Information We Collect

When you create an account or use Wordocious, we may collect the following information:

• • Email address — provided during sign-up or via Sign in with Google or Sign in with Apple
• • Username / display name — chosen by you when creating your profile
• • Game statistics — scores, win/loss records, completion times, and performance data across all game modes
• • Streak data — daily streak counts and history
• • Device and usage information — browser or device type, operating system and app version, general usage patterns, and anonymous analytics to help us improve the app
• • Advertising identifier (mobile apps, free tier only, and only while ads are enabled) — the Google Advertising ID on Android or the Apple Identifier for Advertisers on iOS, shared with our advertising partner to serve and measure ads. On iOS it is shared only if you allow tracking when asked. Pro subscribers see no ads.
• • Crash and diagnostic data — when the app crashes or hits an error we record the fault, device model, OS version and app version so we can fix it.
• • Push notification token (mobile apps) — a device token, stored only if you enable notifications, so we can send you daily-puzzle and match reminders.

How We Use Your Information

• • To create and manage your Wordocious account
• • To track your game progress, streaks, and statistics
• • To display leaderboards and records
• • To improve and maintain the app experience
• • To communicate important updates about the service

Third-Party Services

Wordocious relies on the following trusted third-party services to operate:

• • Supabase — used for user authentication and secure data storage. Your account data and game statistics are stored in Supabase's infrastructure.
• • Vercel — used for web hosting and serving the Wordocious application.
• • Google OAuth — available as a sign-in option. When you sign in with Google, we receive your email address and display name from Google. We do not access any other Google account data.
• • Sign in with Apple — available as a sign-in option. When you sign in with Apple, we receive the email address you choose to share (which may be an Apple private relay address) and, the first time only, your name if you share it.
• • Advertising partner (iOS and Android apps, free tier only) — when ads are enabled, a third-party advertising network serves interstitial ads to free-tier players before a game. It receives the device advertising identifier and standard ad-request data (IP address, device type, operating system, app version) and processes it under its own privacy policy. We name the partner in this section whenever ads are active, and we will update this policy before switching partners. The website shows no third-party ads.
• • Sentry — crash and error reporting. Receives diagnostic data about faults, including your account identifier, so we can trace and fix them.
• • Firebase Cloud Messaging (Android) and Apple Push Notification service (iOS) — deliver push notifications if you enable them.
• • Stripe — processes Pro subscription payments made on the website. Card details go directly to Stripe; we never see or store them.
• • Apple App Store and Google Play — process Pro purchases made inside the mobile apps, and tell our servers when a subscription starts, renews or ends.

Advertising & Data Sharing

Free-tier players of the mobile apps may be shown an interstitial advertisement before a game session, served by a third-party advertising partner; there are no third-party ads on the website. Where the law requires it we ask for your consent before any ad is requested — through Apple's App Tracking Transparency prompt on iOS and a consent notice in the European Economic Area, the United Kingdom and Switzerland — and no ad is shown there without it. You can reset or limit your advertising identifier at any time in your device settings. Pro subscribers enjoy a completely ad-free experience. We do not sell your personal information, and we do not share it with third parties for their own marketing. Game statistics you choose to make public (leaderboards, profiles) are visible to other players under the display name you pick.

Data Security

We take reasonable measures to protect your personal information. Authentication is handled securely through Supabase, and all data is transmitted over encrypted connections (HTTPS). However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Your Rights

You may request access to, correction of, or deletion of your personal data at any time. You can delete your account through your profile settings or by contacting us directly. Upon account deletion, your personal data will be removed from our systems.

Children's Privacy

Wordocious is for players 13 and up. The first time you open it we ask the year you were born (only the year) to confirm that. If the answer is under 13, we do not create an account or a profile, and nothing else about you is collected: no crash reports, notifications or ads start. We keep only a “13 and up confirmed” flag and the year you picked, never a full birthdate, and the answer is remembered on your device so the question is not asked twice. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal data, email privacy@wordocious.com and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. Continued use of Wordocious after changes are posted constitutes acceptance of the revised policy.

Contact Us

If you have any questions or concerns about this Privacy Policy or your personal data, please contact us at privacy@wordocious.com.