Your time together. Your privacy.

Updated 21 October 2026. This page explains the current Duemello experience. Advertising networks and optional analytics are currently disabled. Optional digital offers use Stripe checkout only when a priced offer is available. Discovery and reading pages contain clearly labelled brand advertisements without tracking scripts. Advertisements are not placed inside active games or puzzle workspaces.

Who is responsible?

Duemello is operated by WeDigitlize Ltd, company number 17465598. Registered office: Crown House, North Circular Road, London, England, NW10 7PN.

Email info@wedigitliz.com for support, privacy requests and accessibility concerns. Include the activity name, browser and a description of the problem. Never send a private room invitation or payment-card details.

What stays on your device

Most activities work without an account. Player names, favourites, game progress, preferences and saved moments use browser storage on your device. Birthday invitations contain the recipient name, sender and card message in their URL, so share them only with the intended recipient. Birthday details are not added to the service worker's persistent cache.

The recent activities list shows up to four activities opened in the last 30 days. Their identifiers and last-opened times stay in browser storage until replaced or cleared. Clearing the recent list leaves game saves intact. This history is not sent to our servers.

On a shared device, someone with access to the same browser profile may see saved progress. Browser settings let you clear local site data. This also removes your local progress.

Your activity plan stores up to five activity identifiers locally. Weekly discovery records which activities you opened during the current local week. These records stay on this device. Calendar export is an explicit download; Duemello does not send reminders, emails or push notifications.

Private online rooms

Invitations allow one host and one guest to share gameplay, chat and connection signals. The service stores temporary room records with random identifiers, hashed invitation credentials, random browser client identifiers and the game messages needed for the shared experience. Room links act as access credentials: do not publish them. Your private return credential, player role, shared checkpoint and queued moves are saved in this browser profile and are valid only until the original room expiry, so reopening Duemello can restore your place before then. Expired local records are ignored; they may remain on the device until replaced, forgotten or removed through browser settings. One tab or app window at a time can use that saved activity-room identity. Leaving an activity room releases your place and pauses automatic return; use Return to your room to reconnect before expiry. Forget this room removes private return access from this browser. Ending the room for both people invalidates the invitation. Someone with access to the same browser profile can reopen a saved room, so use Leave and then Forget on shared devices. If browser storage or safe tab locking is unavailable, the room panel explains the return-access limitation.

Rooms stop accepting access 24 hours after creation. The host can end a room and delete its stored record earlier. A daily cleanup scheduled for 04:00 UTC removes expired room records and expired room-creation limits; records may remain until the next successful cleanup. Hosting logs and backup copies follow separate provider retention rules and are not erased immediately when a room ends.

Hosting, security and international processing

Netlify hosts the app and its room service. Technical request information, including IP address, browser information and requested URLs, may be processed to deliver the service, investigate errors and prevent abuse. Birthday details placed in a URL may therefore appear in hosting request logs; do not include sensitive information in invitations. The room-creation limiter uses a hashed network identifier rather than storing the raw address in its room-limit record.

Our current Netlify Pro monitoring provides a seven-day request-history window. This is not a promise that every provider security log or backup is deleted within seven days: those records follow Netlify’s applicable retention and deletion procedures. We use operational records for service delivery and security, not advertising profiles.

Netlify and its subprocessors may process data outside the UK, including in the United States. Its Data Processing Agreement forms part of its service terms and provides transfer safeguards, including the UK Extension to the EU–US Data Privacy Framework and contractual safeguards where applicable. Read Netlify’s privacy information or contact us to ask about safeguards.

Automatic appearance and optional music

The hosting service can supply an approximate country, city, time zone and coarse coordinates from a request to choose relevant calendar events and daylight appearance. This is an estimate, not precise GPS access. Your device time zone takes priority when the estimate conflicts with it. The estimate stays in the browser session for up to six hours, is not sent to your room partner and is not used for advertising or to infer your religion.

Background music is silent until you choose to enable it. Original instrumental audio is generated on your device; no music provider receives a request. The browser can remember your music preference and volume, but a later visit still waits for you to press Play. Music settings let you pause, mute or forget this permission. Audio pauses while the tab is hidden or movie/media playback is active.

The Duemello Daily newspaper

Newspaper progress is saved by edition in your browser. A newspaper table uses a separate saved browser record from the main activity room and shares puzzle entries with one invited companion. Newspaper invitations keep the private credential in the link fragment. Do not publish them. The same approximately 24-hour room expiry and host deletion controls apply. A recovery draft of the visible shared puzzle entries and unacknowledged edits stays in this browser profile, tied to its private invitation, client, edition and original expiry. Reopening the table can restore that work before expiry. Leaving the table, choosing to continue solo, ending the table or an expired session clears that shared draft. Browser settings can remove this data earlier; offline browsers cannot send shared edits until connected again.

The news briefing uses your approximate country and, when available, city to request relevant publisher headlines from our server. You can correct the country for this browser tab or explicitly choose national coverage. This correction stays in session storage until cleared or the tab is closed and does not change your website theme. News requests do not include player names, birthday details or room invitations. Headlines are not saved for offline display; the previous news cache is removed. Original publication dates and source links are shown. Automated topic and location filtering can miss context and does not independently verify every publisher claim.

News feeds are fetched server-side from the sources named in the briefing. Weather forecasts are fetched server-side from MET Norway and attributed under CC BY 4.0. Providers receive requests from our hosting service rather than direct browser requests for these feeds. Opening a source article follows an external link.

Weather initially shows the selected city, not an assumed personal location. Choosing Use my location asks your browser for permission. Coordinates are rounded to one decimal place before being sent for a forecast. Location-derived weather is not saved in browser storage or sent to your room companion. Coarse forecast requests are cached server-side and are not linked to a room. Browser-selected city preferences and recent city forecasts may be saved locally for convenience and offline use. Hosting logs may record technical request details.

White Room challenges

White Room saves the current board, move history and private attempt access in this tab’s session storage so a refresh can resume your game. Best move counts and the quiet-guide preference are stored on your device. Sharing a board includes only its room, rules version and board code. Optional server result verification stores the board code, attempt-token hash and an immutable result receipt for up to eight days; it does not request your name or email. The verification window is 24 hours. The four warm-ups are free and have no cash prizes. The separate Unsolved Room offers an ongoing free-entry cash bounty under its published rules. Its last tested edges and up to 12 experiments remain in your browser’s local storage until you clear the notebook or browser storage. Shared cuboid rooms store their current edges and up to 20 prior experiments under the same expiry rules. Cash accounts use a randomly generated private access key, with no email address or phone number required. Only a hash of the key is stored on our server. After sign-in, an essential secure cookie keeps the session active for up to 30 days; signing out revokes it, and signing in with the key revokes earlier sessions. Your saved key is the only recovery route. Cash entry receipts record an account-derived identifier, submitted edge lengths, calculation result, prize amount, rules version and time. The latest 20 receipts can be viewed after sign-in. Expired cash sessions are removed by a daily cleanup at 04:25 UTC. Accounts with no cash entries or live sessions are removed after 90 days without a sign-in. Unsuccessful submitted edge lengths are removed after one year; minimal receipts and account-count records remain for the ongoing competition to prevent duplicate increases and resolve claims. Candidate calculations, review decisions and payment references are retained with the competition records until six years after the prize is awarded, then removed by cleanup. Cleanup occurs on the next successful scheduled run; provider backups and security logs have separate retention. WeDigitlize handles winner eligibility and payment arrangements directly and requests only the evidence needed for those purposes. Access keys must never be sent to support. Identity documents and bank details are not collected through the game. Cash records are used to administer the competition and resolve claims; legally required payment records may also be retained. Contact info@wedigitliz.com about access, correction or deletion; records needed to honour or resolve a claim may need to be retained. No email address or phone number is needed for an ordinary web entry. Live White Rooms store the shared board, move history, revision, recent command identifiers and hashes of separate creator, co-op and watch credentials. Creation limits use a hashed network identifier. Invitation credentials travel in the URL fragment and are kept in this tab’s session storage; keep them private. A co-op link permits moves and undo; a watch link permits reading only. Shared rooms expire after 24 hours, and records are removed by the same cleanup after up to eight days. The creator can end access sooner. Leaving a room clears its saved access in that tab; a solo copy of the board may remain on your device.

Word Game discoveries

Unlisted letter combinations are saved on your device and sent to Duemello so they can be retained as player discoveries. Each record contains only the combination and its wheel letters, without your name, room invitation or a player identifier. These records are kept while the feature is available; they are not automatically treated as dictionary words or required puzzle answers. Level progress and petals remain in your browser and, when you play together, in your shared room. Unsent discoveries retry when your connection returns.

Video and media

External video sources are optional. Opening or embedding third-party media can disclose technical information to that provider under its own privacy terms. Direct video sources must permit browser playback; a pasted link is not a guarantee of support. When you choose a gallery video in a private room, Duemello temporarily uploads it so your invited participant can watch it. Standard transfers use private Netlify storage with a 100 MB limit. Where large-video storage is enabled, videos up to 10 GB use private Supabase Storage and resumable uploads; the current limit is shown in the movie room. Current room credentials are required to upload or request a playback link. Supabase playback links grant temporary access to the specific video and should be kept private. Choosing a replacement or ending the room requests deletion of its media. Room access and playback links expire no later than 24 hours after room creation. Hourly cleanup removes expired Supabase videos, including abandoned uploads; the daily room cleanup removes expired Netlify media. Copies can remain until a successful cleanup, and provider logs and backups follow separate retention rules. Supabase processes video data and technical request information to store and deliver the file; read Supabase’s privacy information. Videos selected outside a room remain on your device. Browser screen sharing sends the selected screen directly to your invited participant.

Cookies, ads and payments

The current app uses browser storage for requested functionality. It does not load advertising-network, Google Ads conversion-tracking or analytics scripts. Optional digital purchases are described below. Discovery and reading pages display clearly labelled links for WeDigitlize, our parent company. Advertisement images and logos are served by Duemello. Short decoration and advertisement entrances settle after a few seconds and respect your reduced-motion setting. Private room details are not added to these links. Visiting the advertiser opens that provider’s site and its own privacy terms apply. Before introducing optional tracking, we will describe the providers and purposes and provide the required consent choices. Word Game will remain ad-free.

Optional digital purchases

When an optional offer is enabled, Stripe hosts checkout and processes payment details under its privacy policy. Duemello does not store full payment-card numbers. Stripe records the product, price, order reference, payment status and the terms and digital-supply consent you accepted. A hash of your private access credential is stored with the payment record; the full credential is kept in the private return link and may be saved in browser storage. Do not share that link publicly.

Duemello checks the Stripe payment record before each download, including current refund and dispute status. We use this information to deliver the purchase, provide support, prevent misuse and meet accounting and other legal obligations. Payment records remain subject to applicable legal retention requirements and Stripe’s retention policies. Optional payment functions do not add analytics or advertising trackers to the website.

Your rights and choices

Where applicable, you can request access, correction, deletion, restriction, portability or object to processing. You can also withdraw any optional consent without affecting earlier processing. Service delivery relies on providing the experience you request; abuse prevention and reliability support legitimate interests. Any future optional advertising or analytics will require its own reviewed legal basis.

Contact the operator using the details above. You can also complain to the UK Information Commissioner's Office at ico.org.uk or your local supervisory authority. Family activities should be used with an appropriate adult; avoid entering children's personal information.

Game popularity

We count anonymous play sessions to help order the game list. Opening a card alone does not count. A random session token in your browser prevents repeated controls from counting as separate plays. The server keeps a hash of that token briefly to avoid duplicate counts, alongside aggregate totals for each game. Play counts do not include your name, room invitation, messages or IP address.