Privacy Policy

1. Introduction

Welcome to Grida ("we", "us", or "our"). Grida is an online word game available at grida.online. This Privacy Policy explains what personal information we collect when you use our service, how we use it, and your rights regarding that information.

By creating an account or playing Grida, you agree to the practices described in this policy.

2. Information We Collect

2.1 Information you provide directly

• Username – chosen by you at registration; publicly visible.
• Email address – used for account authentication and password resets. Not shown publicly.
• Password – stored as a one-way bcrypt hash; we never store or transmit your plain-text password.

2.2 Information received from Google (OAuth sign-in)

If you choose to sign in with Google, we receive from Google the following data, subject to your Google account privacy settings:

• Google account ID – used to link your Google identity to your Grida account.
• Email address – used to create or match your Grida account.
• Display name / given name – used to suggest an initial username.

We do not receive or store your Google password, profile photo, contacts, or any other Google data beyond what is listed above.

2.3 Gameplay data

• Game results, scores, words played, and time played – stored to power your public profile and leaderboards.

2.4 Anonymous players

If you play without registering, a temporary guest ID is generated and stored in your browser's local storage. No personal information is collected for guest sessions. Guest game data is not retained in your statistics.

3. How We Use Your Information

• To create and manage your account.
• To authenticate you when you sign in (email/password or Google OAuth).
• To send a password-reset email when you request one.
• To display your username, level, and statistics on your public profile and leaderboards.
• To maintain game history (recent games) for your profile.
• To detect and prevent fraudulent or abusive activity.

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

4. Data Storage and Security

Your data is stored securely. Passwords are hashed; session tokens are stored only as hashes.

While we take reasonable precautions to protect your data, no internet service is completely secure. Please use a strong, unique password for your account.

5. Data Retention

• Login sessions expire automatically after 7 days of inactivity.
• Completed game records are retained for up to 90 days, after which they are automatically deleted.
• Account data (username, email, statistics) is retained for as long as you have an account.
• You may request deletion of your account at any time by contacting us (see Section 7).

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request deletion of your account and associated personal data.

To exercise any of these rights, please contact us at the address in Section 8.

7. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us:

Email: info@grida.online

8. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of Grida after changes are posted constitutes your acceptance of the revised policy.