This Privacy Policy describes how WordCraft ("we", "us", or "the app") collects, uses, and shares information when you use our mobile game WordCraft: Word Alchemy (the "Service").
By installing or using WordCraft, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.
Google Account information (optional): If you choose to sign in with Google, we receive your email address, display name, profile picture URL, and a Google-issued user identifier. Signing in is optional — you can play WordCraft without a Google account.
Purchase information: If you purchase "Remove Ads" or other in-app products, Google Play processes the payment. We do not receive or store your payment card details. We only receive a confirmation that your purchase was successful, which we store against your account.
Anonymous account identifier: When you first open the app, we create an anonymous account for you via Firebase Authentication so your progress can be saved. This account is identified by a randomly generated user ID (UID). The UID is not linked to your real-world identity unless you choose to sign in with Google.
Gameplay data: Level progress, star ratings, daily challenge completions, online match results, combination history, and settings preferences (theme, sound, haptics).
Device and technical information: Device model, operating system version, language, country, app version, crash logs, and performance metrics, collected via Firebase Analytics and Firebase Crashlytics.
Advertising identifiers: If ads are shown, Google AdMob may collect your device's advertising ID (AAID) and related information as described in Google's policies.
Level progress, combination cache, and settings are also stored in a local database on your device so the game remains playable offline where possible. This data is not accessible to us unless it is also synced to our servers as part of your cloud save.
We use the information described above to:
Provide core gameplay: save your progress, sync across devices, serve daily challenges, match you with online opponents, and record match results.
Generate new word combinations: when you merge two words that haven't been combined before, the word pair is sent to a third-party language model to generate a result. The pair is then cached so it never needs to be generated again. No personally identifiable information is included in these requests — only the two word strings.
Validate in-app purchases and grant the corresponding entitlements (such as removing ads).
Show and measure advertising (unless you have purchased the "Remove Ads" upgrade).
Monitor app stability, diagnose crashes, and improve performance.
Understand aggregate usage patterns so we can improve the game (e.g. which levels are hardest, which modes are most played).
Enforce fair play, prevent abuse, and apply rate limits.
Communicate with you if you contact us for support.
We do not use your information for profiling, for targeted advertising outside of Google's advertising platform, or for sale to third parties.
WordCraft uses the following third-party services. Each has its own privacy policy which governs how they handle information we send them:
Service
Purpose
Privacy policy
Firebase Authentication
Anonymous and Google sign-in
https://firebase.google.com/support/privacy
Cloud Firestore
Cloud save, daily challenges, combination cache
https://firebase.google.com/support/privacy
Firebase Realtime Database
Online matchmaking and match state
https://firebase.google.com/support/privacy
Cloud Functions for Firebase
Server-side game logic
https://firebase.google.com/support/privacy
Firebase Analytics
Aggregate usage analytics
https://firebase.google.com/support/privacy
Firebase Crashlytics
Crash reporting
https://firebase.google.com/support/privacy
Firebase Remote Config
Feature flags and configuration
https://firebase.google.com/support/privacy
Google AdMob
In-app advertising
https://policies.google.com/technologies/ads
Google Play Billing
In-app purchases
https://policies.google.com/privacy
Google Play Games Services
Sign-in and game services
https://policies.google.com/privacy
Together AI
Word-combination generation (word pairs only; no user data)
https://www.together.ai/privacy
We do not sell your personal information.
We share information only with:
Service providers listed in Section 3, strictly for the purposes described above.
Other players, only to the limited extent required to run an online match (for example, the list of combinations you made during a match is shown to your opponent on the post-match result screen). We do not share your real name, email, or account identifier with opponents.
Legal authorities, when required by law, court order, or to protect our legal rights.
If you have not purchased "Remove Ads", WordCraft displays advertisements served by Google AdMob on transition and result screens. These ads may be personalized based on your device's advertising ID and information collected by Google's advertising network.
You can control advertising personalization on your device via:
Android: Settings → Google → Ads → "Reset advertising ID" or "Opt out of Ads Personalization".
Purchasing the "Remove Ads" upgrade disables ad display within the app. Even with ads removed, a minimal set of AdMob SDK data may still be collected by Google until the SDK is removed in a future update.
Gameplay data is retained for as long as your account exists so you can continue your progress across devices.
Match records in the Realtime Database are retained for a limited period after the match ends (typically up to 30 days) for dispute resolution and then deleted.
Analytics and crash data are retained according to Firebase's default retention policies, typically up to 14 months for event data.
Combination cache entries are retained indefinitely and are not linked to any individual user — they are shared across all players.
Depending on your jurisdiction (such as the EU, UK, California, or other regions with applicable data-protection laws), you may have the right to:
Access the personal information we hold about you.
Correct inaccurate information.
Delete your account and associated personal data.
Withdraw consent to optional data processing.
Port your data to another service.
Object to or restrict certain processing.
Lodge a complaint with a data-protection authority.
To exercise any of these rights, contact us at the email address in Section 12. We will respond within 30 days.
You can request deletion of your WordCraft account at any time by emailing us from the email address associated with your Google sign-in (if applicable) or by including your in-app anonymous UID (visible in Settings). We will delete your cloud save, match history, and any personally identifiable information within 30 days. Note that anonymized entries in the shared combination cache will not be deleted, as they cannot be linked back to you.
WordCraft is suitable for a general audience and does not knowingly collect personal information from children under the age of 13 (or the equivalent minimum age in your jurisdiction). The game does not have chat, user-generated public profiles, or other features that would expose a child to personal contact with strangers.
If you believe a child has provided us with personal information, please contact us and we will take reasonable steps to delete it.
For users in the EEA and UK, the age of digital consent in your country applies. For users in the United States, we comply with the Children's Online Privacy Protection Act (COPPA).
We take reasonable technical and organizational measures to protect your information, including:
TLS encryption in transit between the app and our backend.
Firebase security rules that restrict access so each user can only read and write their own account data.
Server-side rate limiting to prevent abuse.
Access controls on our backend infrastructure.
No method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
Our backend is hosted on Google Cloud and Firebase infrastructure, which may store and process data in data centers located outside of your country of residence, including the United States. By using WordCraft, you consent to the transfer of your information to these locations. Where required, we rely on Google's Standard Contractual Clauses and other approved transfer mechanisms to protect your data.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify you within the app or via the Play Store listing. Continued use of WordCraft after a change takes effect constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy, our data practices, or want to exercise any of your rights, contact us at:
Email: muhammad.a.hassan.0@gmail.com
Please include "WordCraft Privacy" in the subject line so we can route your request promptly.