when you solve a step (and whether you took a hint), when you show an answer, and when you reveal an artist. Each event says which puzzle, level and step it's about.
Events carry no name, account, device ID or cookie, and we don't store your IP address with them, so they can't be linked to you or to each other. We keep them for 90 days to count how often each step is solved or given up on.
Where your data is kept
Discodle runs on Amazon Web Services (AWS). Everything we store (the puzzles, accounts and their results, and the anonymous game events) is kept in AWS's data centres in Stockholm, Sweden, in the European Union. UK data protection law recognises the EU as giving your data the same protection as the UK.
To load quickly wherever you are, the pages are delivered through Amazon CloudFront, AWS's network of servers around the world, including in the UK. Like any web server, it briefly processes your IP address to send you the page; we don't keep it. The fonts come from our own site, not Google Fonts. There's no advertising and no third-party tracking.
Sign-up emails (your code) are sent by Amazon Cognito, part of AWS. Behind the scenes we use AI services from OpenAI and Anthropic to help write and check each day's puzzles; they only ever see puzzle text, never anything about players.
Your rights
Without an account, we hold nothing that identifies you. With one, you can see everything we keep on your account page and delete it there at any time.
You also have the right to ask for a copy of your data, to have it corrected, or to object to how we use it. For that, or any other privacy question, email us at hello@discodle.com; we'll reply within one month.
If you're not happy with our answer, you can complain to a data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, the authority in the country where you live.
Last updated 15 October 2026.