Privacy information
Early testing version · updated 1 November 2026
BoilingWords is operated by Ciganik Studio, a Norwegian sole proprietorship. This page describes the current testing version. A wider launch is pending completion of the contact and provider information below.
Your daily puzzle and time zone
You choose a time zone so that the game server can make the next daily puzzle available at 03:00 in that zone. You can enter it manually. Device time zone detection is optional, starts only after you enable it, and can be disabled in Privacy & time zone. Disabling detection does not prevent you from playing. This feature does not request GPS access, infer your time zone from your IP address, or maintain a travel history.
Your selected zone is sent with game requests. The server uses its own time to decide puzzle availability; your device clock does not decide which date is available. A device time zone is a user-controlled setting, not verified physical location.
Browser storage
This browser remembers your privacy and time zone choices, temperature unit, reduced-motion setting, and puzzle progress. These records support the features you request. They remain until you clear them or clear this website’s browser data. Removing records is permanent on this device; clearing browser data does not delete account or payment records held by a provider.
Server requests and service providers
To evaluate guesses, the game server receives submitted words, puzzle dates, selected time zones and ordinary connection information. Hosting and infrastructure providers may process IP addresses and security logs to deliver and protect the website. The game’s time zone feature does not use those IP addresses for geolocation.
The standalone website runs on Cloudflare. A separate private preview is hosted through OpenAI Sites and Cloudflare and may use ChatGPT sign-in. Account sign-in and purchases are not yet enabled on the standalone website. If those services are enabled later, Supabase and Stripe will process information needed for account access, subscription status and payments. Card entry will be handled by Stripe, rather than by a game form. Separate provider policies also apply.
Optional tracking and sharing
This version includes no advertising or analytics tracking scripts. We will ask separately before introducing optional tracking that requires consent. Social sharing starts only when you choose a share action; the exported game result contains statistics, not guessed words, the answer or hint text. The chosen social platform then applies its own policies.
Your choices and rights
Open Privacy & time zone on the game page to disable device detection or change your zone. Necessary processing to provide the game is described separately from this optional permission. Depending on the applicable legal basis, you may request access, correction, deletion, restriction or portability, or object to processing. You may also complain to the Norwegian Data Protection Authority, Datatilsynet.
Information still required before public launch
Ciganik Studio’s privacy contact email, business contact details, the final legal basis for each processing purpose, provider arrangements, international-transfer safeguards where needed, and retention periods for server, account and payment data must be completed before public launch. A consent window alone does not replace these obligations.