← lexoduels.com

Privacy Policy

Effective August 6, 2026 · Lexo Duels

What we collect

• A display name you choose and a randomly generated player ID created on your device. That is everything a guest shares. No phone number, no real name.
• If you create an account (optional): your email address, a scrambled version of your password (a scrypt hash), and whether your email is verified. We never store the password itself and cannot read it back. Sign-in sessions are stored only as hashes of their tokens (SHA-256), so even a copy of our database could not be used to sign in as you.
• If you sign in with Apple or Google (optional): the account identifier the provider gives us and, if you choose to share it, your email address. Your Apple or Google password never reaches us.
• Gameplay data: the boards you play, the words you find and when, scores, duels, ratings, letters earned, and cosmetics owned. This is the game itself. It is what makes stats, leaderboards, and coaching work.

Why we collect it

Your email exists so you can sign in on a new device, reset a forgotten password, and prove an account is yours. The password hash exists so nobody, including us, can see your password. Gameplay data exists to run the game. That is the whole list. Nothing is used for marketing.

Accounts are optional

You can play everything as a guest, no email required. Creating an account links the progress already on your device to your email so it survives a lost or wiped phone.

About email, honestly

Verification and password reset codes arrive by email from noreply@lexoduels.com. Resend, Inc. is our email delivery provider: it processes the recipient address on our behalf, only to deliver that mail. Those codes are the only email we send. No newsletters, no marketing.

What we don't do

• No advertising, and no advertising trackers.
• No selling or sharing of your data with anyone, beyond the email delivery provider described above.
• No reading of anything else on your device.
• No analytics SDKs from third parties, and no tracking beyond your own gameplay stats.

Where it lives

Game and account data is stored on our server (hosted in a European data center) and used only to run the game. Traffic is encrypted (HTTPS). Word definitions in the Wordbook come from a dictionary we host ourselves, so lookups never leave our server.

Public information

Your display name, scores, rating, tier, and duel record appear on in-game leaderboards and match screens. That is the point of a competitive game, so pick a name you are happy showing. Your email address is never public.

Deleting your account

In the app: Profile → settings gear → Delete account. Deletion signs you out everywhere (every session is revoked), permanently anonymizes your email address, and replaces your name with "[deleted]". It cannot be undone. You can also request deletion by email: support@lexoduels.com.

Children

Lexo Duels has no open chat and no ads. Guests share nothing beyond a chosen display name; an email address is collected only if an account is created. Display names pass a profanity filter and can be reported.

Changes

If this policy changes, the new version appears here with a new effective date.

Contact

support@lexoduels.com

Definitions provided by WordNet® Princeton University.