Privacy, without the mystery.

Last updated September 13, 2026. This page describes how What's Odd handles your data in the current review build. Public commercial launch requires the operator's verified support contact and final privacy review.

What the game stores

The server creates a random guest identifier and stores its hash, your chosen public username, referral code, creation time, puzzle starts, guesses, solve times, cue reveals and earned credits. An essential HttpOnly browser cookie keeps your daily run connected. The native app stores a guest session credential on your device. Local practice progress is stored on your device.

When you open the game, we record a server timestamp connected to your guest profile to measure game opens and returning browser or device profiles. Creator reports show aggregate counts. These records do not include your IP address, precise location, browsing history or the full page URL. Your data download includes these visits, and deleting your profile removes them.

Your username and daily result appear on the leaderboard after a correct solve. Anyone who sees your shared referral link can use it. Do not use an email address or other personal details as your explorer name.

Why and where

Reminders are optional. If you enable them, we store your browser's push delivery address and encryption keys, chosen timezone and reminder time, and server timestamps for notification attempts and clicks. Your browser's push provider processes delivery. In the iOS or Android app, we instead store a Firebase registration token and platform for the device. Firebase Cloud Messaging processes native delivery, with Apple Push Notification service delivering to iOS devices. Notifications contain generic copy and a link, never puzzle artwork or answers. Creator reports show aggregate reminder activity; provider acceptance does not mean a notification was displayed. We count a completed return play when a matching game starts within 24 hours after a recorded notification click and is later solved.

Open Reminders from the game footer to stop player reminders on this browser or device, or revoke notification permission in its settings. Your data download includes reminder preferences and history. Deleting your guest profile removes its push subscriptions and notification records. Creator alerts are enrolled separately in authenticated Studio and can be disabled independently there.

Feedback, suggestions and bug reports are private to you and authorized creators. We store the message, category, server timestamps, status and optional screenshot with your profile. Your export includes your reports and private screenshot links. Profile deletion removes the reports and queues their screenshots for deletion; failed storage deletions are retried when reports or the creator inbox are used. Please remove personal details from screenshots before attaching them.

These records make the game, scoring, referrals and fraud checks work. Hosted infrastructure processes routine network requests and security logs. Optional web payments are processed by Stripe when enabled; the app records payment event references and supporter access, not card details. Native store purchases, when configured, are processed by Apple or Google and verified through RevenueCat using your pseudonymous billing identity and store subscription data.

Cloudflare provides separate website traffic and performance analytics. Game-open counts are measured by What's Odd itself. No advertising tracking SDK is active in this build. A configured sponsorship can show a labeled external link outside active play. Sharing only opens the service you select. Its privacy practices apply when you use it.

Retention and your controls

Game records remain until you delete your guest profile. Server security logs and backup retention follow the hosting provider's policies. Payment accounting records may need to remain for business obligations; deleting a profile disconnects its payment event records from that profile. Deletion removes your game history, leaderboard entries, cue history and credits. It does not cancel or refund a payment or store subscription. Cancel a subscription in your store account before deletion if you no longer want it.

Guest credentials are device-specific. Once deleted or lost, they cannot be recovered using a username. Clearing them does not remove server data by itself; use the deletion control first.

Age and contact

The current game is intended for a general audience aged 13 and older and is not directed at children under 13. A final age rating and regional eligibility will be established before store launch. Contact details, when configured, are shown on the support page.