One More Clue Privacy
Read how One More Clue handles local progress, Google sign-in and saved game data, including erasing local data and deleting an account.
Playing as a guest
Guest progress, typed guesses, language and display preferences stay in your browser. Guests do not earn or spend stars. Previous browser-only guest stars are not transferred to an account. You can erase guest progress in Settings; guest play does not create an account in our database.
Practice and shared challenges
Practice requires an account and allows 10 new puzzles per UTC day. We store the latest practice date and count on your account to enforce this limit across devices. Erasing local progress does not reset it. Practice and shared challenges are unscored; typed guesses and puzzle progress stay in this browser. Shared challenges remain available to guests. Practice sends topic and seen question numbers; challenge links contain a question reference and language, never guesses or identity. Up to twelve challenges and the current practice puzzle are stored locally. Erase them in Settings.
Clue Mode
An account can unlock each UTC day’s Clue Mode board for five account stars. Unlocks, the latest submitted set of five answer identifiers and its score out of five are stored with the account, so reopening the same day’s board does not charge again. There is one submission per day, with no star reward. Choices are selected identifiers, not typed guesses. The latest board replaces the previous one; account deletion removes this saved state.
Signing in with Google
Google provides a verified account identifier and email during sign-in. We use the verified email to recognize the administrator, and store a hash of the account identifier. We do not retain your email, name, picture, Google access token or refresh token in the game database. Google processes sign-in under its own privacy policy.
Saved game data
For signed-in players we save compact question results, stars, consecutive-correct streaks, daily round unlocks, language and display preferences, and account creation/last-seen dates. Small typos and reviewed synonyms are matched on your device. The browser sends a SHA-256 fingerprint of the matched answer (or normalized unmatched guess) to check rewards. Shortened fingerprints prevent duplicate guesses; plaintext answers are not sent or stored. These fingerprints are pseudonymous, not anonymous: simple answers can be inferred by trying possible words.
Sessions and service providers
A secure essential cookie keeps you signed in for up to seven days. The database stores only a hash of its random session token, with at most three sessions per account. Cloudflare hosts the game and database and processes network requests, including technical connection information needed to deliver and protect the service. We do not install advertising trackers or external analytics. Sharing sends your result and challenge link through the app you choose.
Administration and retention
The owner can view aggregate statistics and pseudonymous account records, suspend accounts, revoke sessions and delete accounts. Administrator actions are recorded in a bounded management log. Account data is retained while your account exists. Use Delete cloud account in Settings to remove the active account record and sessions; provider recovery copies follow the provider's retention process. Signed-in progress and guest progress are separate.
Your controls
Change language/theme in Settings, sign out, erase local progress, or delete your cloud account. For access, export, correction or privacy questions, contact onemoreclueadmin@gmail.com. Do not send passwords or sign-in codes.