PRIVACY POLICY

1. Overview

Overword (“the Service”) is designed to be anonymous. We collect minimal data and do not require user accounts. This policy explains what information is collected, how it is used, and your rights regarding that information.

2. Information We Collect

Information you provide:

• Words submitted to the Service (stored anonymously with no link to your identity).
• Payment information when making optional purchases (handled entirely by Stripe; we never see or store your card details).

Information collected automatically:

• IP addresses — temporarily used for rate limiting to prevent abuse. IP addresses are held in server memory only and are not permanently stored in any database.
• Basic analytics — we may use privacy-respecting analytics to understand aggregate usage patterns (page views, visitor counts). No personal profiles are created.

3. Third-Party Services

The Service uses the following third-party providers, each with their own privacy policies:

• Stripe — Payment processing. Stripe collects payment card details and billing information directly. See stripe.com/privacy.
• Supabase — Database and real-time infrastructure. Stores submitted words and aggregate statistics. See supabase.com/privacy.
• Vercel — Hosting and content delivery. May collect standard server logs (IP, user agent). See vercel.com/legal/privacy-policy.
• Google AdSense — Advertising. Google may use cookies and tracking technologies to serve personalized ads. You can opt out of personalized advertising at adssettings.google.com. See policies.google.com/privacy.

4. Cookies

The Service itself does not set cookies for tracking purposes. However, third-party services (Google AdSense, Stripe) may set cookies as part of their functionality. Your browser settings allow you to control or block cookies. Blocking cookies may affect the functionality of certain features.

5. Data Retention

• Submitted words — stored indefinitely as part of the public word history and statistics.
• Payment records — stored for accounting and dispute resolution purposes. Stripe retains payment data per their own retention policy.
• IP addresses — held in temporary server memory for rate limiting only; not written to any persistent storage.

6. Data Security

We implement reasonable technical measures to protect the Service and its data, including encrypted connections (HTTPS), secure API keys, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

8. Your Rights

Since the Service is anonymous and does not collect personal information tied to identifiable users, most data subject rights (access, deletion, portability) are not applicable. If you have made a payment through Stripe and wish to exercise rights related to that payment data, please contact us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

For questions about this Privacy Policy, contact us at overword.org.