Privacy Policy

Last updated: June 5, 2026

The Molly Pocket Games is a personal crossword website created for a birthday celebration. This Privacy Policy explains what information the site collects, how it is used, and how to contact us about it.

Information We Collect

When you create or use an account, we may collect:

• Username and email address.
• Password hash and password reset or email verification records for password-based accounts. We do not store plain-text passwords.
• Google account identifier, name, email address, and profile metadata when you choose to sign in with Google.
• Session information needed to keep you logged in.
• Crossword progress, including letters entered, pencil marks, rebus entries, checked or revealed squares, timer values, puzzle settings, completion state, and related gameplay history.
• Basic technical information normally handled by hosting providers, such as request metadata, browser/device details, and IP address.

How We Use Information

We use this information to operate the site, authenticate accounts, sync puzzle progress across devices, provide password reset and email verification, remember puzzle settings, prevent account mix-ups, and troubleshoot or improve the experience.

Google Sign-In

If you sign in with Google, we request only basic sign-in scopes: openid, email, and profile. We use Google’s stable account identifier to connect your Google login to a Molly Pocket Games account. We do not request access to Gmail, Google Drive, Google Calendar, contacts, or other Google services.

Cookies And Local Storage

The site uses an HttpOnly session cookie to keep you logged in and a short-lived cookie during Google sign-in to protect the OAuth flow. The site may also use browser local storage as a fast local cache for puzzle progress and settings. The durable account copy is stored in Cloudflare D1 when you are logged in.

Service Providers

The site is hosted on Cloudflare Pages and uses Cloudflare D1 and Durable Objects for account and crossword progress data. Email verification and password reset messages may be sent through Resend. Google provides authentication when you use Google Sign-In.

Sharing

We do not sell personal information. We do not share personal information for advertising. Information may be processed by the service providers listed above so the site can function, or disclosed if required by law.

Data Retention

Account and puzzle progress information is kept while your account is active or as needed to operate the site. Temporary verification, reset, and session records may expire or be removed over time.

Your Choices

You can log out at any time. You can also request account deletion or data removal by contacting us. Deleting an account may remove saved puzzle progress and settings associated with that account.

Children

The site is intended for friends and invited guests. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes

We may update this Privacy Policy as the site changes. The “Last updated” date will be changed when updates are made.

Contact

Questions or requests can be sent to [email protected].