Privacy Policy

1. Who we are

wordstrac is a single-player word game for iOS and Android, created and maintained by a designer ("we", "us"). We are the data controller and responsible for the personal data described in this policy.

2. Playing without an account

You can play wordstrac without signing in. Your Classic Mode progress, Daily Challenge results and streaks, lives, settings and a random installation identifier are stored only on your device. Deleting the app deletes this data.

Reminders (for example "your lives are full" or "a new Daily Challenge is ready") are scheduled locally on your device. We do not use push notification services and do not receive a notification token.

3. Data we collect

• Account information. Only if you create an account: your email address, a display name (from Apple or Google, if they share one), the nickname you choose, and a unique account identifier. If you use Sign in with Apple and choose to hide your email, we receive only Apple’s private relay address.
• Game progress. Only if you are signed in: your Classic Mode levels, scores and stars, and your Daily Challenge results, so your progress follows you across devices.
• Usage analytics. Events such as levels started and completed, modes chosen, screens viewed, and whether a rewarded ad or purchase was offered or completed, together with device model, operating system, app version, language, approximate country (derived from your IP address) and an app-instance identifier. We use this to understand how the game is played and to improve it.
• Crash and diagnostic data. If the app crashes or hits an error: a stack trace, device model, operating system, app version, available memory and disk space, and a crash-installation identifier. We use this only to find and fix bugs.
• Advertising data. When you choose to watch a rewarded ad, Google AdMob receives your IP address, device and app information and how you interact with the ad. We do not request access to your device’s advertising identifier: the app never shows Apple’s App Tracking Transparency prompt, and on Android the advertising-ID permission is removed.
• Purchases. In-app purchases are processed entirely by Apple or Google. We receive a confirmation that a purchase was made so that we can deliver it, but never your payment card or billing details.
• Support messages. If you email us, we receive your email address and whatever you include in your message.

4. Services that process your data

We do not sell your personal data. We share it only with the following service providers, who process it on our behalf or as independent controllers under their own privacy policies:

• Google Firebase (Google LLC). Firebase Authentication (sign-in), Cloud Firestore (storing synced progress), Google Analytics for Firebase (usage analytics) and Firebase Crashlytics (crash reports). See firebase.google.com/support/privacy and policies.google.com/privacy.
• Google AdMob (Google LLC). Serves the optional rewarded ads and, where required, shows Google’s consent form. See policies.google.com/technologies/ads.
• Apple and Google sign-in. If you choose Sign in with Apple or Sign in with Google, that provider authenticates you and shares your account details with us as described above.
• Apple App Store and Google Play. Distribute the app and process in-app purchases.
• Vercel. Hosts this website and keeps standard server logs, such as IP addresses and pages requested. The website itself uses no analytics or advertising cookies.

5. Ads and consent

Ads appear only when you choose to watch one, in exchange for refilling lives. If you are in the European Economic Area, the United Kingdom, Switzerland or another region where consent is required, Google’s consent form asks for your choice before any ad is requested. You can change that choice at any time in the app under Settings → Privacy → Ad Privacy Settings. If you do not consent, you can keep playing; ads may be limited or unavailable.

6. Tracking and data safety summary

We do not track you across apps and websites owned by other companies, we do not sell your data, and we do not share it with data brokers. We do not show Apple’s App Tracking Transparency prompt because the app does not access your advertising identifier.

For the App Store privacy details and the Google Play Data safety form, the app collects the following. All of it is encrypted in transit, and you can request deletion at any time.

• Contact info (email address, name). Optional, only if you create an account. Used for account management and linked to your identity.
• Identifiers (account ID, device and app-instance IDs). Used for app functionality, analytics and crash diagnostics.
• Gameplay content (levels, scores, streaks). Used for app functionality. Synced and linked to your identity only if you sign in.
• Usage data and diagnostics. Product interaction, crash logs and performance data. Used for analytics and bug fixing, and not linked to your identity.
• Purchases. Purchase confirmation from Apple or Google, used only to deliver what you bought.
• Approximate location. Country level only, derived from your IP address by analytics and ad services. We do not collect precise location.

7. Why we use your data (legal bases)

• To provide the game and your account. Performance of our agreement with you (our Terms of Service).
• Analytics and crash reports. Our legitimate interest in keeping the game working and improving it.
• Advertising. Your consent where the law requires it, otherwise our legitimate interest in funding the game.
• Answering support requests and meeting legal duties. Legitimate interest and legal obligation.

8. How long we keep it

• Account information and synced progress. Until you delete your account. Deletion removes it immediately from our database.
• Analytics data. Up to 14 months, after which Google Analytics deletes it automatically.
• Crash reports. Up to 90 days in Firebase Crashlytics.
• Support emails. As long as needed to resolve your request, then deleted.

9. Deleting your account

In the app, open Settings and tap Delete Account under Account. This permanently deletes your login, your nickname and all synced progress, and, if you use Sign in with Apple, revokes the app’s access to your Apple ID. It cannot be undone.

If you no longer have the app, follow the steps on our delete account page and we will delete your account for you.

Delete your account without the app

10. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict how we use it, and to withdraw consent at any time. To exercise any of these rights, email us from the address linked to your account. You can also complain to your local data protection authority.

11. Regional privacy rights

EEA, UK and Switzerland: you have the rights described above and may lodge a complaint with your supervisory authority. Singapore: we handle personal data in line with the Personal Data Protection Act (PDPA), and you may ask us to access or correct your data or withdraw your consent. California and other US states: you may ask us to disclose, delete or correct the personal information we hold about you. We do not sell or share personal information for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights.

To make a request, email us from the address linked to your account. We may need to verify that the account is yours, and we aim to respond within 30 days.

12. International transfers

Our service providers may process data in the United States and other countries. Where required, these transfers are covered by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

13. Security

Data is encrypted in transit. Synced progress is protected by access rules that let only you read or write your own record. No system is perfectly secure, but we take reasonable measures to protect your data.

14. Children

wordstrac is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will delete it.

15. Changes to this policy

If we change this policy, we will update it on this page and change the effective date below. If the changes are significant, we will also tell you in the app.

Contact

Questions about this policy or a data request: email support@snumberry.com. For general help, visit the support page.