Privacy

Last updated: October 2026

This privacy notice is prepared with the EU General Data Protection Regulation (GDPR) in mind.

Data controller: Christian Pesch, Rosenhagener Str. 30, 12621 Berlin, Germany

Hosting: The game backend is operated in the European Union. No subprocessors are used. No separate third-party hosting or cloud provider acts as a processor on our behalf. Communication between the app and the game backend uses encrypted connections (HTTPS, TLS).

This app does not integrate third-party advertising or analytics SDKs.

No transfer of personal data to third countries is intended.

Local data on your device

The app persists data on your device using the platform’s normal app storage. This includes: a pseudonymous player identifier (UUID) created for your installation, used when you use online features or submit a dictionary word suggestion; your chosen display name, and—for local two-player games on this device—the display name for player two; in-app dialog flags (for example whether you have confirmed your online display name); gameplay statistics, achievements, and progress; music and related audio preferences; and word-of-the-day progress (such as streaks and completion).

This supports progress tracking and in-game rewards, remembering your settings, and matchmaking for online matches (summary figures may also be sent to the server as described below). This data is kept on the device until the application is deleted. You can reset statistics and progress in the app.

Local and online game modes

The following modes run on your device without using the game backend: 1P vs CPU, and 2P - on this device. Word of the day is played on your device. The mode 2P - online uses the backend as described below.

Word meaning in the browser

After a word-of-the-day game has finished, you can ask what the revealed word means. If you choose that option, the app opens your device’s browser and sends a search to Ecosia (https://www.ecosia.org). The search text is the revealed word and a short question about its meaning and grammatical form. The app does not include your player identifier, display name, or scores in that search, and it does not receive the results. Ecosia is an independent provider. Your browser sends the search, together with technical data such as your IP address, to Ecosia. Ecosia’s own privacy notice (https://www.ecosia.org/privacy) explains how Ecosia and the partners it uses to answer searches process that request. You can skip this option. The game does not change if you do.

Online two-player (2P online)

When you start or join an online match, the app connects to this backend. For sign-in or joining a session, the following are sent: a pseudonymous player ID (UUID), your chosen display name, the selected game language, your secret word for that match, your device platform (e.g. iOS, Android, macOS), and summary matchmaking figures from this app (games played and multiplayer wins). Online 2P matches are subject to automated matchmaking, which may use these submitted statistical figures. As with any internet service, technical connection data (such as IP addresses) may be processed on the server for service operation, abuse analysis, and error analysis.

Suggesting a new dictionary word

This only happens if you explicitly confirm in the in-app dialog. A one-off request then sends: the suggested word, the dictionary language, your player UUID, platform, and app/dictionary version identifiers. You may refuse without disadvantage.

The high score table (all-time leaderboard)

A player’s word-of-the-day result is sent to the server only if that player consents, in order to maintain the all-time leaderboard. What is sent is the player UUID, display name, dictionary language, the number of rounds it took to guess the word (or that the word was not guessed), and the local calendar date. An entry is removed from the leaderboard 7 days after the last shared word-of-the-day result. This gives other players the chance to move up the leaderboard.

Backend data retention

Online matches: Match-related information is stored on the backend only while a match is ongoing—that includes invitation, waiting for players, and while the game is in progress.

Dictionary word suggestions: Suggestions may be stored for up to six months for review. After a proposal is reviewed, it is either accepted or rejected and then removed from the backend.

Word of the day high scores: An entry is removed from the leaderboard 7 days after the last shared word-of-the-day result. You can also request erasure at any time, which removes your high-score records and streak information from the server.

Technical server logs: Connection and operations logs are retained for up to six months to ensure service operation, detect abuse, and perform error analysis.

Legal basis (where applicable)

Where required by applicable law, processing for online gameplay and session operation is based on contract performance or steps prior to entering into a contract. Optional dictionary word suggestions and optional word-of-the-day high scores are based on your consent. Processing needed for secure technical operation, abuse analysis, and error analysis is based on legitimate interests where applicable (in particular maintaining service security and stability, abuse/fraud prevention, and troubleshooting/quality assurance).

Your rights

Under applicable data protection law you have rights including access, rectification, erasure, restriction, data portability, and objection where applicable. You may withdraw consent for word suggestions and high scores at any time with effect for the future; withdrawal does not affect the lawfulness of processing before withdrawal. You have the right to lodge a complaint with a supervisory authority.

Supervisory authority

You may lodge a complaint with a competent data protection supervisory authority, in particular the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI). If you are an EU/EEA resident in another country, you may also contact the supervisory authority at your habitual place of residence.

Response timelines

We respond to privacy-rights requests within the timelines required by applicable law, typically within one month of receiving your request (with a lawful extension where permitted for complex cases).

Contact and your player ID

To exercise your rights or withdraw consent, email the controller at the address in the imprint and include your player UUID so we can identify your data. Copy your player UUID to the clipboard by long-pressing the game title on the main menu.

Updates to this privacy notice

We may update this privacy notice from time to time. The current version is the one published in the app and in the public privacy notice, identified by its last-updated date.