Privacy Policy
Last updated October 11, 2026
Hangman Challenge (the “Service”) is made by NSI Hub LLC (“we”, “us”). This policy explains what we collect when you use the Hangman Challenge mobile app and the web player at hangmanchallenge.com, why we collect it, who processes it for us, and the choices you have. We keep it short on purpose: we do not show ads, we do not sell your data, and we do not track you across other apps or websites.
The short version
- You can play as a guest with no account. A guest is a random identifier plus an optional nickname.
- If you create an account we store your email address (or your Apple / Google sign-in identity) so you can sign back in.
- We store what you do in the game: words and hints you set, guesses, scores, times, streaks, favorites, word lists, groups and rivalries.
- Subscriptions and one-time skin purchases are billed by Apple or Google. We never see your card number.
- Words and hints you write are checked by an automated moderation system and used to generate the word card shown after a game. That processing is done by an AI provider on our behalf.
- You can delete your account and personal data yourself, in the app or from this website.
1. What we collect
Account and identity
- Guest identifier. When you first open the app or play on the web we create a random identifier so your games, scores and one-attempt-per-challenge fairness work. It is not linked to your name.
- Nickname. Optional, chosen by you, shown to other players on scoreboards, in rooms and on share cards.
- Email address if you upgrade a guest to an account with a sign-in link, or the identity token Apple or Google gives us if you sign in with them. Apple lets you hide your real email; we store whatever Apple relays. Players sign in without a password; a password sign-in exists only for support and app-review accounts, and those passwords are stored hashed.
- Age gate. You confirm you are 13 or older when you create an account. We do not store a birth date.
Gameplay content
- Challenges you set: the word, the hint, the category, difficulty and theme, and who you sent it to.
- Plays: letters guessed, mistakes, time taken, result and score, for every challenge, daily word, rapid round and live room you play.
- Social features: word lists you build, favorite words, groups you join, rivalries, reactions, blocks and reports you make.
- Preferences: theme, skin, notification settings, and whether you play the Daily Challenge publicly or privately.
Purchases
Subscriptions and one-time skin purchases are sold through the Apple App Store and Google Play. Apple or Google handle payment and hold your billing details. Our purchase partner RevenueCat sends us the subscription status (plan, active or expired, store, founder cohort) and, for each purchase, a store transaction reference so we can unlock what you bought. Skins you buy are recorded on your account so they stay yours on a new device. We never receive card numbers.
Notifications
If you allow notifications we store a push token for your device so we can tell you when a friend plays your word, when it is your turn, when a room invite arrives, when the day’s word is ready or your streak is at risk, and occasionally to invite you back after a quiet spell. Each type can be switched off in Settings, and you can revoke the permission in your phone settings.
Technical data
- Server logs: IP address, request time, app version and platform, kept briefly for security and debugging.
- Product analytics: in the app and on the website we record what happens (a game started, a word finished, a challenge shared, a skin earned) under your player identifier, with the app version and platform, so we can see which features work. We never record the letters you guess, your email or your messages. There are no advertising identifiers and no advertising cookies.
- Crash and error reports: in the app and on the website, when something breaks we receive the error, the app or browser version, the device model and operating system, and the IP address of the request, so we can fix it.
We do not collect your contacts, location, photos, microphone, health data or advertising identifiers.
2. Why we use it
- To run the game: match you to your challenges, keep scoreboards fair, deliver rooms in real time.
- To keep it safe: words and hints go through automated moderation before other players see them, and human review when someone reports content.
- To make the word card: after a game we show a definition, pronunciation and fun facts for the word. Those are generated once per word and cached.
- To honour your subscription and restore it on a new device.
- To send the notifications you asked for.
- To understand whether the game works (aggregate counts of plays and shares) and to fix bugs.
- To meet legal obligations and enforce our Terms.
Where the GDPR applies, our legal bases are performance of our contract with you (running the game and your subscription), our legitimate interests (safety, security, improving the game), and consent where we ask for it (notifications).
3. Who processes data for us
We use a small number of service providers. Each only receives what it needs.
| Provider | Purpose | Data |
|---|---|---|
| Supabase | Database, authentication, file storage, server functions (United States) | All account and gameplay data |
| Vercel | Hosts the website | Web requests and logs |
| Apple, Google | Sign in, app distribution, subscription billing, push delivery | Sign-in identity, purchase records, push tokens |
| RevenueCat | Subscription status across devices | Your player ID and store transaction references |
| Expo | Delivers push notifications to the app | Push tokens and notification text |
| Google (Gemini API) | Automated moderation of words, hints and lists; generation of word cards and category packs | The words, hints and list text you submit. Never your name or email. |
| PostHog | Product analytics (app and website) | Player identifier, event names, app version and platform |
| Sentry | Crash and error reporting (app and website) | Error details, device or browser type, app version, IP address |
We do not sell personal data and we do not share it with advertisers or data brokers. We may disclose data if the law requires it, or to protect players, the Service or the public.
4. What other players can see
Your nickname, your scores and times, your win streaks, and the words and hints you set are visible to the people you challenge, to members of groups and rooms you join, and to anyone who opens a challenge link or share card you send. The Daily Challenge has a worldwide leaderboard: you choose once whether to appear on it under a separate public name of your choosing or to play privately, in which case you are shown as “Anonymous”. You can change that choice in Settings at any time. Guests without a nickname appear as an anonymous player. Nothing else (email, sign-in method, purchases) is ever shown to other players.
5. How long we keep it
- Account data: until you delete your account.
- Guest data: until you delete it, or after an extended period of inactivity when we may remove it.
- Gameplay records: kept so scoreboards and rivalries stay intact. When you delete your account they are anonymised and shown as “deleted player”.
- Server logs and error reports: a short rolling window, typically under 90 days.
- Purchase references: as long as needed for accounting and to honour your subscription.
6. Your choices and rights
- Delete your account in the app under Settings → Your data → Delete my account, or follow the steps on our delete account page. This removes your sign-in, email, nickname, public name, streaks, rivalries, group memberships, purchased skins and subscription link. Scores stay on scoreboards as “deleted player”.
- Export your data in the app under Settings → Your data → Export my data, or email us.
- Notifications can be switched off per type in Settings or entirely in your phone settings.
- Block and report. You can block any player and report any word, hint or card from its scoreboard.
- Subscriptions and purchases are managed and cancelled through your Apple or Google account, not by us. Refunds are handled by the store.
If you live in the European Economic Area, the United Kingdom, Switzerland, California or another place with privacy laws, you may have rights to access, correct, delete, port or restrict use of your data and to object to some processing. Email us and we will respond within the time the law allows. You can also complain to your local data protection authority. We do not discriminate against you for exercising these rights.
7. Children
Hangman Challenge is not directed at children under 13, and you must be 13 or older to create an account. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, email us and we will delete it.
8. Security and international transfers
Data travels over encrypted connections (HTTPS) and is stored on servers in the United States. If you use the Service from outside the United States your data is transferred there. Where required we rely on standard contractual clauses or equivalent safeguards with our providers. No system is perfectly secure, so please keep your sign-in email secure and contact us if you suspect a problem.
9. Changes
We will update this page when our practices change and update the date at the top. For significant changes we will notify you in the app.
10. Contact
NSI Hub LLC
Email: support@hangmanchallenge.com