Four Words privacy
Effective September 7, 2026
Four Words is a public wordboard operated by Jordan at Forage. This notice explains this app's data practices. Contact aviq777@gmail.com with privacy questions or requests.
What goes on the public board
When you submit, we store your four words, any public name or social link you choose to enter, and the submission time. Approved submissions appear in the recent feed and contribute to the word rankings and total. Anyone can view or copy public posts, so only submit information you intend to share.
Optional Google sign-in
You can use the board without signing in. If you choose Google sign-in, Google and our authentication provider, Auth0, process your sign-in. Auth0 and the app receive an account identifier and basic profile information, such as your name and profile picture, and may receive your email address if supplied by the provider. We use that information to authenticate your session and support your account. Four Words does not receive your Google password or request access to Gmail, Drive, Calendar or other Google content.
Signing in does not automatically publish your Google profile. Only the public name and link you enter in the submission form are displayed. If you explicitly choose to post with your account, we store a private coded account identifier alongside that submission. Choosing to post without an account omits that account link.
We do not sell Google sign-in data, use it for advertising, or use it to train AI models. We share it only as needed with the authentication and hosting services that operate your sign-in, or when legally required.
Security and browser storage
To limit abusive submissions, the app processes your IP address and stores a private, keyed fingerprint instead of the raw IP address in the submissions table. Our hosting and authentication providers may also process IP addresses, browser information and access logs to deliver and protect their services. Posting without an account does not prevent this security processing.
Sign-in uses encrypted session cookies that expire after 24 hours. Signing out clears this app's session; it does not sign you out of Google. Your browser tab may temporarily hold your unfinished form while you sign in. Auth0 and Google also manage cookies for their own authentication services.
Services that help run the app
Vercel hosts the site, Supabase stores submissions, and Auth0 handles optional authentication with Google. The music player and external links use services including Spotify, Apple Music, YouTube and Amazon Music. Loading an embedded player or following a link can share browser and network information with that provider under its own privacy policy.
See Google's privacy policy and Auth0/Okta's privacy policy for their authentication practices.
Keeping and removing information
We retain submissions to operate the board, and account and security records as needed to provide sign-in, prevent abuse and handle requests. A removed post is no longer displayed, although a private moderation record or backup may remain where needed for security, recovery or legal obligations.
To request access, correction, removal of a post or deletion of account-related data, email aviq777@gmail.com with enough information to identify the record. We may need to verify that it belongs to you. Do not email passwords or authentication secrets. Removing a post here cannot remove copies made by other people.
You can also revoke this app's Google access through Google Account connections. Revoking access does not itself remove an earlier public submission; contact us for that request.
Changes
We will update this notice and its effective date when the app's data practices change. The song-generation studio and payments are currently unavailable.