Privacy Policy

Last updated: September 18, 2026

What we store

• Your username.
• Your email address, used only for account verification, password resets, and security alerts. We never share it or send marketing email.
• A one-way hash of your password. We never store or see your actual password.
• When your account was created, when you accepted the Terms of Service, and which invite code you signed up with.
• Your active login sessions and recovery codes, stored only as one-way hashes.
• If you turn on two-factor authentication, its secret key, stored encrypted.
• Your profile picture, if you upload one (resized in your browser first, which removes hidden photo data like location).
• Messages you post in the shoutbox, your daily word game results, and when you were last active (shown to other members as "Online").

Cookies

We use only essential cookies: one to keep you logged in, and a short-lived one during the two-factor step of logging in. There are no trackers, analytics, ads, or third-party scripts on this site.

Services we use

Emails are delivered through an email delivery provider, which processes your email address only to deliver our messages. When you set a password, we check whether it has appeared in a known data breach using the Have I Been Pwned service. Only the first 5 characters of a one-way hash of your password are sent, so your password itself never leaves our server.

GIF searches are sent to KLIPY by our server, with an anonymous ID instead of your account details; your browser never contacts KLIPY directly. We briefly keep IP addresses in memory to limit repeated login attempts; these are not saved.

Your choices

You can change your email or delete your account at any time from your account page. Deleting your account permanently removes all of its data. To request a copy of your data, email support@synthetix.win.