Privacy Policy

Effective October 4, 2026 · Lexo Duels

What we collect

A display name you choose and a randomly generated player ID created on your device. That is everything a guest shares. No phone number, no real name.
If you create an account (optional): your email address, a scrambled version of your password (a scrypt hash), and whether your email is verified. We never store the password itself and cannot read it back. Sign-in sessions are stored only as hashes of their tokens (SHA-256), so even a copy of our database could not be used to sign in as you.
If you sign in with Apple or Google (optional): the account identifier the provider gives us and, if you choose to share it, your email address. Your Apple or Google password never reaches us.
Gameplay data: the boards you play, the words you find and when, scores, duels, ratings, letters earned, and cosmetics owned. This is the game itself. It is what makes stats, leaderboards, and coaching work.

Why we collect it

Your email exists so you can sign in on a new device, reset a forgotten password, and prove an account is yours. The password hash exists so nobody, including us, can see your password. Gameplay data exists to run the game. That is the whole list. We never use your email address or your gameplay data for marketing or for ads.

Accounts are optional

You can play everything as a guest, no email required. Creating an account links the progress already on your device to your email so it survives a lost or wiped phone.

About email, honestly

Verification and password reset codes arrive by email from noreply@lexoduels.com. Resend, Inc. is our email delivery provider: it processes the recipient address on our behalf, only to deliver that mail. Those codes are the only email we send. No newsletters, no marketing.

Lexo Duels is free and there is nothing to buy. Advertising pays for the servers. An ad never appears during a round.

Who shows the ads: in the apps, Google AdMob. On this website, Google AdSense.
What Google and its advertising partners receive in order to show and measure ads: your device's advertising identifier (on iPhone and iPad only if you allow tracking when the app asks), your IP address, which shows your approximate location, basic information about your device and the app, and how you interact with the ads. On the website, this works through cookies.
Your choices: where the law requires consent (for example in the European Economic Area, the United Kingdom and Switzerland) the app asks before any personalized ad is shown, and you can change your answer any time in Settings, Ads, Ad privacy choices. Everywhere, you can turn off ad personalization in your device settings (Android: Settings, Google, Ads. iPhone and iPad: Settings, Privacy and Security, Tracking) or at adssettings.google.com.
What advertisers never get from us: your email address, your password, or your gameplay history.
The optional bonus ad: after a game you can choose to watch an ad to receive that game's letters a second time. We record that the bonus was claimed for that game. Nothing else.

How Google uses information from apps and sites that use its services: policies.google.com/technologies/partner-sites.

What we don't do

No selling of your account data or your gameplay data.
No sharing of your email address with anyone, beyond the email delivery provider described above.
No reading of anything else on your device.
No analytics SDKs from third parties. The only outside software in the apps that receives information about you is the Google ads software described above and, if you choose to use them, Apple or Google sign-in.

Where it lives

Game and account data is stored on our server (hosted in a data center in the United States) and used only to run the game. Traffic is encrypted (HTTPS). Word definitions in the Wordbook come from a dictionary we host ourselves, so lookups never leave our server.

Public information

Your display name, scores, rating, tier, and duel record appear on in-game leaderboards and match screens. That is the point of a competitive game, so pick a name you are happy showing. Your email address is never public.

Deleting your account

In the app: Profile → settings gear → Delete account. Deletion signs you out everywhere (every session is revoked), permanently anonymizes your email address, and replaces your name with "[deleted]". It cannot be undone. You can also request deletion by email: support@lexoduels.com.

Children

Lexo Duels is not directed at children under 13. It has no open chat, and the apps show ads. Guests share nothing beyond a chosen display name; an email address is collected only if an account is created. Display names pass a profanity filter and can be reported.

Changes

If this policy changes, the new version appears here with a new effective date.

Contact

support@lexoduels.com

Definitions provided by WordNet® Princeton University.