Privacy & cookies

Twiggit is a daily guessing game operated by DealTree Ltd. You do not need to create a player account or sign in to play.

This notice explains what information Twiggit uses, what is stored on your device, and how optional analytics works.

Who we are

Twiggit is operated by DealTree Ltd, United Kingdom.

For privacy questions or requests, contact hello@twiggit.co.uk.

Your game and essential storage

Twiggit stores information in your browser so that the game works properly and remembers your progress.

This can include:

• your questions and guesses for the current game;
• hints you have used;
• how many questions you have used;
• whether you completed or solved the puzzle;
• your current and best streak; and
• your cookie preference.

This information is stored using browser local storage on the device and browser you are using.

Your game progress remains there until it is replaced by later game data, removed by Twiggit’s game logic, or cleared through your browser settings.

Clearing browser data may remove your saved progress and streak.

This storage is necessary to provide the game and is separate from optional analytics.

We may store your analytics-cookie choice for up to six months before asking you again.

Twiggit may use a randomly generated first-party identifier to keep your game completion and streak consistent across supported browser and installed-app contexts. This identifier is not linked to a player account and is not used for advertising.

Players do not need to create an account.

When you play

When you submit a question or guess, the text you enter is sent to our service so Twiggit can process it and referee the game.

Where required, that information may also be processed by AI and infrastructure providers used to operate Twiggit.

Please do not enter personal, confidential or sensitive information into the game.

We may also store limited gameplay information such as:

• puzzle number;
• whether the puzzle was solved or failed;
• number of questions used;
• number of hints used;
• completion information;
• whether a game was started but not finished; and
• whether a result was shared.
• whether an anonymous challenge link was created, opened or led to a game start or completion.

We use this information to calculate aggregate game statistics, measure how difficult each puzzle turned out to be, understand whether shared challenges lead to play, operate Twiggit and improve future puzzles. We do not store the text of your questions or guesses, and we do not build profiles of players.

Challenge links use a random, unguessable token and contain no answer, question, guess, name or contact information. A challenge applies only to its daily puzzle, expires when that day ends, and is deleted after a limited retention period. Anonymous viral-loop events are rate-limited and retained only as long as reasonably needed for aggregate measurement.

Twiggit does not require this information to be linked to a named player account.

Our hosting, backend, AI and security providers may also process technical request information, such as IP addresses and device or connection information, where this is necessary to deliver and protect the service.

Optional Founding 100

Ordinary Twiggit remains accountless. Founding 100 is an optional permanent launch cohort. Claiming a place requires a passkey, without email, username or password. Founders also receive a backup recovery code.

We store the passkey’s public credential information required for authentication. Twiggit never receives facial scans, fingerprints or biometric templates: biometric or device authentication happens entirely on your device or platform. Passkey availability across devices depends on your provider.

Recovery codes are stored only as secure hashes, not plaintext. A used recovery code is invalidated. Passkeys and recovery credentials are used only for Founder identity, restoration and profile management. Essential, secure cookies recognise your Founder status and short-lived management permission.

Founders may intentionally publish one optional social handle. These links are self-declared, not verified. Private Founders appear anonymously. The public cohort includes only the chosen social identity, first completed Twiggit number and spoiler-safe first result, never answers, current streaks or recent activity.

We keep minimal Founder claim and profile-change records, and use existing anonymous gameplay and share records for aggregate Founder reporting. No fingerprinting or IP-based identity recovery is used. Restoring Founder status does not replace this browser’s existing game or streak.

Optional Google Analytics

If you choose to allow analytics, Twiggit uses Google Analytics 4 to understand how people find and use the site.

Our Google Analytics measurement ID is:

G-PFGSPXBQV9

Google Analytics may receive information including:

• pages visited;
• referral and traffic-source information;
• device and browser information;
• approximate location;
• session and usage information; and
• interactions with Twiggit.

Game-related analytics events may include things such as:

• starting a game;
• completing or failing a game;
• number of questions used;
• hint usage; and
• sharing a result.

We do not intentionally send your question text, guesses, email address or other contact information to Google Analytics.

Google Analytics uses pseudonymous identifiers and first-party cookies to distinguish browsers and sessions. These may include:

• _ga
• _ga_PFGSPXBQV9

Google Analytics cookies may remain on your device for up to 2 years, although browser restrictions or your own settings may shorten this period.

Google may process technical connection information, including IP addresses, when Analytics requests are received. Google states that GA4 does not log or store individual IP addresses in Analytics reporting.

We use Google Analytics to measure and improve Twiggit.

We do not currently use Google Signals or Twiggit’s Analytics data for personalised advertising.

Google Analytics is only enabled after you choose to accept analytics.

Google Analytics data retention

Our current Google Analytics retention settings are:

• Event data: 2 months
• User data: 14 months

The user-data retention period may reset when new user activity is recorded.

These retention settings do not affect most standard aggregated Google Analytics reports.

Your cookie choices

Optional analytics is off unless you accept it.

Accepting or rejecting analytics does not affect your ability to play Twiggit.

You can change or withdraw your choice at any time using Cookie settings on the site.

If you reject analytics, Google Analytics will not be loaded.

If you previously accepted analytics and later withdraw consent, Twiggit will stop loading Google Analytics and will remove Analytics cookies that it can access from this site where possible.

Withdrawing consent does not remove information that may already have been received and processed by Google.

Cookie settings

Essential storage

Twiggit also uses browser storage that does not require optional analytics consent because it is needed to provide features you request, such as:

• remembering today’s game;
• restoring progress after a refresh;
• maintaining your streak; and
• remembering your cookie choice.

This essential storage is not used for advertising.

Google Search Console

We use Google Search Console to understand how Twiggit appears in Google Search.

This can include information such as:

• search queries;
• impressions;
• clicks;
• average search position; and
• indexing or technical-search issues.

Google Search Console is separate from Google Analytics and does not itself install visitor-tracking cookies on Twiggit.

Why we use this information

We use essential game and technical information to:

• provide the Twiggit game;
• remember your game progress;
• calculate game results and aggregate statistics;
• maintain and secure the service; and
• diagnose technical problems.

Where processing is necessary to provide the game you request, we use that information for the operation of the service.

Where optional Google Analytics is used, we rely on your consent. You can withdraw that consent at any time.

We may also process limited technical information where necessary for the legitimate operation, security and protection of Twiggit.

Service providers and sharing

We use third-party service providers to operate Twiggit, including providers involved in:

• hosting and infrastructure;
• database and backend services;
• AI processing;
• analytics; and
• search reporting.

These providers may process information on our behalf where necessary to provide their services.

We do not sell your personal information.

We do not currently use Twiggit gameplay data to create advertising profiles or for personalised advertising.

International transfers

Some of our service providers may process information outside the United Kingdom.

Where UK data-protection law requires safeguards for international transfers, we rely on the safeguards made available by the relevant service provider or otherwise required by law.

How long information is kept

Game progress stored in your browser remains there until it is replaced, removed through the game’s normal operation, or cleared by you.

Your cookie preference may be stored for up to six months before Twiggit asks you again.

Aggregate gameplay information is retained for as long as reasonably necessary to operate, analyse and improve Twiggit.

Google Analytics event data is retained for 2 months and user data for 14 months, subject to the settings described above.

Google Analytics cookies may remain on your device for up to 2 years, subject to browser restrictions and your cookie choices.

Google

Google provides more information about how it handles information through its services:

• Google Privacy Policy
• How Google uses information from sites and apps that use its services

Your rights

Under UK data-protection law, depending on the circumstances, you may have rights in relation to personal information we hold about you. These can include rights to:

• access your personal information;
• correct inaccurate information;
• request deletion;
• restrict certain processing;
• object to certain processing; and
• withdraw consent where processing relies on consent.

Because Twiggit does not require a player account and much of its gameplay information is anonymous or pseudonymous, we may not always be able to identify particular information as belonging to you.

For privacy questions or requests, contact:

hello@twiggit.co.uk

You can also raise a concern with the Information Commissioner’s Office (ICO).