Privacy
Last updated: 1 October 2026
This page describes how IQRCrossword (https://www.iqrcrossword.com) handles information. The service is operated by Teo Ying Chieh. If that changes, we will update this page.
We do not sell your personal information. We do not currently show third-party ads. If we add advertising (for example Google AdSense), we will update this page and follow how Google uses data on partner sites.
What we collect
- Guest play. If you play without an account, we set an HTTP-only cookie named
iqr_guest(about 400 days) so this browser can keep progress. Your public guest name looks likeiqr-XXXX. The cookie stores a secret token, not your email. - Account. If you register or log in, we store your email, password hash (if you set a password), nickname, and login session. The session cookie is
iqr_session(about 30 days). - Email codes. When you register or reset a password, we email a short-lived 6-digit code from
noreply@iqrcrossword.com. We store a hash of the code, its expiry, and a hashed network address to limit abuse — not the code itself. - Google sign-in. If you choose Continue with Google, Google authenticates you and we receive your Google account id and email (and whether the email is verified), using Google’s OAuth. We do not receive your Google password.
- Play data. Grid progress, time, score, and hints may be stored in your browser (
localStorage) and on our servers so you can resume and appear on leaderboards. - Puzzles you create. Titles, grids, clues, visibility, and related records are stored to run the product.
- Language. We store your language choice in a cookie named
iqr-locale. - Optional AI. Creators may use site-provided AI (within limits) or save their own API key for suggestions. User-supplied keys are stored encrypted. Prompts include puzzle text you enter (topic, clues, grid context) so the model can suggest answers. We are not the AI provider; their terms also apply.
- Preferences. For example, turning off home recommendations based on what you have played, and whether you dismissed the home-screen install hint (in
localStorage). - Technical logs. Hosting and our database may record standard request data (such as IP address and browser type) as part of operating and securing the site.
- Site analytics. In production we use Google Analytics 4 to see aggregated visits (for example pages and approximate country). Google may set cookies such as
_ga. See Google’s privacy policy. You can block this with your browser or an analytics blocker.
We host the site on Vercel and store application data in a PostgreSQL database operated by our hosting/database providers. They process data on our behalf to keep the service running.
Cookies and local storage
| Name / place | Why |
|---|---|
iqr_guest | Guest identity and play |
iqr_session | Logged-in session |
iqr-locale | Language |
iqr_google_oauth | Short-lived Google sign-in check |
Browser localStorage | Play progress, theme, some UI flags |
The cookies above are first-party cookies for this site. Google Analytics may also set its own cookies (such as _ga) to measure visits. We do not run a third-party ad network on the pages today.
What we do not do today
- No payment card collection
- No third-party ad network on the pages
- No selling of contact lists
Your choices
You can use the site as a guest, log in, log out, change your nickname, and turn off interest recommendations in Account. You can delete site cookies and localStorage in your browser (guest progress on that device will be lost unless it was already moved to an account). To correct email or delete an account, use Contact.
Children
IQRCrossword is a general word-game site. It is not directed at children under 13. If you believe we have collected personal information from a child, contact us and we will delete it.
Changes
We may update this page when the product or the law requires it. The date at the top will change. Continued use after an update means you accept the revised notice.