Privacy Policy
Misfit is a free daily word puzzle. This policy explains what information we collect, why, and how it is stored.
What we collect
When you sign in with Google, we receive:
- Your Google display name and email address
- Your Google profile picture URL
When you play, we store:
- Puzzle date, score, time taken, and number of mistakes per game
- Win/loss outcome
We do not collect your location, device identifiers, or any other personal information.
How it is stored
Game data is stored in two places:
- Your browser (localStorage) — for anonymous play and offline access
- Supabase — a cloud database, when you are signed in, so your stats sync across devices
Supabase is hosted on AWS infrastructure. Each user's data is protected by row-level security — only you can read or write your own records.
How we use it
Your data is used solely to display your personal stats (games played, win rate, streak) within Misfit. We do not use it for advertising, sell it to third parties, or share it with anyone.
Third-party services
- Google OAuth — handles sign-in. Google's privacy policy applies to that flow.
- Google Analytics — we use aggregate, anonymous analytics to understand how the puzzle is played. No personal data is shared.
- Supabase — stores signed-in user data. Supabase's privacy policy applies to data at rest.
Data retention and deletion
Your game history is retained until you request deletion. To delete your account and all associated data, email privacy@gamedrop.io with the subject "Delete my Misfit account". We will process the request within 14 days.
Children
Misfit is not directed at children under 13. We do not knowingly collect information from children.
Changes
If this policy changes materially, we will update the date at the top of this page. Continued use of Misfit after changes constitutes acceptance.
Contact
Questions? Email privacy@gamedrop.io.