Legal

Privacy Policy

Last updated: August 16, 2026

The short version

This site stores nothing on your device and receives nothing from it. There are no accounts, no cookies, no analytics of any kind, no uploads, and no server-side solver. The letters you type are worked on inside your own tab and are discarded when you leave the page. There is nothing here that could be sold, because there is nothing collected to sell.

What is stored, in full

Nothing. Named individually rather than summarised, because a summary of a stored record is not the same thing as the record, and the honest form of this section on most sites is a list:

• no cookie is set, for any purpose, including no consent cookie, because there is no consent to record;
• no entry is written to local storage;
• no entry is written to session storage;
• no IndexedDB database is created;
• no service worker is registered, so nothing is cached under this site's control;
• no rack, result, setting or preference is retained between page loads.

The consequence is a real cost rather than a boast: the site cannot remember anything for you. There is no history of racks you have solved and no saved preferences, and reloading the page starts you at an empty box. That is the trade being made, and it is made deliberately.

The letters you type

A rack lives in the text field while you are typing it and in the page's memory while the answer is computed. It is not transmitted, and this is enforced rather than promised: the Content-Security-Policy served with every page on this site restricts network connections to this origin alone, so a request carrying your letters to anywhere else is refused by the browser before it is made. The solver itself is JavaScript running in your tab against a word list that has already been downloaded, so there is no step at which sending your rack anywhere would even be useful.

The one thing the site does fetch is its own word index — plain text files under /wordlist/, chosen by the length of your rack and nothing else. Requesting shard-07.txt reveals that a rack of seven characters or more was typed. It does not reveal which characters, and no other request is made. The number of bytes fetched is printed on the page that fetched them.

No analytics, at all

This site runs no analytics, and neither does any other site we operate. There is no beacon, no tag manager, no pixel and no visitor counter. That is enforced by the browser rather than by intention: the Content-Security-Policy pins connections to this origin alone, so a request to any outside origin fails closed. If analytics ever appears to be broken on this site, it is broken on purpose. We accept not knowing how many people visit.

Hosting and server logs

The site is served by Cloudflare Pages. Like any web host, Cloudflare processes standard technical data — IP address, user agent, requested URL — in order to deliver pages and protect against abuse, subject to Cloudflare's privacy policy. A page request is the only thing any server sees, and your letters are not in it.

Advertising

The site currently shows no advertising. If that changes, this policy will be updated first, any advertising will comply with applicable consent requirements, and a consent choice will be presented where the law requires one. Two things will not change: nothing about how the solver works, and where advertising may sit. No advertising will be placed inside or beside the letter entry or the results list.

Email

If you email hello@wordsieve.com, your address is used solely to reply and is not added to any list.

Children

The site is a general-audience utility and does not knowingly collect personal information from anyone, including children.

Changes and contact

If this policy changes, the date at the top changes with it. Privacy questions: hello@wordsieve.com.