Privacy NoticeWordPilot AI

Who we are

360 Adapt LLC, operating as WordPilot AI ("WordPilot AI", "we", "us"), operates the word-game strategy tools and crossword helper at wordpilotai.com. 360 Adapt LLC is the data controller for the personal data described in this notice: we decide what is collected and why. You can reach us about anything on this page at privacy@wordpilotai.com.

Data we collect and why

Data stored on your device

The solver works without an account. Your recent searches, saved words, streaks, daily challenge results, game-mode preferences, plan status and your cookie choice are written to your browser's local storage. This stays on your device unless you sign in, at which point it is mirrored to your account so it follows you across devices.

Account data

If you create an account we store your email address, authentication identifiers (including a Google account identifier if you sign in with Google), display name, membership tier, and the account content above — saved words, search history, daily challenge attempts and leaderboard entries. Purpose: creating and securing your account, syncing your work across devices, and running the leaderboards. Legal basis: performance of our contract with you.

Usage and analytics data

We record product analytics events — for example which solver mode you used, whether the Wordle hard-mode toggle was switched, whether the best-next-guess panel was opened, and when an analysis is shared. These events carry the action, coarse context such as word length or candidate counts, and a timestamp. They are not used to build advertising profiles. Purpose and legal basis: our legitimate interest in understanding which features are useful and improving them.

Attribution data

When you arrive from a link we record the UTM parameters on that link, the referring site's hostname, the landing page, and any WordPilot share id (wp_share) the link carried. A first-touch copy is kept in local storage and a last-touch copy in session storage, and both are attached to analytics events. This tells us which channels and shared analyses bring people to the site. Legal basis: legitimate interest in measuring our own marketing. If you share an analysis, the link we generate for you includes a share id and UTM tags — it contains no personal data about you.

Technical and security data

Our hosting and database providers process IP addresses, request logs, device and browser information as part of serving the site, detecting abuse and preventing fraud. Legal basis: legitimate interest in keeping the service available and secure.

Support messages

If you email us we keep the message and your address so we can reply and follow up.

Cookies and similar technologies

We use browser storage and cookies in three categories:

• Essential — your signed-in session, security tokens, and your cookie preference itself. These are always active; the site cannot work without them.
• Functional — local storage holding your searches, saved words, streaks, plan status and settings. This is what makes the tools usable without an account.
• Analytics and advertising — product analytics events and, on the free tier, advertising served by third-party ad networks such as Google AdSense. These are only used after you accept in the cookie banner.

You can change your mind at any time by clearing site data in your browser, which resets the banner and removes stored preferences. Advertising is shown only to free-tier visitors: Pro and Competitive members see no ad slots at all, and no advertising scripts load for them. Where an ad network is active, it may set its own cookies and use them for ad measurement and personalisation under its own privacy policy — see Google's advertising policies for the network we use.

Payments

Our order process is conducted by our online reseller Paddle.com, which is the Merchant of Record for all our orders. When you buy a Pro or Competitive membership, your payment details are collected and processed by Paddle — we never see or store card numbers. We receive from Paddle the subscription status, plan, billing period and customer identifier needed to grant your membership. Paddle's handling of your data is covered by its own privacy notice.

Who we share data with

• Hosting, database and authentication providers — to run the site, store your account and serve pages.
• Paddle, our Merchant of Record — for sale of memberships, subscription management, payments, tax compliance and invoicing.
• Analytics and advertising partners — as described above, and only in line with your cookie choice.
• Professional advisers (legal, accounting) and authorities, where we are required to by law.

We do not sell your personal data.

Retention

Account data is kept while your account is open and deleted, or anonymised, within 30 days of you deleting it. Analytics and attribution records are kept in aggregated or pseudonymous form for up to 24 months. Billing records are retained by Paddle and by us for as long as tax and accounting law requires. Data held only in your browser stays until you clear it.

Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to how we use it, receive a portable copy, and withdraw consent where we relied on it. You can clear device-stored data yourself from the Search History and Saved Words pages or by clearing site data. For account data, submit a request on our privacy request page, where you can also track its status, or email privacy@wordpilotai.com. We will respond within one month. If you are in the UK or EEA you also have the right to complain to your local data protection supervisory authority.

International transfers

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA, transfers are covered by appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, row-level access controls on the database so you can only read your own records, and restricted administrative access. No service can promise perfect security, but we take this seriously and will notify you if a breach affects you.

Children

WordPilot AI is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.

Changes

If we change this notice we will update the date at the top of the page, and tell you in the app when the change is significant.