Privacy Policy · Effective 28 September 2026
What we collect, and what we don’t.
This policy covers Superb’s products: Superb Lens (the reader, library and reference), WYM?!, the Superb API and SDK, LITERATE, and this website. Products still in development follow this policy when they open. The short version: most of what you do stays on your device, accounts are optional, and the anonymous data we collect for language research cannot be traced back to you.
WYM?!
WYM?! needs no account. The names you type for players, your settings, a game you save, and the House Rules your group writes are stored only on your device.
Nearby games. Phones on the same Wi-Fi exchange player names and answers directly over your local network. Each nearby room is also opened online through Superb’s relay, so browsers, and phones on other networks, can join with the room’s code. Through the relay, the game’s messages (player names, answers and the state of the game) pass through Superb’s servers only in transit to the other players in that room; we do not store or read them. While a room is open we keep its code, the room name the host chose, and a one-way hash of the network it was opened from (your router’s IPv4 address, or the first half of an IPv6 address), so the room can be listed to other devices on the same network. These are deleted when the host leaves, and never kept longer than six hours. To prevent abuse, we briefly keep a hashed address in rate-limit records, as for our other services.
Your choice: share answers anonymously, or see ads
The first time you open WYM?!, you choose one of two ways to keep it free. Nothing is sent and no ads load until you choose. You can switch at any time in Settings.
If you share answers anonymously, after each round is revealed the app sends Superb:
- the question and its answer options, and which game and card it came from;
- the group’s answers, sorted so it cannot be seen who picked what;
- the round number, the length of the game, the card’s stage, whether the game used one phone or nearby phones, the number of players and the party setting;
- the app version and the date (not the time);
- a random code made fresh on the phone for that one game, so rounds from the same game can be studied together. It is never reused and is not tied to you, your phone or any other game.
If your group writes its own House Rules, their question and answers are shared too. Before sending, the app removes the players’ names, email addresses, phone numbers, @handles and links. Please keep other personal details out of the rules you write.
We do not collect player names, contact details, accounts, device or advertising identifiers, or location. Our server necessarily receives your IP address to receive the request, as any website does. It is not stored with your answers; a one-way hashed form is kept for about a minute to limit abuse and is then deleted.
We use shared rounds to study how people interpret everyday language, to improve WYM?! and its cards, and to improve Superb’s language reference. They are stored privately for analysis. We may publish aggregate findings, such as how a room tends to split on a card, which cannot identify any person or group. Any other use, such as publishing individual rounds, would need a separate documented decision.
Because shared rounds cannot be linked back to you, we cannot find and delete one person’s rounds. Turning sharing off stops future sharing and deletes any rounds still waiting on your phone to be sent.
Ads
If you don’t share, WYM?! shows small banner ads in quiet places: on the home screen, while you wait for the host or for other players, and after a game. Ads never appear during a round, and none have to be watched before you can continue. Ads are provided by Google AdMob and requested as non-personalized ads, limited to content suitable for teens. WYM?! does not use your advertising identifier: it is blocked on Android and the app never asks to track you on iOS. To show, measure and protect ads against fraud, Google may receive information such as your IP address, device type, operating system, the app and your interactions with an ad; Google’s use is described in how Google uses information from apps that use its services. Where the law requires it, for example in the EEA and UK, Google’s consent form asks you first, and you can change your answer in Settings under Ad privacy choices. The same slots sometimes show Superb’s own products; those use no tracking.
Sharing results
The results card is drawn on your phone. Sharing it opens your phone’s share sheet, and you choose where it goes.
Superb Lens: reader, library and reference
Superb stores your shelf, reading places, preferences and saved words in this browser. Clearing browser storage removes them. Guest reading works without an account. If you sign in and choose Sync, your reading collection is also stored with your account on the server. Sync is a manual action; signing in alone does not back up your collection.
The app downloads books, definitions and its own files. Hosting providers receive the information needed to serve these requests, including your IP address. Contextual word lookup sends the selected passage to Superb for deterministic ranking; optional Jev inference sends that passage and its candidate definitions to TypeSafe. When Lens works on other websites, it will act only on text you select and will not collect your browsing history. The app does not send your notes or practice responses to an analytics service.
Speech
Read-aloud uses the voice you select on your device. Some system voices use an online service. Dictation, when you choose it and grant microphone permission, uses your browser’s speech service and may send audio to that provider. Superb does not keep recordings. Selecting a cloud voice sends passages you play to Cloudflare for speech generation; generated audio is stored privately for account replay and can be cached on your device.
Argument review
Local text checks and file imports run on your device. An explicitly requested link import fetches the source through Superb. Drafts and imported source text are saved in this browser. If you enable AI review and confirm sending, Superb sends your argument, context, reply and source text to OpenAI. Recording transcription requires a separate explicit send; check the returned transcript before using it. Provider processing and retention are governed by OpenAI API data controls; disabling response storage does not mean zero retention.
API and SDK
Requests to the Superb API contain the text and parameters your software sends. Ordinary requests are not retained. API clients may explicitly request private storage. Submitted observations are stored privately with separate analysis, display, redistribution and training permissions; independent review is required before any permitted corpus use. Your Superb access key stays in memory for the current page session on this website; in your own software, keep it private. Rate-limit records use hashed identifiers and expire.
LITERATE
Signed-in contribution judgments are stored with a pseudonymous account ID. A wallet signature binds rewards without authorizing transfers. Account deletion removes private account data; published wallet allocations, transaction records and immutable release commitments remain available for settlement verification. Public rewards are not active.
Accounts and payments
Accounts are optional. Email sign-in uses Resend to deliver a temporary code. The server stores your email address, account identifier, hashed session credentials and sign-in and rate-limit records. The session cookie keeps you signed in. A deterministic avatar is generated locally. Export your collection before deleting your account. Deletion removes its server-held reading copy, sessions and generated audio after subscription cancellation succeeds; copies you exported or cached on a device are separate.
When enabled, Stripe handles checkout and subscription billing. Superb stores a billing customer identifier and checks payment status to authorize paid features. The server records character usage and generation status to enforce narration allowances. Payment providers may retain their own transaction records after account deletion.
This website
If analytics is configured, this website asks before loading Google Analytics. With your permission it measures page visits and clicks that open the app, without Google signals or ad personalization, and without your searches, reading or writing. Change your choice with Analytics preferences in the footer. Sharing opens your device’s share controls or copies a link, and export creates a file on your device; you choose where either goes.
Service providers
We use Cloudflare for hosting, storage and cloud speech; Resend for sign-in email; Stripe for payments; Google for optional website analytics and for ads in WYM?! when you choose ads; and, only when you ask for them, OpenAI for AI review and TypeSafe for Jev inference. They process data to provide these services under their own terms. We do not sell personal information or share it for cross-context behavioral advertising.
Children
Superb’s products are not directed to children under 13, and we do not knowingly collect personal information from them. WYM?! is intended for players aged 13 and over. If you believe a child under 13 has created an account, contact us and we will delete it.
Your choices and rights
You can use the reader and WYM?! without an account, change WYM?!’s sharing choice at any time, and decline website analytics. If you have an account, you can export your collection and delete the account. Depending on where you live, you may have rights to access, correct, delete or port personal information we hold about you, and to object to or restrict its use. Contact us to exercise them. Anonymous WYM?! rounds cannot be linked to you, so they cannot be retrieved or deleted for a particular person. We keep account data until you delete your account, rate-limit records only briefly, and anonymous research data for as long as it is useful for research.
We protect data with encryption in transit, hashed credentials and access limited to what each service needs. No system is perfectly secure. Superb’s services may process data in countries other than yours, including the United States.
Contact and changes
Loading this deployment’s contact details…
Report software problems through the project issue tracker; do not post private account or payment information there. When this policy changes, we update the effective date above, and we will tell you in the product before a material change applies to data we already hold. See also the Terms of Use.