1. Overview: You can play Wortweg without an account. Progress starts in your browser LocalStorage.
2. Optional sign-in: Google sign-in stores email and learning progress on EU servers (Supabase). Erasure is available under Account & data in the game.
3. Weekly board: After your first solved puzzle the game creates an anonymous account for this browser, with no email and no name. The public board shows only a generated nickname (like "Schlauer Fuchs 42") and two counts: words learned this week and puzzles solved. Your full progress stays in your browser. Tap Leave on the board and that account and its counts are deleted, and this browser is not added again.
4. Product analytics: We use PostHog (EU Cloud, Frankfurt). IP capture is off. Events like session_start and puzzle_solved carry anonymous ids, with no name or email in event payloads. These events are routed through our own domain rather than sent straight to PostHog, which also means browser blockers do not catch them. If you would rather not be counted, open www.wortweg.online/?phoptout=1 once and this browser stops sending.
5. No ads: No advertising cookies or marketing pixels.
6. Speech: Pronunciation uses your device Web Speech API; audio is not sent to us.
7. Visitor statistics: In the game we also use Vercel Web Analytics to count page views. It sets no cookies and stores no IP address. A visit is recognised only by a hash of the request, which is discarded after 24 hours, and we see aggregated numbers only (page, referring site, country, browser, device type).
8. Showing the weekly board: To show this week's public leaderboard, the website and the game load it from our database (Supabase, servers in the EU). This request sends no account data; like every web request, it lets the server see your IP address so it can answer.