← Back to Inboxed
1. Introduction
Inboxed ("we", "our", or "us") provides a daily word puzzle game played directly inside email or on the web at inboxed.fun.
We respect your privacy. We do not sell your personal data, we do not run third-party advertising tracking scripts, and we collect only the minimal information needed to deliver the daily puzzle and operate leaderboards.
2. Information We Collect
- Email Address: Collected when you sign up to receive daily puzzle emails, confirmation messages, and account preferences.
- Gameplay Data: When you play, we record basic game statistics such as puzzle date, guesses count, hints used, score, and completion status.
- Organization / Domain: Extracted from your email domain (e.g.
company.com from user@company.com) to group coworker leaderboards.
- Preferences: Your subscription status and your leaderboard privacy choice (whether your name is displayed or masked as "Anonymous Player").
- Technical Logs: Standard HTTP request logs (IP address, user agent, timestamp) temporarily processed by our infrastructure provider (Cloudflare) for security, rate-limiting, and abuse prevention.
3. How We Use Your Information
- To deliver daily puzzle emails to confirmed subscribers at 9:00 AM PST.
- To verify subscriptions through double opt-in confirmation emails.
- To maintain workplace and global leaderboards.
- To provide passwordless self-service preference management (updating preferences, pausing, or unsubscribing).
We never sell, rent, or trade your personal information to third-party data brokers or marketing agencies.
4. Email & Anti-Spam Policy
- Daily Frequency: Confirmed subscribers receive at most one puzzle email per day.
- Double Opt-In: Subscriptions must be verified via confirmation link before daily emails begin.
- One-Click Unsubscribe: Every email includes an unsubscribe header (
List-Unsubscribe) and a direct unsubscribe link in the footer. You can unsubscribe instantly at any time.
5. Third-Party Service Providers
We work with trusted infrastructure providers to deliver Inboxed:
- Cloudflare: Hosts our web application (Cloudflare Workers) and encrypted edge database (Cloudflare KV).
- Mailgun: Delivers transactional confirmation and daily puzzle emails via secure SMTP.
6. Security
We protect your data using industry-standard security measures:
- Cryptographic Tokens: Account preferences and confirmation links use HMAC-SHA256 tokens, eliminating the need to store passwords.
- Encrypted Transport: All web and email communications are transmitted over secure HTTPS / TLS connections.
7. Your Choices and Data Rights
- Leaderboard Anonymity: You can toggle your display name to "Anonymous Player" at any time in your account settings.
- Unsubscribe: You can cancel your subscription at any time with one click.
- Data Deletion: You can request full deletion of your email address and gameplay history by contacting us at game@inboxed.fun.
8. Contact Us
If you have questions about this Privacy Policy or your data, please contact us: