1. Information We Collect

We collect the following types of information:

• Account data via Google/Discord OAuth: name, email address, and profile picture
• Player profile information: display name, avatar emoji/color, and custom profile pictures you upload
• Game statistics: scores, wins, words found, games played, time played, achievements, and leaderboard rankings
• Temporary game state: room information, current game data (stored temporarily in Redis with automatic deletion)
• Analytics data via LogRocket: session recordings, error logs, and usage patterns to help us improve the service

2. How We Use Your Information

We use your information to: provide authentication and account features, display your profile and statistics to other players, maintain leaderboards and rankings, improve our service through analytics, send important service-related communications, and ensure fair play and enforce our Terms of Service.

3. Third-Party Services

We use the following third-party services to operate LexiClash:

• Supabase - For authentication, database storage, and profile picture storage
• LogRocket - For analytics, session recording, and error tracking
• Google - For OAuth authentication
• Discord - For OAuth authentication

We do not sell your personal information to third parties.

4. Cookies and Local Storage

We use essential cookies and local storage for: authentication tokens (Supabase), username and preferences (localStorage), theme settings (dark/light mode), and language preferences. We also use LogRocket cookies for analytics purposes. We do not use advertising or tracking cookies.

5. Data Retention

Account and profile data is retained until you request deletion. Game statistics are retained to maintain leaderboard integrity. Temporary game state (Redis) is automatically deleted within 1 hour. Analytics data is retained according to LogRocket's policies.

6. Data Security

We implement industry-standard security measures including: encrypted connections (HTTPS), secure OAuth authentication, encrypted database storage via Supabase, and secure WebSocket connections for real-time gameplay.

7. Your Rights

You have the right to: access your personal data through your profile page, update your profile information at any time, delete your account and associated data, and request information about how your data is used.

8. International Users

Your data may be transferred to and stored in countries outside your country of residence, including countries that may have different data protection laws. By using LexiClash, you consent to such transfers.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Your continued use of LexiClash after changes constitutes acceptance of the updated policy.

10. Governing Law

This Privacy Policy is governed by the laws of the State of Israel. Any disputes shall be resolved in the courts located in Israel.