Privacy

Playing without an account

When you start a dig on wormillion.com, the server makes you an anonymous player and sets one cookie, wm_sess, that identifies that player. It stores each dig you play: the answers you gave, when each round arrived (the clock is the server's), the score, and what the dig earned - XP, achievements, the places you have found. There is no name, email or address attached to an anonymous player, and the server does not store your IP address.

Your browser also keeps its own copy of your history, best dive and streak in local storage, so the game works offline and off the site.

Signing in

If you sign in with Google, we receive your Google account id, your name, your email address and your profile picture. With Discord we receive your Discord id, your name and your picture. With email we store the address you type, and a one-time link we send to it. We use these only to recognise you, to fill in your name and picture until you change them, and (for email) to send the sign-in link. We never email you anything else.

Your chosen name, your picture, your level, achievements, medals, first finds and recent scores are public on your profile and the leaderboards. A note you leave in a marathon is shown, with your name, picture and level, to everyone who digs to its depth, until you change it or delete your account. Your email address and your sign-in accounts are never shown.

Answers we couldn't recognise

When an answer isn't recognised, we keep the typed text (lower-cased, without accents), its category and a daily count for 90 days to improve the answer bank. It is not linked to you or your dig.

The daily comparison

A daily's ten answers are added to that day's anonymous totals - how many people played, the score spread, the rarest answer given - which anyone can see once the day has closed.

Analytics

The site uses Google Analytics to count visits and see which pages are read: it sets cookies and sends page views, your rough location and device type to Google. It is not connected to your account or your digs. Block it with any content blocker and everything still works.

Deleting your data

Signed in, open your account and choose Delete account: your player, digs, achievements, medals, first finds, sign-in accounts and picture are removed at once. The anonymous daily totals keep the scores they already counted. Clearing your browser's storage removes the local copy.

Hosting

The site runs on Cloudflare, which processes requests to serve it.

Contact

Questions and requests can be sent through github.com/LeoWang1934/wormillion; questions and requests are welcome there.