Privacy

Last updated November 10, 2026

Kept on your phone

Your settings, your player (name and avatar), the rounds you played, your starred boards and a random device id are saved in your browser. Settings, Your data, Clear my data on this device erases them and turns off alerts on that phone (if you are signed in, it signs that phone out first; your account stays). Clearing the site's data in your browser deletes them too.

Settings, Your data, Download my data saves one file with everything Swoop keeps on your phone and, if you are signed in, everything the server keeps for your account. The file never includes your sign-in token or your phone's push address.

Sent to the server when you play with others

• Groups and Duels: your device id, name, avatar, the words you found and your score. Anyone with the game's link sees the standings and, once they have played, every player's words. Link previews (in Messages, Discord and similar apps) show names, avatars and scores, never the board.
• Today's board: the same, plus a share id for your result. Friends see your daily score only after their own round.
• Solo rounds stay on your phone (a signed-in backup, below, copies them to your account). The game sends one small count when any round ends (the day and the kind of round, nothing else), so we know how many rounds are played. Only daily totals are kept.

If you sign in (optional)

• Your username, and a scrambled form of your password: the password itself never leaves your phone, and what is stored cannot be turned back into it.
• A backup of your rounds, starred boards and player, so they follow you to another phone. The achievements those rounds earned are worked out from it and kept with your account.
• Your friends and friend requests, and any friend groups and challenges from before October 10, 2026, when friend groups were retired. Only you see your groups.
• If you make a recovery code, only a scrambled form of it is stored.
• Delete your account any time in Swoop: Settings, Account, Delete account. If you signed in more than 10 minutes ago, your password (or your recovery code) confirms it is you. Then you see what is deleted and what is kept, can download your data, and type DELETE to confirm.
• Your account locks at once: every phone signs out and your friends stop seeing you. For 7 days you can change your mind: sign in and tap Cancel deletion. During those days your username stays taken.
• After 7 days it is deleted for good: your username, password, backup, friends and friend requests, friend code, friend groups, challenges, recovery code, sign-ins, achievements, any scores kept for the leaderboards Swoop had briefly in November 2026, and the alerts tied to your account. Scores you already posted stay in other people's standings and on daily boards, shown as "Player" with no avatar. Rounds on your phone stay on your phone.
• A short record that a deletion was asked for, canceled or done (when, and how it was confirmed) is kept. It has no username, device id or network address, nothing that points to you.

If you turn on alerts (optional)

• Swoop only asks after you send a duel, and only where alerts can work (on iPhone, the Home Screen app). Your phone's push address (from Apple, Google or Mozilla), its device id, your account if you are signed in, the alerts you picked and your time zone are stored.
• The messages are encrypted for your phone and sent through your phone's push service: when someone plays a duel you sent or beats your score, and a daily reminder only if you turn it on.
• Turn them off in Settings, Alerts (or in your phone's settings). A push address unused for 120 days is deleted.

Keeping things fair and safe

• Your network address, your device id and, if you sign in, your account are used to limit how many requests one phone, one account or one network can make a minute. After a failed sign in your network address is kept with a count of failures until that day's cleanup.
• To keep today's board to one try per person, a scrambled mix of the day, your network and your name is kept for 3 days.
• Names go through a filter, so an offensive name shows as "Player".

How long things stay

• A group nobody else played is deleted after 90 days without activity. A game other people played stays.
• Link preview pictures are deleted after 30 days (they are redrawn if needed). Sign-in sessions end after 180 days unused.
• An account you delete stays locked for 7 days, so you can change your mind, then it is deleted in that night's cleanup.
• Daily totals of rounds played are kept; the per-device marks behind them are deleted after 3 days.

Hosting

Swoop runs on Cloudflare (servers in the United States and worldwide). Cloudflare Web Analytics is on for this site: it counts page visits without cookies and without identifying you.

Questions or deleting your data

Delete your account in the app (Settings, Account), and download or clear your data in Settings, Your data. For anything else, email xcoopofficial@gmail.com; to delete your games, include the game's code.

Words: ENABLE + SCOWL · Meanings: WordNet