Privacy
Last updated 25 October 2026.
In short
The word game sets no cookies, needs no account and uses no advertising cookies. Your streaks, statistics and settings are stored only in your own browser, on your device.
Who is responsible
SZ9 AB (Swedish company reg. no. 559559-3236, registered office Västerås, Sweden) runs Wordhook, Gancho and Ordkroken. Contact: contact@sz9sales.com.
The guessing game
SZ9 AB also runs the guessing game What am I thinking of? An AI answers the questions players type there, so it has its own privacy policy.
What is stored on your device
The game uses your browser's local storage for progress, streaks, medals, theme and sound. None of it is sent to us. You delete it by clearing this site's data in your browser.
What reaches our servers
When the page loads, our hosting provider Cloudflare processes technical data such as your IP address and browser type to deliver the page and protect it from attacks. We do not build player profiles.
Plus
If you buy Plus, payment is handled by Stripe. We only store a signed receipt in your browser and ask Stripe whether the subscription is active. Stripe's own privacy policy applies to the payment.
The game on a newspaper's site
When the game is embedded by a newspaper, the newspaper's terms apply to the rest of its page. The game itself sets no cookies there either.
Your rights
Contact us at any time about personal data. You can also complain to the Swedish Authority for Privacy Protection (IMY) or your local data protection authority.
Optional play statistics
On a licensed website you can allow counts of play visits, finished games and active play time. Your choice applies to the open page and can be changed under Play statistics; declining does not affect play. We rely on your consent for this measurement. Reports contain no answers, names, email addresses or player profiles. A random code for one play visit prevents double counting and is removed after at most three hours, with some technical delay. Daily totals by game and publisher are kept for at most 14 months and shown to the publisher. Previous aggregates cannot be linked to you. No analytics cookies or persistent identifiers are used.
Publisher accounts
For publisher purchases we process your work email, company and billing details, tax registration and business-use declarations, country-level location checks and public business-register checks, publication settings, order history and acceptance of the licence terms. We use these to provide and administer your contract, meet accounting obligations and protect the service against misuse. Business contact and security processing also serves our legitimate interests in operating a secure service.
Sign-in and storage
Publisher sign-in uses a necessary session cookie lasting up to 30 days. One-time email codes expire after 15 minutes. An unfinished order may be kept in your browser session so you can return from checkout. We do not use advertising cookies.
Service providers and retention
Our hosting, payment and email providers process the data needed to deliver these services. We do not receive full card details. Account data is kept while needed for the service; order recovery records expire after 400 days and accounting records are kept for the legally required period. Where processing takes place outside the EU/EEA, we use applicable adequacy decisions or contractual safeguards. Contact us for details.
Your data rights
Where applicable, you may request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests. Contact contact@sz9sales.com. Required billing and contact details are necessary to provide a publisher licence. We do not make automated decisions with legal or similarly significant effects.