Privacy Policy

Effective date: 12 September 2026 · Last updated: 16 September 2026

This policy explains what the Spellnest game and website (“Spellnest”, the “Service”) do with information, and what they do not. The Service is operated by Aevest Studio, an independent developer based in Malaysia (“we”, “us”). Contact: hello@aevest.net.

This policy is written from the way the Service is actually built. There is no account system, no advertising, no purchases, no analytics or tracking software, and no third-party data brokers. It is short because there is little to disclose.

1. Information kept on your device

Spellnest uses your browser’s local storage to keep:

• your progress, for example levels cleared, chapters finished, the days you have played and your streak, your word bank, your clues and letters, a puzzle you left unfinished, and the money words you have collected with the date each one is next due for review;
• your settings: sound, music, vibration, theme, text size, and whether results sharing is on;
• small conveniences, such as which tips and menu notes you have already seen, and which cards you have already looked at;
• a random device token: a new one is made each day on your device, and it is used only to stop the same device counting twice on the shared board that day. Changing it daily reduces linking between days, but does not guarantee anonymity.

None of this is sent to us except the daily token, which goes only with the records in section 2. Start over in Options deletes your progress and that token; your settings stay. Clearing the site’s data in your browser or device settings deletes everything permanently, and it cannot be recovered.

2. Information sent to us: the shared board

Spellnest has one online game feature, the shared board. It is controlled by Share anonymous results in Options. The switch is on when you first play, and you can turn it off at any time. While it is off the game makes no board requests: no results, and not even a request for the week’s community total, which simply stops being shown. Loading the website still sends ordinary requests to our hosting provider.

While it is on, two small records may be sent:

• when you finish a daily puzzle: the day’s device token, the date, how long the puzzle took, and how many words it contained. Our server keeps only which of ten time ranges your time falls in, never the exact time;
• at most once a day, after you finish any puzzle: the day’s device token, the date, and how many money words you found, which is added to a community total shown on the menu.

We use these for one purpose: to tell you roughly where your daily time sits among everyone who played that day, and to run the weekly community goal. There is no name attached, nothing is shown to other players that could identify you, and the records expire automatically.

When a record is sent, your IP address is stored for about an hour, on its own, as the name of a counter that limits how many requests one address may make. It is not written into a result record or displayed to other players, and the counter expires automatically. Our hosting provider also processes ordinary request information such as IP address, browser type and time of request to deliver and protect the Service. Hosting logs are separate from the board records and their expiry periods below.

3. What we never do

• We do not sell or rent information to anyone.
• We do not show advertisements and we embed no advertising or analytics software.
• We do not build profiles of players and we run no cross-site tracking.
• We do not ask for an account, a login, an email address or a payment method.

4. Service providers

Spellnest is hosted on Cloudflare, which serves the game files and runs the small board service described in section 2. Cloudflare processes requests as our hosting provider. The fonts and artwork are self-hosted, and the game does not load third-party advertising or analytics services. See Cloudflare’s privacy policy for its processing practices.

5. Children

Spellnest is made for teenagers and adults and is not directed to children under 13. It does not ask for a name, contact details or an account. Technical information is processed as described above. If you believe a child has provided personal information, please contact us so we can investigate and take appropriate action, including deletion where we can identify the information.

6. Your choices and your rights

• Stop board requests: turn off Share anonymous results in Options. It takes effect immediately. Website hosting requests still occur.
• Delete your progress: use Start over in Options, which also throws away the day’s device token. To delete everything, settings included, clear the site’s data in your browser settings.
• Delete what the board holds: the records carry no name, account or contact details, and their token changes every day. This limits our ability to locate an individual’s records; it is not a guarantee of anonymity. Contact us about deletion and we will help where we can identify the records. Turning off Share anonymous results stops further board requests, and board records expire on the timetable in section 8.

Depending on where you live, you may have rights to access, correct, delete or restrict the processing of personal information, and to complain to a data protection authority. Write to us and we will help.

7. Where information is processed

Our host runs a global network, so a request may be handled by a server in a country other than yours. The board records described in section 2 carry no name and no contact details.

8. How long we keep things

Device storage stays until you clear it. The board stores the following records with automatic expiry:

• records filed under a day’s device token: 3 days;
• the daily chart of how long puzzles took, which holds counts only: 7 days;
• the weekly community total and its target, which hold counts only: about 60 days after the week’s last update;
• the request counter named after an IP address: about an hour after your last request.

9. Changes

If this policy changes, the date at the top changes with it, and the current version always lives at this address. Meaningful changes will also be mentioned in the game.

10. Contact

Aevest Studio, hello@aevest.net. We answer questions about this policy from real people, not a form.