Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account data via Google/Discord OAuth: name, email address, and profile picture
• Player profile information: display name, avatar emoji/color, and custom profile pictures you upload
• Game statistics: scores, wins, words found, games played, time played, achievements, and leaderboard rankings
• Temporary game state: room information, current game data (stored temporarily in Redis with automatic deletion)
• Analytics data via LogRocket: session recordings, error logs, and usage patterns to help us improve the service

2. How We Use Your Information

We use your information to: provide authentication and account features, display your profile and statistics to other players, maintain leaderboards and rankings, improve our service through analytics, send important service-related communications, and ensure fair play and enforce our Terms of Service.

3. Third-Party Services

We use the following third-party services to operate LexiClash:

• Supabase - For authentication, database storage, and profile picture storage
• LogRocket - For analytics, session recording, and error tracking
• Google - For OAuth authentication
• Discord - For OAuth authentication

We do not sell your personal information to third parties.

Advertising Partners

We partner with Google AdSense to display non-personalized ads on our website. Ad revenue helps keep LexiClash free for all players. All ads operate under child-directed treatment (TFCD) mode.

How Advertising Works

• All ads are non-personalized — no browsing behavior is tracked for ad targeting
• Child-directed treatment (TFCD) is enabled by default, ensuring no ad personalization
• We never sell your personal data to advertisers
• Ad revenue helps us keep LexiClash free to play
• Google's ad serving complies with COPPA requirements for child-directed sites

Your Choices

Since all ads are non-personalized, no action is required. For more information:

• Learn about non-personalized ads: Google Ad Settings
• Review Google's privacy practices: Google Privacy Policy
• Learn about AdSense partner policies: AdSense Partner Policy

5. Cookies and Local Storage

We use essential cookies and local storage for: authentication tokens (Supabase), username and preferences (localStorage), theme settings (dark/light mode), and language preferences. We also use LogRocket cookies for analytics purposes. Advertising operates under child-directed treatment (TFCD) mode, which limits cookies to ad frequency capping and aggregated reporting only — no personalized advertising or cross-site tracking cookies are used.

6. Data Retention

Account and profile data is retained until you request deletion. Game statistics are retained to maintain leaderboard integrity. Temporary game state (Redis) is automatically deleted within 1 hour. Analytics data is retained according to LogRocket's policies.

7. Data Security

We implement industry-standard security measures including: encrypted connections (HTTPS), secure OAuth authentication, encrypted database storage via Supabase, and secure WebSocket connections for real-time gameplay.

8. Your Rights

You have the right to: access your personal data through your profile page, update your profile information at any time, delete your account and associated data, and request information about how your data is used.

9. International Users

Your data may be transferred to and stored in countries outside your country of residence, including countries that may have different data protection laws. By using LexiClash, you consent to such transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Your continued use of LexiClash after changes constitutes acceptance of the updated policy.

11. Governing Law

This Privacy Policy is governed by the laws of the State of Israel. Any disputes shall be resolved in the courts located in Israel.

12. Children's Privacy

LexiClash is designed for players ages 6 and up, including children. We are committed to complying with the Children's Online Privacy Protection Act (COPPA) and similar international regulations to protect children's privacy.

Measures we take:

• No personalized advertising — all ads are served in child-directed treatment (TFCD) mode, preventing interest-based ad targeting
• No advertising tracking cookies — we do not allow ad networks to track children's browsing behavior across websites
• Minimal data collection — we collect only the data necessary to provide the game experience
• Parental involvement — users under 13 require parental consent to create accounts, as stated in our Terms of Service
• No sale of children's data — we never sell, rent, or share personal information of any user, including children, to third parties for marketing purposes
• Parent/guardian contact — parents or guardians may contact us at lexiclash.game@gmail.com to review, delete, or manage their child's information