Privacy Policy
WordenTile · Wordenstein · WordenMine · WordenPulse · WordenLock · WordenGalaxy · WordenCross · Wordenland — effective 31 August 2026
1. Data controller
2. Scope
This policy applies to the applications named above. Each keeps a separate profile; a profile in one application is not accessible from another.
3. Data processed, purposes, legal bases and retention
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| In-game name | Display in rankings and recognition by other players | Art. 6(1)(b) | Until the profile is deleted |
| Device identifier | Access to the profile without registration | Art. 6(1)(b) | Until the profile is deleted |
| Player identifier from Google Play Games or Apple Game Center | Keeping the profile when the device changes | Art. 6(1)(b) | Until the profile is deleted |
| Game data: scores, words found, games played, rankings, rewards | Running the game itself | Art. 6(1)(b) | Until the profile is deleted |
| Interface language and application settings | Presenting the game in the chosen language | Art. 6(1)(b) | Until the profile is deleted |
| IP address | Rate limiting and protection against abuse | Art. 6(1)(f) | Not stored against the profile; used briefly by the protection layer |
| Words rejected by the dictionary | Correcting and extending the dictionaries | Art. 6(1)(f) | Up to 7 days |
| Data given in a deletion request | Handling the request and evidencing that it was carried out | Art. 6(1)(c) | 12 months |
| Device advertising identifier (Advertising ID) | Serving advertising and counting impressions | Art. 6(1)(a) — consent (see 8) | Not stored by us; controlled by Google — see 6 |
The legitimate interests under Art. 6(1)(f) are: an application that cannot be overwhelmed by automated requests, and dictionaries corrected by actual use.
Providing data is not a statutory obligation. Without an in-game name and a device identifier, however, the game cannot keep a profile, a ranking or any progress.
4. What is not processed
No email address, password, precise location, contact list, device photos, microphone audio or list of installed applications is collected. The applications set no cookies.
The only exception is the device advertising identifier, which is used for advertising only and only on the terms set out in section 8.
5. Platform identity
Sign-in is handled by Google Play Games Services (Android) or Apple Game Center (iOS), under the rules and settings of the platform itself. A player identifier is received and, from Google Play Games, the display name, which is offered as the initial in-game name and can be changed. No email address, telephone number, contacts or photo is received.
Declining platform identity is possible: the game also runs with a profile that exists only on that device.
6. Recipients
- Google Ireland Limited — Play Games Services (identity verification).
- Apple Distribution International Ltd. — Game Center (identity verification).
- Cloudflare, Inc. — protection and content delivery in front of the server.
- Google Ireland Limited — AdMob (serving advertising and collecting consent through the User Messaging Platform). Where consent to personalised advertising is given, the data may also reach the advertising partners listed in the consent message itself.
Personal data is not sold. Beyond the recipients listed, data is not passed to third parties. We carry out no profiling; where advertising is personalised, the profiling is carried out by Google and its partners on the basis of the consent under section 8.
7. Transfers outside the European Economic Area
The providers listed in section 6 may process data outside the EEA. Transfers are made on the basis of the European Commission's standard contractual clauses and, for providers in the United States, on the basis of the Commission's adequacy decision on the EU—US Data Privacy Framework.
8. Advertising
The applications show advertising through Google AdMob. It is shown between rounds, and at the user's own choice in exchange for an in-game reward. No advertising is shown while a purchased ad-free period is running on the profile.
Consent. Users in the EEA, the United Kingdom and Switzerland are shown a consent message through Google's User Messaging Platform before the first advert is shown. Personalised advertising is shown only where consent has been given; where it is refused, non-personalised advertising is shown.
Withdrawal. Consent can be changed at any time from the application settings, from which the message is opened again. The advertising identifier can be reset or deleted in the settings of the device itself — once deleted, no personalised advertising is shown.
The applications are declared as not directed to children and use no data for advertising purposes other than the advertising identifier and the technical data of the impression itself.
9. Automated decision-making
No automated decision-making producing legal effects or similarly significantly affecting the user takes place, including profiling within the meaning of Art. 22 GDPR.
10. Your rights
In respect of personal data you have the right of access, rectification, erasure, restriction of processing, portability and objection and, where processing is based on consent, the right to withdraw it at any time without affecting the lawfulness of processing before withdrawal.
- Deletion from within the app — in the profile settings. Typing the in-game name is required so that it cannot happen by accident.
- Deletion after uninstalling — through the deletion form. The request is reviewed by a person within one month, because a profile without its device cannot be authenticated any other way.
https://word-games.trendysum.com/delete-account - All other rights — at the contact address in section 1.
You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg) or with the supervisory authority where you reside.
cpdp.bg
11. Children
The applications are not intended for persons under 13 and no data is knowingly collected from them. The age rating is supplied by the app store; the application does not ask for a date of birth.
12. Changes
On any material change the date at the top is updated.
This policy is available in all the languages the applications are offered in. In case of discrepancy the Bulgarian text prevails.