Privacy Policy

Depending on how you use flipped.website, we collect minimal data required to provide the game:

• Guest Mode (No Account): Your puzzle completion state, solve times, streak counter, and recent Classic game IDs are saved exclusively on your device inside your browser’s localStorage. No identity information is transmitted to our servers.
• Authenticated Accounts: If you choose to create a free account to sync progress across multiple devices, our authentication provider (Clerk) securely manages your credentials (such as email address or Google OAuth ID). We store only your game statistics (games played, win rate, daily streak, and best solve times) linked to your unique user ID.
• Technical Diagnostics: Standard, anonymous HTTP request logs (IP address, browser user-agent, request timestamp) are temporarily maintained by our hosting infrastructure (Vercel) strictly for DDOS defense, rate limiting, and server health monitoring.

We use stored data solely for the following operational purposes:

• To evaluate word solutions and track daily single-attempt completion status.
• To compute player win rates, streaks, and solve times on your personal Statistics page.
• To enforce fair rate limiting on puzzle submission endpoints.
• To respond to inquiries and bug reports sent to our developer mailbox.

FLIPPED does not use third-party marketing or advertising tracking cookies. We utilize:

• Essential Local Storage: Keys such as flipped_progress_guest_v1 and flipped_progress_user_* to preserve your daily streaks and game history without requiring network calls on every reload.
• Authentication Session Cookies: First-party session tokens issued by Clerk when you actively log in, ensuring you remain signed in across page reloads.

All network traffic to flipped.website is encrypted in transit using industry-standard Transport Layer Security (TLS/HTTPS). User passwords are never handled directly by our application code; authentication tokens are encrypted and managed with SOC-2 compliant infrastructure via Clerk.

You maintain total control over your information:

• Clear Local Progress: You can wipe all local guest game history at any time by clearing your browser cache and localStorage data for flipped.website.
• Delete Cloud Account: You may request permanent deletion of your account and associated synchronized statistics by emailing us at flippedbyyash@gmail.com. We will erase all server-side records within 3 business days.