Your progress. Your choice.

What we save, and why

Your player profile

A random player identifier, game history, invented names, scores, Daily Dose completion, and streak data let you continue playing and compare your progress.

Group play

The display name and avatar you choose, room membership, submissions, scores, and class-favorite votes are saved for multiplayer and room history. Use a nickname; avoid personal or sensitive information.

Linked devices

Each device has a random identifier and a hashed secret, a general browser/device label, and creation and last-active times. Temporary linking codes connect devices to one profile.

Optional accounts

If you sign up, we save your verified email, display name, account-to-player link, and sign-in sessions. Passkeys store a public key and device metadata, never your fingerprint or private key. Authenticator secrets and recovery codes are encrypted. Email links are short-lived, single-use, and stored as hashes. You can keep playing as a guest.

Optional features

Notifications store a push subscription, time zone, reminder time, and your choices. Round feedback is saved when you send it. Optional usage insights record a day-level visit time and whether you arrived directly, through a reminder, an invite, or a shared result.

Support & operation

If you email us, we receive what you send. Our hosting providers process connection information, such as IP addresses and technical logs, to deliver and protect the service. Application request limits also keep short-lived counters against a player identifier.

Cookies & device storage

An essential, first-party doseword_device cookie identifies your device. It is HttpOnly, uses secure transport in production, and expires after up to one year unless replaced or removed. Clearing it can disconnect your browser from your progress; link another device first if you want to keep access.

Optional account sign-in uses first-party HttpOnly session cookies for up to 30 days, plus short-lived cookies during verification. Signing out or revoking a session ends its server access.

Local storage remembers appearance, motion, avatar, keyboard, and usage-insight choices. IndexedDB stores your offline profile, drafts, and solo plays. The service-worker cache stores public app files so offline solo can start without a connection.

We do not include advertising trackers or third-party analytics scripts. Usage insights are optional and off until you enable them on this device. A cookie banner is not used for the essential storage that makes the game work.

Who can see your information

People in your multiplayer room can see your display name, avatar, and, once results are revealed, your submitted name and score. Anyone you give a room link to can try to join. A shared Daily Dose comparison lets its recipient view your result after completing the same dose. Share links and device-link codes only with people or devices you intend.

The game uses OpenAI Sites and Cloudflare for hosting, storage, and infrastructure. Sign-in emails are delivered through Resend when you request a link; that provider receives your email address and the sign-in message. Authorized Doseword administrators can view game statistics, account information, and saved play records for support and moderation. Changes to roles, account access, and room moderation are recorded in a private audit trail.

When you enable notifications, your browser’s push provider processes the subscription and delivery. Your camera is requested only when you choose a QR scanner; the app decodes frames on your device and does not upload or save them.

Doseword does not sell your player data or use it for targeted advertising. Data may also be disclosed when required by law or necessary to investigate abuse. Hosting and delivery may process information outside your country.

How long it stays

Account data, your progress, and submitted feedback stay until you delete your profile or request removal. Room access expires after 24 hours; saved rounds can remain in player history. A device-link code works for ten minutes or until used, replaced, or cancelled.

Optional visit records older than 90 days and expired request-limit counters are cleaned up when the service next handles the relevant maintenance work. Expired account sessions and verification records are removed during sign-in maintenance. Administrative audit records are kept for up to one year for accountability, with identifiers that may outlast deletion of the corresponding account. Notification subscriptions stay until disabled, expired, or deleted with the profile. Hosting logs and backups follow the providers’ retention and recovery processes; deleting live game data does not instantly erase every infrastructure backup.

Download or delete your data

These controls apply to the player profile linked to this browser. Deleting it removes its live server data and signs out its linked devices. Browser copies on another device cannot be remotely erased while that device is offline; clear that device’s site storage if you also want those copies removed.

Questions & privacy requests

Contact the operator of Doseword at contact@doseword.com to ask about access, correction, deletion, or other privacy rights that apply where you live. We may need to verify your connection to a profile; do not send device secrets or linking codes by email. You can also contact your local privacy regulator.

Core game data is used to provide the game you request and to keep it secure. Notifications and usage insights are optional choices you can withdraw. We do not ask for health records, payment information, or a child’s real identity. If personal information about a child has been entered, contact us so we can help remove it.

Changes to these practices will be reflected here with an updated date.