one · at · a · time
Last updated: August 13, 2026

Privacy Policy

The short version

one · at · a · time collects nothing about you. There are no accounts, no advertising, no analytics, and no tracking of any kind. Nothing you do in the game is sent anywhere.

The browser game

The game at squaresga.me/oneatatime/play.html runs entirely in your browser. Your settings — show par, filter letters, perfect 4s only, par 7+ only — are kept in your browser's local storage on your own device so the game remembers them next time. Clearing your browser data removes them.

The puzzle itself is generated on your device from a word list that ships with the page. No puzzle you play, and no solution you find, leaves your browser.

Requests the page makes

Loading the game requests two typefaces, Merriweather and Rubik, from Google Fonts. Google receives the ordinary information any web request carries — including your IP address — and its handling of that is governed by Google's privacy policy. Everything else the page needs is served from this site.

Sharing a puzzle

Sharing your result hands your device's own share sheet a line of text and a link. That link encodes only the two words of the puzzle — for example ?given=warm&target=cold — so whoever opens it gets the same puzzle. It carries nothing about you, and no copy of it is kept here.

Hosting

This site is served by GitHub Pages. Like any web host, GitHub receives the requests your browser makes for these pages; see the GitHub privacy statement. No logs or analytics are collected on top of that.

The iOS app

The iOS app stores your games, statistics, streak and preferences on your device, and nothing you do in it is sent anywhere.

The app makes one kind of network request: once per launch it checks this site for a fresher copy of its word list — the plain, public file at squaresga.me/oneatatime/wordlist.json — so the dictionary can improve without waiting for an app update. That request carries no account, no identifier, and nothing about you or your play; like any web request it necessarily includes your IP address, which is seen by the site's host (see Hosting) and used only to answer the request. If you're offline, or the check fails for any reason, the app simply plays on with the word list it already has. Nothing else is ever fetched, and nothing is ever uploaded.

Children's privacy

No personal information is collected from anyone, including children under 13.

Changes to this policy

If this policy changes, the updated version will be posted here with a new date.

Questions

Email squares@nickpyati.com.