Security and Data

No accounts

The game needs no account, no email address and no sign-in, so there is no database of players to protect or leak. That is not the same as collecting nothing. The sections below explain what is collected.

What stays on your device

The game saves two things in your browser’s local storage:

• your board state, so you can close the tab and carry on later;
• your statistics: win rate, current streak and best streak.

These stay on your device and are not sent to us. We cannot see your guesses or your streak, and we cannot restore them. Clearing site data for quordle.uk removes both.

What leaves your browser

Visiting any website sends some information to the services that deliver it. For quordle.uk that means:

• Our hosting provider records standard server logs: IP address, the page requested, the time and your browser type. These are used for security and fixing faults, and are deleted after a short period.
• Cloudflare delivers the site and provides Cloudflare Web Analytics, which counts visits without cookies.
• Google Analytics 4 measures how the site is used, such as pages viewed, approximate location, device and browser. It sets cookies in your browser (_ga and _ga_ followed by an ID, kept for up to two years by default) so it can recognise a returning browser. Google processes this data for us.

We do not run ads, and we do not use advertising or retargeting cookies. You can block Google Analytics with Google’s opt-out add-on or by blocking its cookies in your browser. The game works the same either way.

Connection security

The site is served over HTTPS through Cloudflare, so the connection between your browser and the site is encrypted.

Reporting a security problem

If you find a vulnerability on this site, email [email protected] with enough detail for us to reproduce it. Please do not publish it before we have had a chance to fix it, and please do not test in a way that affects other players. We do not run a paid bug bounty.