Privacy
Alphabeter keeps only what it needs to run the game. This page lists all of it: what we store, why, who else handles it, and for how long.
What we store
- Your account: your email address and your password. The password is stored only as a one-way hash, which can't be turned back into the password. We also note when you signed up and when you confirmed your email.
- Your kids: the name you give each kid, and their game: every answer (which letter or digit, whether it was right, and when) and the scores worked out from those answers. Kids have no accounts or email addresses of their own, and a nickname works just as well as a real name.
- Signing in: the cookies below. Our servers keep only scrambled (hashed) copies of your sign-in tokens.
- Protection from abuse: your IP address and the email address you typed, for up to an hour, to limit how often someone can try passwords or ask for emails.
That's all. Alphabeter has no ads, no analytics, no tracking and no third-party scripts, and we never sell your data.
Why
Only to run Alphabeter: to log you in, to pick the next letter and show you your kids' progress, to send the emails you ask for (confirming your address, resetting your password), and to protect accounts from password guessing.
Who else handles it
- Railway runs the app and its database.
- Cloudflare delivers the site to your browser, protects it from attacks, and stores our database backups.
- Resend sends our emails, so it sees your email address and the emails we send you.
Your data is stored in the United States. While it is there, it is subject to US law and may be accessible to US courts, law enforcement and national security authorities.
How long we keep it
- Your account, your kids and their answers stay until you delete them. Deleting a kid deletes their answers; deleting your account deletes everything.
- The database is backed up daily, and backups are kept for 30 days, so anything you delete is gone from the backups within 30 days.
- Links in our emails stop working within a day.
Cookies
Alphabeter uses cookies only to log you in. None of them track you.
| Cookie | What it does | How long |
|---|---|---|
| at | Shows you're logged in | 15 minutes, renewed automatically |
| rt | Renews the at cookie | 30 days after your last visit |
| oauth_tx | Protects the login itself | 10 minutes |
Your choices
- Your kids and their progress are always on your kids page.
- Delete a kid, with all their answers, from the kids page.
- Delete your account, with all your kids, from the kids page (Delete account). It takes effect right away and can't be undone.
- For a copy of everything we have about you, a correction, or any question about your data, email [email protected].
Last updated September 29, 2026.