PictionaryWords

Privacy Policy

Last updated August 10, 2026

What the site stores

No account is required. Custom words, timer preferences, and your analytics choice can be stored in your browser. Words saved in the custom words panel stay on your device and are not added to feedback automatically. If you type one into a feedback form yourself, it is submitted with that form.

Feedback and word suggestions

When you submit a contact message, word suggestion, or prompt report, we store the issue type, page path, message, optional expected result, optional word, optional email address, submission source, and submission time in a private Cloudflare D1 database. Email is optional. We use these details to review reports, correct the word library, prevent abuse, and improve the site.

The verification token is sent to Cloudflare Siteverify for checking but is not stored by this site. The site does not store your raw IP address in the feedback record. To slow repeated spam, a separate rate-limit record stores a salted SHA-256 one-way identifier derived from network information, a time window, and an attempt count.

The rate-limit record is designed to be kept temporarily. Expired records are removed when later submissions trigger cleanup, so a record may remain longer when the site receives no later submissions.

Feedback and anti-abuse records are retained only as long as reasonably needed for review, abuse prevention, and site improvement. There is no fixed deletion schedule currently in operation.

Optional analytics

Google Analytics remains off until you select "Accept analytics." If accepted, it may receive page addresses, device and browser information, approximate location, and approved usage events under Google's terms. Selecting "No thanks" leaves it off. Clear this site's browser storage to reset the choice.

Approved events cover generating a word or list, starting the timer or a print, copying results, opening the custom words panel, successfully submitting feedback, and reaching the 5- and 20-prompt milestones. They may include selected category, difficulty, audience, language, style, and list size.

Analytics events never include generated prompt text, custom words, email addresses, descriptions, expected results, or other form contents.

Hosting and verification

The site is hosted on Cloudflare and uses Cloudflare Turnstile to protect submission forms. Cloudflare may process technical request and network data needed to deliver and protect the site, including IP addresses, request logs, and verification data, under its own privacy terms.

Fonts

The Nunito font is bundled with the site and served with the other website files. Loading it does not contact a separate font provider.

Children

The generator does not ask children to create accounts or provide personal information. An adult should supervise use of the contact and suggestion forms, and children should not enter an email address or other personal details.

Questions

Privacy questions and deletion requests can be sent privately through the Contact page. Do not include passwords, payment details, or other sensitive information.