Legal

Privacy Policy

Last updated: May 22, 2026

The short version. Wash Day saves your game progress on your device. We use a small amount of analytics to understand which puzzles are too hard. We do not sell your data, we do not show personalised ads in the daily puzzle, and you can ask us to delete everything we hold about you at any time.

1. Who we are

Wash Day (“the game”, “we”, “us”) is operated by WHO DEVELOP LTD, a company registered in England and Wales under company number 09096989, with its registered office at 124 City Road, London EC1V 2NX, England, United Kingdom. You can reach us at hi@washday.game for any question about your data.

2. What we collect

We collect only what we need to run the game and improve it.

2.1 Stored on your device (localStorage)

Most of your game state lives on your device, not on our servers. This includes:

Campaign progress, stars earned per level, current level
Daily-puzzle streak and last solved date
Diamond balance and cosmetic items unlocked or equipped
Sound, haptics, and reminder preferences
Onboarding and first-run flags

These keys are prefixed wd_ and never leave your device unless you sign in to sync (see §2.3).

2.2 Analytics

We use PostHog for product analytics. PostHog receives anonymous events such as: which level you started, which you completed, swipe counts, and whether you used a hint. These events are tied to a random identifier we generate the first time you open the game — they are not linked to your name, email, or any external profile.

We use this data to figure out which puzzles are too hard, where players get stuck, and which features are worth keeping. We do not sell this data, we do not share it with advertisers, and we do not use it to build profiles about you outside the game.

2.3 Account sync (optional)

If you choose to sign in with Google or Apple from the game's home screen, we store a record on Supabase linking your identity provider's anonymous user ID to your campaign progress so you can play on another device. We store: the provider ID, your progress, your streak, and your cosmetic unlocks. We do not store your email, password, profile picture, or any other identifier beyond what's needed to recognise you on return.

You can play forever without signing in — sign-in is opt-in.

2.4 Daily-puzzle leaderboard

If you sign in and submit a daily-puzzle score, your move count and solve time are stored in our leaderboard table on Supabase. The leaderboard shows a Wordle-style spoiler-free ranking — your display name is taken from your identity provider, with an opt-out in Settings.

2.5 Crash reports

If the game crashes, we may collect a stack trace, the version of the game, and basic device information (browser, OS, viewport size) to help us fix the bug. We do not collect screenshots, the URL bar, or anything you typed.

2.6 Purchases

If you make an in-app purchase (e.g. one-time ad removal), the purchase is processed by the App Store, Google Play, or our web payment provider. We receive a receipt token to validate the purchase. We do not see or store your payment-card number.

3. How we use it

To run the game and remember your progress.
To rank you on the daily leaderboard if you sign in.
To debug crashes and fix puzzle-difficulty regressions.
To roughly understand how the game is used — what's popular, where retention drops off — and decide what to build next.

We do not sell your data to advertisers, share it with data brokers, or use it for profiling outside the game.

4. Cookies and similar technologies

The marketing site (washday.game) uses Google Fonts via Google's CDN. Google may set cookies for font loading; we don't. The game itself does not set cookies — all device-side state lives in localStorage.

Our analytics (PostHog) uses a single anonymous identifier stored locally; it is not a third-party cross-site tracking cookie.

5. Third-party services

We rely on the following processors. Each operates under its own privacy policy:

Supabase — account sync, daily leaderboard
PostHog — product analytics
Cloudflare Pages — static hosting + CDN
Google Fonts — webfont delivery on the marketing site
On Poki / CrazyGames / itch.io builds: the portal's own SDK may read your locale, viewport, and play time for the portal-specific features (ads, mute state). See the host portal's own policy.
App Store / Google Play for native installs and in-app purchases.

6. Where data is stored

Supabase data is stored in the EU region. Cloudflare and PostHog operate globally; data may be processed in the US or other regions as part of normal CDN / analytics operation.

7. How long we keep it

Device-only progress (localStorage): kept until you clear your browser data or uninstall the app. We can't see or delete this — it's yours.
Sync'd account data: kept while your account is active. We delete it within 30 days of an account-deletion request.
Analytics events: retained for up to 12 months, then aggregated and the raw events removed.
Crash reports: retained for up to 90 days.

8. Your rights

Under the GDPR (EU/UK), CCPA (California), and similar laws in other regions, you have the right to:

Ask what data we hold about you (right of access).
Correct anything that's wrong.
Have us delete your account and associated data.
Export your data in a portable format.
Object to or restrict certain processing.
Withdraw consent (e.g. opt out of analytics) at any time.
Lodge a complaint with your local data-protection authority.

Email hi@washday.game and we will reply within 30 days.

9. Children

Wash Day is suitable for all ages. We do not knowingly collect any personal information from children under 13 (or under 16 in the EU where applicable). If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it.

10. Changes to this policy

When we change this policy, we update the "Last updated" date at the top. For material changes, we'll surface a notice in the game on next launch and (for signed-in accounts) by email.

11. Contact

Questions, requests, or complaints? Email hi@washday.game.