Privacy Policy
Last updated: August 16, 2026
Overview
Stumpdle is a free daily IPL cricket Wordle. Accounts are optional, guest play remains available, and we do not sell personal data.
What stays on your device
Guest game progress, statistics, analytics claim proofs, and theme preference are stored in your browser using localStorage. If you create an account, retained guest statistics and validated puzzle records are imported once. Verified daily results are also stored under an anonymous guest identifier so they can be credited safely if you later sign in. Later, the database copy overrides conflicting device totals. Clearing browser site data removes the local copy.
Google accounts and public username
Google provides your name, email address, profile image reference, and Google account identifier for authentication. These fields remain private and are not displayed to other players. You must choose a unique Stumpdle username. That username and explicitly public game statistics appear on the public leaderboard when you have verified current-season results.
Synchronized game data
Signed-in accounts store statistics, streaks, solve-time totals, daily first-attempt results, and archive progress in our database. Daily replays and archive games do not change daily statistics. Account data is retained; deactivating your account retains these records for audit (see Deactivation and retention).
Gameplay analytics
We collect gameplay events such as starting, guessing, completing, abandoning, revealing a hint, and sharing. Guest events are anonymous. For signed-in players, accepted events are linked server-side to an internal account identifier. A cryptographic device proof allows eligible guest sessions to be associated during onboarding; unproven sessions remain anonymous. Analytics payloads do not contain your username, email, Google identifier, or authentication credentials. Anonymous analytics are currently retained without a fixed expiration so long-term aggregate gameplay trends remain comparable.
What our servers and providers see
Guess requests contain the puzzle date and guessed player identifier. Standard hosting access logs may include IP address, request path, and user agent for security and reliability. While you are signed in, our account-session record also stores the session IP address and user agent for security. Active sessions expire after 30 days and may renew while you continue using the site; signing out or deleting the account removes the associated session. Vercel hosts the site and serverless endpoints, Neon hosts the database, and Google performs account authentication. Their own privacy policies govern their processing.
Contact form
When you use the contact form, we collect the message you write, the category you choose, and your email address only if you add one. We use this solely to read and reply to you. Submissions reach us by email through Resend, our email delivery provider, and are not stored in our game database. If delivery fails, the message is not saved. To keep out bots and spam, the form uses Cloudflare Turnstile, which runs a lightweight challenge in your browser and processes limited technical signals to tell real players from automated traffic. Your network address is used briefly to rate-limit submissions and prevent abuse. Resend and Cloudflare process this data as our providers under their own privacy policies.
Cookies
Signed-in accounts use a secure, HTTP-only, same-site session cookie. Guest play uses a separate anonymous, HTTP-only, same-site identifier so verified daily results can be deduplicated and claimed during a later sign-in. Unclaimed guest identifiers and verified results are retained for up to 400 days after the last activity and are removed during the next leaderboard refresh. Claimed guest results are kept with the account and retained for audit if you deactivate it. Neither cookie is available to browser scripts or used for advertising.
Deactivation and retention
You can deactivate your account from the account page after confirming the action. Deactivation signs you out, revokes your sessions, and releases your username so anyone can reuse it. For audit and security purposes we retain, rather than erase, your account identity (including your Google-linked identifier, email, and name), your synchronized games, statistics, and account-linked behavioral events, including claimed guest results; your leaderboard entries are removed. Deactivation cannot be undone: signing back in with Google creates a new, separate account and does not restore prior data or standing. Anonymous events that were never linked to an account are not identifiable as yours and remain aggregate data.
Advertising and children
Stumpdle does not currently show advertisements. We do not knowingly collect account information from children under 13. Children should not create a Google-linked account without a parent or guardian's permission.
Trademarks
IPL, team names, and player names belong to their respective owners. Stumpdle is a fan-made game and is not affiliated with or endorsed by the BCCI, the Indian Premier League, any franchise, or any player.
Contact and controls
Questions can be sent through the contact page. Manage or delete an account on the account page, or return to today's puzzle.