Wordlore Privacy Policy

Effective date: 2026-09-07

Wordlore version 0.1.0 is published by Gator Play Private Limited (“we”, “us”, or “our”). This policy explains what information Wordlore handles, what leaves your device, and who receives it.

The short version

Wordlore can be played offline without an account. Cloud Save is enabled for explicitly linked accounts. When you link Google, Sign in with Apple, or Game Center on iOS, Wordlore uses Firebase/Google Cloud to back up and synchronize the progress and preferences described below. Guest progress is not uploaded to Wordlore Cloud Save. Ink earned through play stays local; verified rewarded-ad Ink has a separate account-protected server balance.

These features use the network:

Advertising. You may choose a rewarded video from the Ink control or selected progress moments. Separately, a paced interstitial may appear after an eligible completed board, and a standard banner may occupy a reserved area separated from gameplay controls. Google may receive device, network, consent, and ad-interaction data to serve and measure these non-personalized ads.
Cloud Save and account protection. Explicit account linking enables progress backup and synchronization and protects verified rewarded Ink across reinstalls and devices. Sync requires an internet connection.
App health, where enabled. Strictly allowlisted analytics events and redacted crash diagnostics help us understand use and fix reliability problems.

This release does not offer paid Ink packs or other in-app purchases.

Information kept on your device

board, Daily Crossing, and Journey progress;
completion and replay state;
a local view of your Ink balance, hint usage, and unlocked Collection rewards;
appearance, accessibility, sound, and haptic preferences;
whether you enabled an optional Daily reminder;
your advertising consent choice; and
a coarse child, teen, or adult policy bucket; the entered age is not saved.

Local copies remain on the device until you clear the app’s data or uninstall. For linked accounts, the Cloud Save items below also have account-linked copies in Cloud Firestore. Verified Ink from rewarded ads is recorded separately in the protected server ledger. Your operating system may include app data in a device backup according to your platform account and settings. We do not receive or control those platform backups.

Cloud Save

When you explicitly link a supported sign-in provider, Wordlore stores the following account-linked data in Cloud Firestore for backup and synchronization:

puzzle progress and unfinished board saves;
completed-level records, including scores, completion times, attempts, and hint/error statistics;
unlocked Collection card records;
your Daily streak;
Hidden Lore discoveries and display selections; and
your Light, Dark, or System appearance preference.

Save records also include identifiers and timestamps needed to associate, combine, and update your progress. Collection artwork is bundled with the game; Cloud Save records which cards you have unlocked, not uploaded images. Appearance is the only general app setting that is cloud-saved. Other general settings, such as sound, haptics, accessibility, reminders, and advertising choices, remain local. Hidden Lore display selections are saved with your discoveries, separately from those general settings.

Guest progress is not uploaded to Wordlore Cloud Save unless you explicitly link an account. A background guest identity is not a request to back up progress. Ink earned through ordinary gameplay remains local and is not a cloud-saved balance. Verified rewarded-ad Ink is maintained separately as an account-protected server balance.

Synchronization requires a connection and may be pending while offline or after a service failure. Linking an account does not mean every local change has already been backed up. Signing out stops this device’s account-linked sync; it does not delete existing cloud saves. Clearing local app data or uninstalling does not delete the cloud copy. Account deletion removes cloud saves during finalization after the seven-calendar-day cancellation period.

Wordlore may offer an optional rewarded video from the Ink control, after some completed boards, when returning to an unfinished crossing after a meaningful absence, or when Ink is insufficient. Each video requires a separate Watch action; a prompt never starts it automatically. You are never required to watch it to play or finish a puzzle.

Wordlore may also show a non-rewarded interstitial only after an eligible completed board. Its first appearance, repeat interval, minimum time spacing, daily cap, and suppression after a rewarded ad are controlled by a remotely killable pacing policy. Interstitials are not placed during active board interaction.

A standard banner may appear in a reserved area separated from gameplay controls. It does not grant Ink. It is suppressed when the available screen space or enlarged text needs that room. Banner requests follow the same audience and consent requirements as rewarded and interstitial requests.

Before Google Mobile Ads is initialized or an ad is requested, Google’s User Messaging Platform updates the applicable privacy status and presents a form when required. If the privacy state does not permit an ad request, no ad is requested and gameplay remains available.

When an ad is requested or shown, Google may receive:

your IP address, which is inherent to a network request; and
coarse device, network, consent, ad-request, impression, interaction, and— only for rewarded ads—reward-completion signals.

Google uses this information to deliver and measure ads and prevent fraud under its own terms and privacy practices. See the Google Privacy Policy at https://policies.google.com/privacy and its partner-sites explanation at https://policies.google.com/technologies/partner-sites.

Wordlore requests non-personalized ads only. The v1 app excludes access to Android’s advertising ID and Apple’s IDFA, does not use app data to track you across apps or websites, and does not request App Tracking Transparency permission.

You can revisit your choice from the privacy-options entry in Wordlore’s Settings where Google’s consent framework requires that entry to be shown.

Account-protected rewards

Ordinary gameplay does not require sign-in. Before a rewarded ad can create recoverable value, you link Google, Sign in with Apple, or Game Center on iOS. Firebase Authentication handles a Firebase account identifier, linked-provider identifiers, including the Game Center player identifier when selected, and a provider-supplied email address when available. That address may be an Apple private-relay address; a provider such as Game Center may not supply an email address. We use provider identifiers for account management, Cloud Save, protected rewards, and deletion verification, not for advertising.

The backend records an opaque reward session, the verified Ink grant, and a replay-protection key. A client callback alone cannot grant Ink. We also use a short-lived device-attestation token to authorize protected requests.

You can start account deletion from Wordlore’s Settings or, if you cannot open the app, at https://gatorplay.in/delete-account/. An accepted request immediately freezes protected account features and starts a seven-calendar-day cancellation period. Signing in again does not cancel it: you must explicitly choose Keep my account before the displayed deadline. After that deadline, scheduled finalization removes the account, cloud saves, and remaining account-linked rewarded Ink even if the app is never opened again. Requests made through support require verification of account ownership and any necessary provider authorization. Sending an email alone does not schedule or complete deletion. Where Sign in with Apple is linked, the deletion workflow also revokes Wordlore’s Apple authorization before completing.

When you contact support

If you email us, we and our email-service provider receive your email address, message, and any attachments you choose to send. We use them to answer your request, investigate the reported issue, and, where needed, verify authority to act on an account. Ordinary support messages and deletion correspondence follow the retention criteria below; they are not application logs.

Send only information needed for the request. Do not send passwords, sign-in codes, authentication tokens, payment details, or government identity documents. Account verification must use the secure steps explained by support, not the sharing of Google or Apple sign-in credentials.

Analytics and crash diagnostics

When enabled for the build and permitted by the applicable privacy state, Firebase Analytics receives a fixed allowlist of coarse, bucketed gameplay and advertising events. These events do not contain your Wordlore account identifier, email, free text, reward token, provider payload, price, currency, or product identifier.

When enabled, Firebase Crashlytics receives stable diagnostic codes, sanitized stack frames, and coarse app and platform state. Wordlore does not attach your account identifier, email, provider responses, arbitrary breadcrumbs, or raw SDK exceptions.

Who else handles information

Wordlore uses managed Firebase and Google Cloud backend services rather than self-hosted infrastructure. The following providers handle information for the described purposes. Their precise legal role can depend on the service and applicable law.

Provider	What it handles	Purpose
Google — Firebase Authentication	Account record, linked Google or Sign in with Apple identifier, Game Center player identifier on iOS when selected, and provider-supplied email when available	Account linking, Cloud Save access, protected rewards, and deletion verification
Google — Cloud Firestore	Account-linked cloud saves and preferences described above; separate verified Ink balance, reward grants and sessions, pseudonymized reward-verification records, and deletion-security records	Cloud Save, protected rewards, replay prevention, and deletion safety
Google — Cloud Functions	Reward verification and account-deletion processing	Trusted backend processing
Google — Firebase Analytics	Allowlisted bucketed events tied to a pseudonymous app-instance identifier, not your Wordlore account identifier	Product measurement
Google — Firebase Crashlytics	Diagnostic codes and sanitized frames, not your Wordlore account identifier	Reliability and crash diagnosis
Google — AdMob / Google Mobile Ads	Rewarded, interstitial, and banner ad delivery, fraud prevention, and measurement	Advertising

Apple handles information where you use Sign in with Apple or Game Center on iOS. We receive the provider identifier and a provider-supplied email when available, not your Apple password or contacts.

Game Center on iOS. Wordlore uses Game Center as an optional sign-in provider for Cloud Save and account-protected rewarded Ink, not as the storage service for your puzzle saves. Being signed in to Game Center on your device does not automatically link your Wordlore guest progress; linking requires your explicit action in Wordlore. This integration does not publish your Wordlore scores to Game Center leaderboards, award Game Center achievements, or access your Game Center friends list. Apple operates Game Center under its own Game Center & Privacy notice. Deleting a Wordlore account removes its linked Game Center identifier during finalization; it does not delete your Apple Account or Game Center account.

Where information is processed

Server-side application information is stored in the approved Firebase/Google Cloud location: Mumbai, India (Google Cloud/Firebase region asia-south1). Advertising, sign-in, and support providers operate globally and may process data outside your country.

If you are in the European Economic Area or the United Kingdom, transfers outside your region rely on the European Commission’s Standard Contractual Clauses or an applicable adequacy decision, as implemented in our agreements with Google and Apple.

Our legal basis for processing

Where the GDPR or an equivalent law applies to you:

What we do	Why we are allowed to
Serve rewarded, interstitial, or banner ads	Your consent where required, with the applicable privacy state resolved before any ad request
Verify a rewarded ad and grant Ink	Performance of our contract with you
Provide Cloud Save after you explicitly link an account	Performance of our contract with you to provide the requested backup and synchronization service
Protect rewards and prevent replay	Our legitimate interest in preventing abuse
Diagnose crashes	Our legitimate interest in maintaining a working app
Product analytics	Your consent where required by applicable law; otherwise our legitimate interests in understanding app performance and improving Wordlore, subject to your applicable privacy rights.

You can change or withdraw a consent choice where that option is available. A change does not affect processing already carried out.

What we do not do

We do not offer paid Ink or other in-app purchases in this release.
We do not upload guest progress to Wordlore Cloud Save without explicit account linking, or include ordinary gameplay Ink in a cloud-saved balance.
We do not sell your personal information or share it for cross-context behavioural advertising.
We do not request access to contacts, precise location, camera, microphone, or photo library.
We do not use automated decision-making that produces legal or similarly significant effects.

Children and age treatment

Wordlore is designed for a mixed audience that includes children. Before configured online services or advertising start, a neutral screen lets the player enter an age or continue without sharing it. The number is immediately converted on the device to a coarse child, teen, or adult policy bucket. The entered age is not saved, logged, analyzed, or sent to us or Google.

Skipped, missing, or unreadable age state uses the most protective child treatment. Child and unknown traffic is marked child-directed and under-age, with non-personalized G-rated ads through a Google Play Families self-certified ads SDK. Teen traffic is marked under-age and receives at most PG-rated non-personalized ads. Adult traffic also remains non-personalized and receives at most PG-rated ads. If the required treatment or consent state cannot be established, no ad is requested.

The coarse bucket remains on the device until app data is cleared or the app is uninstalled. Parents or guardians can contact support@gatorplay.in about a child’s information or use https://gatorplay.in/delete-account/ to request deletion, subject to verification of authority to make the request.

Notifications and device access

If you enable a Daily reminder, Wordlore asks for notification permission and schedules the reminder locally. Android may restore that schedule after a restart. You can disable reminders in Wordlore or revoke notification access in system settings.

How long we keep information

On-device information stays until you clear app data or uninstall.

An accepted deletion request retains the account and directly linked data during the seven-calendar-day cancellation period. Protected features are frozen immediately. After the deadline, a scheduled process finalizes erasure; temporary service failures are retried and do not extend the cancellation deadline. Limited records below follow their separately disclosed retention.

Account, cloud saves, and protected Ink: Your account record, linked provider identifier, provider-supplied email, cloud saves and preferences, and verified Ink balance remain until account-deletion finalization, subject to the cancellation period above. Cloud saves are updated as you play.
Reward-session records: While needed to verify the reward and resolve related support or abuse issues; account-linked reward sessions are erased when account deletion is finalized.
Analytics events: 14 months.
Crash diagnostics: 90 days.
Reward-verification records and replay keys: While needed to verify rewarded Ink and prevent the same ad completion from granting Ink again; the direct Wordlore account identifier is removed when deletion is finalized.
Temporary deletion-security record: Eligible for automatic removal two hours after account-deletion finalization; physical removal is asynchronous and may take longer.
Deletion verification data: While needed to verify authority and process the deletion request; correspondence follows the separate support-message criteria.
Redacted deletion receipts: 90 days after the deletion request is closed. These contain only an opaque request id, timestamps and a bounded outcome.
Ordinary support and deletion correspondence, including attachments: While needed to handle and follow up on the request, resolve related disputes, or meet applicable legal obligations; this covers messages and attachments held by our email provider.

When deletion is finalized, cloud saves, the protected balance, individual account grant records, and reward sessions are erased. The separate reward-verification record loses its direct Wordlore account identifier but retains the opaque session and replay identifiers, provider, granted Ink amount, and reward and deletion timestamps. These pseudonymized records prevent duplicate rewards; they are not purchase receipts or tax records, and we do not describe them as fully anonymous.

A separate temporary deletion-security record remains keyed by the deleted account identifier to stop an old sign-in token from recreating account data. Its contents are limited to a policy version and deletion/expiry timestamps, not an email address, Ink balance, or gameplay history. Automatic removal is asynchronous; reaching the configured expiry does not guarantee immediate physical erasure.

Verification data and support correspondence follow the separate criteria above. Retention depends on the status of the request, the need to prevent duplicate rewards or investigate abuse, and applicable legal obligations. It is not a promise that every retained record is erased at the account-deletion deadline. Advertising data held by Google follows Google’s retention practices.

Your choices and your rights

Change or withdraw advertising consent from the privacy-options entry in Settings, where your region requires one.
Disable Daily reminders in Wordlore or in system settings.
Play as a guest without uploading progress to Wordlore Cloud Save, or sign out to stop this device’s account-linked synchronization. Signing out does not erase existing cloud saves.
Clear app data or uninstall to remove on-device information.
Start account deletion in Settings or at https://gatorplay.in/delete-account/.

Depending on where you live, you may have rights to access, correct, delete, port, restrict, or object to processing of your personal information, and to withdraw consent. Exercise them through the routes above or by contacting support@gatorplay.in.

We respond within the period required by applicable law and aim to acknowledge requests within 5 business days. We may need to verify that the request comes from the account holder before acting. We will not charge you for a valid request or treat you differently for making one.

If you are in the EEA or the UK, you also have the right to complain to your local data protection authority.

Changes to this policy

We may update this policy when features, providers, or legal requirements change. Any activation of paid items, personalized advertising, online competition, another provider, or expansion of cloud-saved data requires a new disclosure review before release. The effective date above reflects the current version.

Contact

Gator Play Private Limited support@gatorplay.in

Privacy · Terms · Support · Delete account