Privacy · last updated May 26, 2026
The short version.
We collect your email when you join the waitlist, send you one puzzle a day, and let you unsubscribe in one click. We don't sell it, share it, or use it for anything else.
What we collect.
When you submit the waitlist form, we record your email address, a timestamp, and which page surfaced the form (so we know which landing variant converted). That's the whole list.
When you visit ahadle.com, we use Google Analytics 4 to count page views and aggregate things like browser, country, and which clue you got stuck on in the sample puzzle. Analytics cookies only set if you've accepted them on the banner — say no and you're a ghost to us. We also use Vercel Web Analytics, which counts page views without setting any cookies or storing data on your device. These are anonymized; we never see who you are individually unless you've given us your email through the waitlist.
If you create an account.
Accounts are optional — you can play every day without one. You only need an account to appear on the leaderboards. When you sign in (with a magic link or with Google), we store your email address to identify your account, and you pick a public display name that shows on the leaderboards next to your scores. Your email is never shown publicly — only the display name you choose.
For signed-in players we keep a record of each day's play — which puzzle, how many clues you used, whether you solved it, and when — plus your points, streak, and totals. That history powers your stats and the leaderboards, and lets us spot and exclude cheating so the boards stay honest. We don't use it for advertising. Authentication runs on Supabase; the leaderboard rankings are cached in Upstash Redis. Anonymous play is never recorded server-side — it lives only on your own device.
What we do with it.
We send you the daily puzzle. We send you one confirmation email when you sign up. Once Ahadle gets popular enough to warrant it, we might send the occasional product update — never more than one a month, and you can opt out without opting out of the daily puzzle.
The analytics we collect tell us which puzzles are too hard, which clues people give up on, and whether anyone's actually finding the site. That's used to make the product better. It is not shared with advertisers or any third party that would target you with ads.
Who else can see your email.
Resend, the service that sends the daily puzzle. Vercel, where the site is hosted. Google, because we use GA4. If you create an account: Supabase, which stores your login and profile, and Upstash, which caches the leaderboard rankings. None of them are allowed to use your data for anything other than running Ahadle.
We will never sell, rent, or hand over your email to a third party for marketing.
How to leave.
Every daily-puzzle email has an unsubscribe link at the bottom. Click it and you're out — no questions, no exit survey. If you'd also like us to delete your email entirely (instead of just suppressing sends), email hello@ahadle.com and we'll wipe it within seven days.
If you have an account, the Delete account button on your account page removes everything at once — your login, profile, display name, and all your play history and stats — immediately and for good.
Where we're run from.
Ahadle is operated from the United States. If you're writing to us from the EU, UK, or anywhere with stricter rules, the same protections above apply, plus the right to request a copy of your data or its deletion at any time. Email hello@ahadle.com and we'll handle it.
Cookies.
We store a handful of small values on your device. Two kinds:
| Name | Purpose | Lives for |
|---|---|---|
| ahadle_cookie_consent | Remembers your choice on the cookie banner so we don't ask again. | Until you clear it |
| ahadle_game | Tracks your in-progress guesses on today's puzzle when you're not signed in, so a refresh doesn't reset you. Strictly necessary. | 2 days |
| sb-*-auth-token | Keeps you signed in to your account (set only if you create one). Strictly necessary for login. | Until you sign out |
| ahadle_anon_id | A random ID so we can count unique visitors and understand which sources bring people who later sign up. No PII, never tied to your IP. Only set after you accept on the banner. | 1 year |
| _ga, _ga_* | Google Analytics. Only set if you accept on the banner. Used to count page views and events. | Up to 2 years |
The puzzle-progress and auth cookies are strictly necessaryfor the site to work (without them, refreshing the page would re-play today's puzzle, or you'd be signed out) and don't require consent under ePrivacy. Everything else — analytics and the anonymous-visitor cookie — only runs if you accept on the banner. You can change that any time: .
Changes.
If we ever materially change how we handle your data, we update this page and bump the date at the top. If the change affects what we do with existing subscribers, we email you first.