Our operator and contact
SpellingBeeAnswers.app is operated by Dunedin Studio in Scotland, UK. For questions or privacy requests, email thedunedinstudio@gmail.com or visit Contact Us. This policy describes the application’s data handling; it is not a certification of legal compliance.
Your puzzle stays in your browser
Letters, the center letter, rules, result words and result-search text are processed in browser memory by a worker. They are not sent to our Hive API, Google Analytics, a remote solving service or an error-reporting service. They are not added to application URLs or persistent puzzle history.
The worker downloads the selected, verified dictionary files from this site. Downloads do not contain your puzzle letters. Application and dictionary resources may be cached by your browser. There is no account or server-side puzzle history.
Preferences and browser storage
We remember your selected dictionary using spellingbeeanswers.dictionary.v1 in local storage. All Dictionaries is the initial default, shared across all three modes. This preference has no automatic expiry; you can clear this site’s stored data in your browser.
Your analytics and Hive choices are stored separately under spellingbeeanswers.privacy.v1, with a version and choice date. They expire after 180 days. Both optional choices start off. Use to change them. If storage is unavailable, choices work for the current page session.
Optional Google Analytics
Analytics is configured in this environment, but runs only after you accept it. We use basic Consent Mode v2: no Google tag or analytics request is loaded before analytics consent. Advertising storage, advertising user data and advertising personalization remain denied.
With consent, Google receives page views for our four public pages and limited actions: starting or completing a solve (with an action label for hint requests), selecting a mode or dictionary, using the pangram filter, and a broad solve-error category. We do not add puzzle content, result lists, contact details, arbitrary URL parameters or custom user identifiers. Google may process technical information such as your IP address, browser, device details and its own analytics identifiers to provide the service.
Analytics cookies beginning _ga can last up to 180 days without renewal by this application. Withdrawal removes the active analytics document, stops future analytics collection and removes accessible analytics cookies for this site. It does not erase information already received by Google.
The production property is configured with two-month event and user data retention, without resetting retention on new activity. These controls do not govern most aggregated reports. Enhanced Measurement and Google Signals are off. Preview testing uses a separate property. See Google’s Privacy Policy for its processing and retention arrangements.
Optional Global Honeybee Hive counting
The Hive counter is connected in this environment. You can separately enable participation in Privacy settings. Rejecting analytics does not enable Hive participation, and rejecting either option does not prevent solving.
The metric counts recorded successful solver searches, including repeats and zero-match searches—not unique puzzles or game wins. A successful intentional submission sends a new random event code and completion time to our server. Hint requests also send an action label so we can count them separately. Retrying delivery uses the same code to prevent duplicate counting. The server stores separate answer and hint totals in Upstash Redis. Letters, words, mode, dictionary choice and Google Analytics identifiers are excluded from Hive events.
Event codes expire after ten minutes. For abuse protection, the server uses the request address to derive a secret-hashed bucket that changes every minute. Raw addresses are not stored in Redis. Rate buckets expire within a minute after their latest accepted update; the aggregate count and its latest update time persist. These short-lived records can still be pseudonymous information. Turning participation off stops future reports; it does not subtract previously recorded counts. A counter outage never prevents solving.
Hosting and service providers
We use Vercel for hosting, Google for consented analytics and Upstash Redis for the optional Hive. Loading the site necessarily exposes network and request information to the hosting provider, including IP address, request time, requested URL and technical headers. Such information can be personal data.
The application’s functions and Redis primary region are configured in London. Provider networks and other processing may operate internationally; we do not claim all processing stays in the UK. This application does not create its own persistent request log. Providers operate their own service, security and billing records under their arrangements; see the Vercel Privacy Notice and Upstash Privacy Policy. Fonts and illustrations are served by this site. There are no ads, accounts, contact forms or remote puzzle-solving services.
Email correspondence
If you email thedunedinstudio@gmail.com, the operator and email providers process your address, message, attachments and technical email metadata to respond. The mailbox uses Gmail. Selecting the contact link opens your email application; it does not itself send a message or confirm delivery.
The operator keeps correspondence while needed to answer an inquiry and handle related follow-up, then reviews and deletes it when no longer needed. Some records may be retained where needed for legal obligations, security or a dispute. No automatic fixed deletion period is promised. You can request deletion, subject to any applicable retention obligation. Please avoid sensitive information and unnecessary attachments. No guaranteed response time is promised.
Your choices and rights
You may withdraw optional consent through Privacy settings at any time. Where applicable, you may request access, correction, deletion, restriction, portability or object to processing by contacting thedunedinstudio@gmail.com. The appropriate response depends on the information actually held and applicable law. The operator may need proportionate information to identify relevant correspondence.
For UK data-protection concerns, you can also contact the Information Commissioner’s Office. Consent is used for optional analytics and Hive participation. Essential hosting and security support operating and protecting the service; correspondence is processed to answer and manage the inquiry. Applicable legal obligations may also require retaining particular records.
Children and security
The tool has no accounts or child profiles and does not ask for a name, age or school. Children should avoid sending personal information and ask a parent, guardian or teacher for help when needed. Optional collection starts off. The owner is responsible for assessing the intended audience and applicable children’s privacy requirements.
Server credentials are kept out of browser code. Puzzle processing stays local, dictionary integrity is checked, and the Hive API validates requests and limits abuse. No system can guarantee absolute security.
Policy updates
Material changes to collection will be explained before they take effect and consent obtained where required. The updated date appears above. Contact thedunedinstudio@gmail.com with questions.