three·words — Privacy Policy

Last updated: 29 September 2026

three·words (“the app”, “we”, “us”) lets people describe each other in three words. This policy explains what we collect, why, and your choices. Questions: admin@threewordsapp.com.

What we collect

• Account information — the email address and password you use to sign in. Passwords are stored only as salted hashes by our authentication provider; we never see your plaintext password.
• Profile — the display name you choose and a randomly generated invite code.
• Submissions — the three words you send to describe others, and the three words others send to describe you, plus a timestamp and (if you choose to be named rather than anonymous) your display name.
• Clouds you start — if you start a word cloud about a subject, we store its name, its link, the words you have hidden, and that your account started it. Your name and account are never shown on the cloud's page.
• Moderation records — if you report content or block a user, we store that action so we can act on it and prevent further contact.

We do not collect location, contacts, advertising identifiers, or usage analytics, and we do not use tracking technologies. (The public pages described in the next section keep a small amount of anonymous data; nothing there is linked to an app account.)

Public “describe” pages on our website

Pages under threewordsapp.com/describe/ let anyone add three anonymous words about a shared subject (for example, “Describe 2026 so far in three words”) and see the combined word cloud. No account is needed. For these pages we store: the three words you submit; a random token your browser keeps in local storage so you can add one set of words per subject and change it later; a salted, one-way hash of your IP address used only to limit abuse (it is not reversible to your address and is not used for anything else); and a plain count of taps on the app-store buttons, with no identifier attached. Only aggregated word counts are ever shown publicly. Words that are slurs are rejected automatically, and we remove cruel content by hand; to ask about a word, email admin@threewordsapp.com.

Pages under threewordsapp.com/c/ are word clouds started by people who use the app. They work the same way and store the same things. The person who started the cloud sees the same combined word counts you do, never who sent which words, and can hide words from it. If you use “Report this cloud”, we store the reason you give (if any), the random browser token and the hashed IP described above, so that one person cannot report the same cloud repeatedly.

How we use it

To operate the app: authenticate you, show your word cloud, deliver words you send, and keep the service safe (moderation). We do not sell your data or share it for advertising.

Where it's stored

Data is stored with our backend provider, Supabase, on secure cloud infrastructure. Access is restricted by row-level security so you can only read words addressed to you and your own profile.

Anonymity

When a sender chooses “stay anonymous,” their name is hidden from the recipient. The sender's account is still recorded internally so that reporting and blocking work; it is never shown to the recipient.

Your choices and rights

• Delete your account at any time in the app: Account → Delete my account. This permanently removes your profile and all words to and from you.
• Block any sender to stop them contacting you and hide their words.
• Report any words for review; we respond within 24 hours.
• Access or correction — email admin@threewordsapp.com.

Children

three·words is not directed to children under 13, and we do not knowingly collect data from them.

Changes

We may update this policy; material changes will be noted here with a new date.