Privacy Notice

Who we are

Tomorrow's Word is operated by WordSpark (“we”, “us”). WordSpark is the data controller for the personal data described here: we decide what is collected and why. You can reach us at hello@buyword.app.

What we collect, why, and on what basis

• A random browser id and your IP address — used to keep your puzzle progress, count a day's play and prevent abuse. On our side both are stored only as a one-way hash mixed with a salt that changes daily; raw addresses are never written down. Legal basis: legitimate interests (running and protecting the game).
• Your guesses and results for a day — to show your progress and anonymous statistics. Legal basis: legitimate interests.
• Sponsor details you submit when you buy a word (name, link, message) — published on the day you bought. Legal basis: performance of our contract with you.
• Order records (the word, price, time you accepted the terms, payment reference) — to deliver your purchase and meet accounting and tax obligations. Legal basis: contract and legal obligation.
• Support messages you send us — to answer you. Legal basis: legitimate interests.

We do not use advertising or tracking cookies. Only the storage strictly necessary to run the game is used.

Who we share data with

• Paddle.com Market Ltd — our Merchant of Record. Paddle is the reseller for all our orders and handles checkout, payment, billing, sales tax, invoicing and refunds. Your payment details go to Paddle, not to us; we never see your card number. See Paddle's privacy policy.
• Service providers who host the site and its database and provide error reporting, acting on our instructions.
• Professional advisers (legal, accounting) where needed.
• Authorities where the law requires it.

International transfers

Some of our providers process data outside the UK/EEA. Where that happens we rely on an adequacy decision or on Standard Contractual Clauses with appropriate safeguards.

How long we keep it

• Hashed browser ids and play records: 12 months, then deleted.
• Published sponsor lines: kept for as long as the day stays in the public archive, and removed on request.
• Order and invoice records: 7 years, because tax and accounting law requires it. Paddle keeps its own copy under its own policy.
• Support messages: 24 months.

Anything we no longer need is deleted or anonymised.

Security

Data is transmitted over HTTPS and stored in access-controlled, encrypted-at-rest managed databases. Identifiers are hashed with a daily-rotating salt, administrative access is limited to those who need it and protected by strong authentication, and we log administrative actions.

Your rights

Depending on where you live, you may ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or receive it in a portable form, and you may withdraw consent where we rely on it. Write to hello@buyword.app — mention the day and the sponsor line if it is about published content — and we will answer within one month. If you are in the UK or EEA you may also complain to your local data protection authority.