Last updated: October 28, 2026.
Your game stays in your browser
Wonderhop saves your nickname, scores, settings, unfinished game and which questions you have seen in this browser’s local storage. Clearing your browser data removes those records. These game records are not uploaded to a global leaderboard or synced between devices. When a new round is requested, Wonderhop receives the IDs and last-seen times of questions already played to avoid repeats; this selection history is not stored as a player profile on the server.
Your account and payments
When you sign in, we store your email address, a hashed session token and account timestamps. Sign-in links expire after 15 minutes and can be used once. Sessions last up to 30 days; signing out removes the current server session. Transactional sign-in messages are separate from optional daily reminders.
Stripe handles your payment details. We store Stripe customer, checkout, subscription and payment references, your plan, amounts, billing state and paid access periods. We do not receive or store full card numbers. Payment records may be retained for accounting, fraud prevention and dispute handling. Cloudflare hosts our account database and email service. Application logs avoid email addresses, session tokens and secret keys.
Optional daily reminders
When you request a reminder, we store your email address, confirmation and unsubscribe state, consent version, and the time of your request. Reminders begin only after you confirm your email. We send one reminder per UTC day, starting the day after confirmation. These emails are for the game you subscribed to; we do not sell your email address or send unrelated marketing.
Cloudflare processes the subscription data and sends the emails. We store delivery status and retry information for up to 30 days. A hashed, rotating request identifier helps limit abuse; our application does not store your raw IP address in the subscription database.
Unsubscribe and retention
Every email includes an unsubscribe link. Open it and select Unsubscribe, or use your mail app’s unsubscribe action. This stops queued future reminders; a message already being sent may still arrive. To restart reminders, subscribe and confirm again.
Unconfirmed requests are removed within about eight days. Unsubscribed records are removed after 30 days. Suppression records may be retained to prevent repeated sends to an address that cannot receive email. Old delivery records are removed after 30 days.
Questions and data requests
Email support@wonderhop.org for help with reminders or a data request. Avoid sending passwords or payment details.