1. Introduction

This Privacy Policy explains how Word Dungeon (“we”, “us”, “our”) collects, uses, shares, and protects your personal information when you use our mobile application (“the App”).

This policy applies to all users of Word Dungeon, whether you use the App as a guest (anonymous) or with a registered account. By using Word Dungeon, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

The data we collect depends on how you use the App:

Guest (anonymous) users:

• An anonymous identifier is generated to save your game progress locally. No personal information is collected until you create an account.

Registered users (Google Sign-In or Apple Sign-In):

• Account information: email address, display name, and profile photo (if provided by the sign-in provider).

All users:

• Game data: scores, progress, dungeon run results, and leaderboard rankings. Your display name is publicly visible to other users on leaderboards.
• Device information: device model, operating system version, and language settings.
• Usage data: screens visited, features used, session duration, and interaction patterns.
• Purchase information: records of in-app subscriptions and purchases.
• Diagnostic data: crash reports, error logs, and performance metrics.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the game experience.
• Save your game progress and display leaderboard rankings.
• Process in-app purchases and manage subscriptions.
• Display advertisements.
• Analyze aggregated usage patterns to improve the App.
• Diagnose and fix technical issues.
• Prevent fraud, cheating, and enforce our Terms of Service.

We do not sell your personal information to third parties.

4. Automated Decision-Making

Word Dungeon uses automated processes to calculate leaderboard rankings based on your game scores and performance. These processes do not produce legal effects or similarly significant effects on you. Leaderboard positions are informational only and do not affect your access to any features of the App.

5. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data on the following legal grounds:

• Contract performance: to provide the game, save your progress, and manage your account.
• Legitimate interest: to improve the App, analyze usage patterns, and ensure security.
• Consent: for personalized advertising and tracking (via the App Tracking Transparency prompt on iOS, or equivalent consent mechanisms on other platforms). You may withdraw consent at any time through your device settings.
• Legal obligation: to comply with applicable laws and regulations.

6. Data Sharing & Third-Party Services

We do not sell your personal data. We share data with the following third-party service providers who process data on our behalf:

• Supabase — authentication and secure data storage.
• RevenueCat — in-app purchase and subscription management.
• Google AdMob — advertising.
• PostHog — anonymous usage analytics.
• Sentry — crash and error reporting.
• Google Sign-In — authentication.
• Apple Sign-In — authentication.

These providers are contractually obligated to protect your information and may only process it for the purposes we specify. We may also disclose your data if required by law, court order, or to protect our legal rights.

7. Advertising & Tracking

Word Dungeon displays ads via Google AdMob. On iOS, you will be asked for permission before any tracking occurs through Apple's App Tracking Transparency (ATT) framework. On Android, ad personalization settings are managed through your device's Google settings.

• If you grant permission: you may see personalized ads based on your interests.
• If you decline: only non-personalized, contextual ads will be shown.

You can change your tracking preferences at any time through your device settings. We do not use any other cross-app tracking technologies beyond what is described in this policy.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services:

• Account and game data: retained until you delete your account.
• Usage analytics: retained in anonymized or aggregated form for up to 12 months.
• Crash and error reports: retained for up to 90 days.
• Purchase records: retained as required by applicable tax and financial regulations.

After account deletion, your personal data is permanently removed within 30 days, except where retention is required by law.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States, where our third-party service providers (Supabase, PostHog, Sentry, RevenueCat, Google) operate.

For users in the EEA/UK, we ensure appropriate safeguards are in place for international transfers, such as Standard Contractual Clauses (SCCs) adopted by the European Commission.

10. Data Security

We implement reasonable technical and organizational measures to protect your data:

• All data is transmitted over HTTPS (encrypted in transit).
• Authentication is handled through secure third-party providers (Google, Apple).
• User data is stored with Row Level Security (RLS) policies ensuring users can only access their own data.
• Access to production systems is restricted and monitored.

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If we become aware of a security breach affecting your data, we will notify you and the relevant authorities in accordance with applicable law.

11. Your Rights

All users:

• Access: request a copy of the data we hold about you.
• Deletion: delete your account and associated data from Settings in the App.
• Correction: update your display name and profile information within the App.
• Opt-out: decline personalized ad tracking via device settings.

Additional rights for EEA/UK users (GDPR):

• Data portability: receive your data in a structured, machine-readable format.
• Restriction: request that we limit processing of your data.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: at any time, without affecting prior processing.
• Lodge a complaint: you have the right to file a complaint with your local data protection supervisory authority.

Additional rights for California residents (CCPA):

• Right to know what personal information is collected and how it is used.
• Right to delete your personal information.
• Right to opt-out of the sale of personal information — we do not sell your data.
• Right to non-discrimination for exercising your privacy rights.

Response timeframe: We will respond to all rights requests without undue delay and within 30 days. If we need additional time due to the complexity of the request, we will notify you of the extension and the reasons within the initial 30-day period.

To exercise any of these rights, contact us at the address below.

12. Account Deletion

You can delete your account at any time from Settings within the App. When you delete your account:

• Your profile, game progress, scores, and all associated data will be permanently removed within 30 days.
• Your display name will be removed from public leaderboards.
• If you have an active subscription, you must cancel it separately through your App Store or Google Play account settings — deleting your Word Dungeon account does not automatically cancel platform store subscriptions.

Account deletion is irreversible.

13. Children's Privacy

Word Dungeon is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under this age.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at the address below. We will promptly investigate and delete any such data.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The “Effective date” at the top of this policy indicates when it was last revised.

For material changes, we will provide notice within the App. Continued use of Word Dungeon after the updated policy becomes effective constitutes your acceptance of the changes.