Apparently the old Wordle URL redirects to the new NYT page, and it includes the statistics as a JSON in the URL so the new page know what's the old statistics is.

Also makes it really easy to forward a user to a nytimes phishing site.

e.g.

"Hey - did you see the new wordle? https://www.powerlanguage.co.uk/wordle/?url=https://www.exam... "

Seems like hopefully an easy and obvious fix - no need for a fully open redirect here!

Ah, I was wondering how it persisted the stats (which I presumed were stored via localStorage).

Ah! Thank you for this, I was wondering how they preserved the statistics through a move to a whole different site (where the old local storage of course can’t be accessed)

The statistics worked for me too, just the streak was reset.

The url is encrypted, the entire thing is over tls.

I find the idea amusing that exposing people's wordle scores would result in billion dollar damages. My life was ruined because someone was able to find out 60% of my wins are on 6 guesses!

Ditto. You can fix it:

const d = JSON.parse(localStorage.getItem("nyt-wordle-statistics"))

console.log(d)

d.currentStreak = // whatever your streak was

d.gamesPlayed = d.gamesPlayed - 1

d.gamesWon = d.gamesWon - 1

d.guesses["4"] = d.guesses["4"] - 1 // subtract the last game

localStorage.setItem("nyt-wordle-statistics", JSON.stringify(d))

It persisted my streak -- not sure why yours didn't transfer. I did see the onboarding page again.

I'm running Chrome on Win10 and my records survived the migration, so your mileage may vary.

Stretch to call it a brand. haha

It's a brand the nyt considered worth 7 figures.

Colored boxes that you can paste anywhere that supports emoji/whatever that show your final game state.

Sometimes it really is that simple.

Didn’t break my streak.

It appears you have to replay today's word. I play it shortly after midnight and while my stats transferred, it didn't know I'd already played.

Lost my streak :rage: