Privacy

How Lexivanto uses information to run the game. Updated 11 September 2026.

Who to contact

Lexivanto is an independent beta maintained under the nickname bully, based in Belgium. Use the privacy contact form to ask a question or make a request. Include an email address if you want a reply. Please do not send passwords or identity documents.

Playing and signing in

Guest play uses a nickname and a random browser seat identifier. A tab session keeps your room seat; closing the tab can lose access to it. Device preferences include your nickname, avatar, colour, theme, sound and vibration choices.

Optional Google sign-in stores a Google account identifier and display name. Lexivanto does not request Gmail, Drive or Google contacts. Signed-in profiles store a player tag, optional unique username and selected avatar/colour. Sign-in sessions expire after seven days. Use Profile to sign out or delete the account.

Matches and friends

Rooms store player nicknames, public profile selections, guesses, match times and connection heartbeats. Rooms and their connection records expire after 24 hours. An opponent's locked Duel word is hidden until both players submit. Anyone holding a private link may join its available seat.

Signed-in players can find your profile by an exact username or player tag. Accepted friends see your recent availability. Pending requests expire after seven days; challenges after five minutes. Blocking prevents social contact and future signed-in matching with that account. Block records remain until unblocked or the relevant account is deleted.

Safety and contact messages

Short-lived request counters use hashed network addresses and session identifiers to limit spam. Connection state supports reconnection messages without changing game rules.

Contact and player reports contain the selected category, your message, any email you choose to provide, your signed-in account reference if available, and relevant player or room references when you report from a match. These messages are stored privately for the operator to review and expire after 90 days. Reports are not shown to the reported player.

Purposes and legal bases

Game, account and requested social features use information to provide the service you ask for. Fraud prevention, reasonable service security and abuse handling serve the legitimate interests of keeping the game usable and safe. Optional contact details are used only to handle your request. The applicable basis for a specific legal or privacy request may also be a legal obligation.

Providers and retention

The game runs through OpenAI Sites and Cloudflare infrastructure, including a D1 database. Google operates its sign-in service. These providers may process technical information under their service arrangements. The game does not contain advertising or analytics scripts. No claim is made here that all provider processing takes place exclusively in the EU.

Expired operational records are removed in bounded background maintenance during site activity; physical deletion may be delayed when the site is idle. Deleting your account removes its profile, friends, blocks, challenges and sessions. Existing room nicknames remain until the room expires. A retained report is detached from the deleted account; message text and any voluntarily supplied email remain subject to the report retention period. Ask through the contact form if those need to be erased too.

Your choices and rights

You can request access, correction, erasure or a portable copy of applicable personal data, and object to or request restriction of eligible processing. Rights depend on the circumstances and applicable law. Use the privacy form; account verification may be needed to protect someone else's data. You may also complain to your data protection authority, including the Belgian authority where applicable.

Essential browser storage supports sessions and preferences. Optional sound and vibration are off unless enabled. You can play as a guest without signing in.