Privacy Policy — Wordfly Puzzle

We use Mixpanel to understand how the game is played, so we can fix what is confusing and build what is used.

Events are stored on Mixpanel's EU infrastructure (api-eu.mixpanel.com).

What we never send to Mixpanel: the words in a puzzle, your guesses, the words you find, your Game Center display name, or any free text. Every value we send is a number, a true/false flag, or one of a fixed list of words chosen by us in the code — for example hint_type: "reveal_word" or result: "oneaway".

Before you sign in to Game Center, the Mixpanel profile is tied only to the random identifier described above. That identifier is persistent, so the profile is not anonymous — it is a profile for your device that is not linked to your name. It is not your advertising identifier and is not derived from any hardware identifier. If you sign in to Game Center, we attach your Game Center player identifier to that profile, so from that point on the analytics data is linked to a persistent identifier for you.

How to turn it off: Settings → Account → "Share usage data". When you switch it off, the app stops sending events immediately, tells Mixpanel to delete the profile associated with your device, discards anything still queued on the device, and clears the identifier. Switching it back on starts a fresh, new identifier.

In the European Economic Area and the United Kingdom, analytics stays off until you switch it on. Everywhere else the setting is on by default and you can switch it off at any time.

If you do not have Wordfly Plus, the game shows two kinds of ad: a rewarded video you choose to watch in exchange for two hints, and an interstitial after a round ends (at most once every three rounds, and never within three minutes of the previous one). The daily Groups puzzle never shows an interstitial.

Third parties, including Google, use cookies and device identifiers to serve and measure ads. You can read how Google uses this data at google.com/policies/technologies/partner-sites and manage your ad settings at adssettings.google.com. US users can also opt out at optout.aboutads.info.

Consent (EEA and UK). The first time the game starts, Google's User Messaging Platform shows a consent form before any ad SDK is initialised. If you do not consent, ads are not requested. You can change that choice at any time in Settings → Account → "Privacy options".

App Tracking Transparency (iOS). As of this version, Wordfly Puzzle does not ask for permission to track you across other companies' apps and websites, and does not request your device's advertising identifier for that purpose. Because we do not ask for tracking permission, iOS does not give Wordfly Puzzle or Google your advertising identifier, and the ads you see are not personalised using it.

Wordfly Plus removes all ads, rewarded and interstitial. Plus subscribers are not shown the "Watch an ad" button at all.

Signing in to Game Center is optional and never forced. You can play everything without it.

Your Game Center display name is stored on your device and shown in Settings and on your profile. It is never sent to Mixpanel or to any other company. We read friends' names from Game Center to draw the leaderboard; we do not store them. Your Game Center player identifier is a separate value, and it is sent to Mixpanel when you sign in — see section 3.1.

The Friends screen says friends come from "Game Center and contacts you invite". The app never reads your address book. Inviting a friend simply opens the standard iOS share sheet with a line of text; we do not see who you send it to or which app you use.

Your progress is stored in a single file on your device. It contains your streak and best streak, your results for past daily puzzles (date, whether you won, how many mistakes, how many seconds, and the coloured pattern of your guesses), your Letter Grid history, your campaign and Word Drop levels and stars, your hints, your settings, your badges, and your Game Center display name if you signed in.

It contains no email address, no password, no account identifier, no device identifier, no IP address and no location data.

If you are signed in to iCloud on your device, that same file is copied to your private iCloud key-value storage so your progress follows you between your own devices. It goes to your own iCloud account — we cannot read it, and it is not sent to any server of ours. If you are not signed in to iCloud, nothing is copied.

Settings → Account → "Reset progress" erases the file and replaces it with a fresh one; the iCloud copy is overwritten the next time your progress saves.

Wordfly Plus is sold as a monthly or yearly auto-renewing subscription. Hints are also sold in packs. Apple is the seller. We never see your payment details.

We do not send your Game Center identifier, any device identifier or any email address to RevenueCat. Manage or cancel your subscription in iOS Settings → your Apple ID → Subscriptions. Refunds are handled by Apple at reportaproblem.apple.com.

Reminders are scheduled entirely on your device by iOS. There is no push notification service and no device token, so nothing is pushed to your phone from us and no reminder text ever leaves your device. If usage data is switched on, we do record that you set a reminder and the hour you chose, as one of the analytics events described in section 3.1.

Turn reminders off in Settings → Play → "Daily reminder", or in iOS Settings.

• Stop analytics and delete your analytics profile: Settings → Account → "Share usage data" → off.
• Change your ad consent (EEA/UK): Settings → Account → "Privacy options", or reinstall the app to see the consent form again.
• Stop personalised ads (iOS): Settings → Privacy & Security → Tracking.
• Delete all your progress: Settings → Account → "Reset progress".
• Delete everything: delete the app, then remove its iCloud data in iOS Settings → your Apple ID → iCloud.
• Ask us something else: email privacy@pocketninjagames.com.

We do not sell personal information for money. Letting our ad provider use device identifiers for personalised ads counts as "sharing" for cross-context behavioural advertising under Californian law.

We do not collect sensitive personal information as that term is defined in the California Consumer Privacy Act, and we do not collect the equivalent "sensitive data" categories under the Virginia, Colorado, Connecticut, Texas, Oregon, Montana, Minnesota, Maryland or other comparable state laws. We therefore have nothing to limit under the right to limit the use of sensitive personal information, and we ask for no consent to process sensitive data because we process none.

You have the right to know, to delete, to correct, to opt out of sale or sharing, and not to be treated differently for exercising those rights. Residents of Virginia, Colorado, Connecticut, Texas, Oregon, Montana, Minnesota, Maryland and other states with comparable laws have equivalent rights.

To opt out of sharing for targeted advertising: decline in the consent form, or turn tracking off in iOS Settings → Privacy & Security → Tracking. This applies to that device. To make any other request: email privacy@pocketninjagames.com, or use the in-app controls listed under "Your choices" above. We will respond within the time the applicable law allows, which is 45 days in most states, extendable once.

If we refuse your request, you can appeal. Reply to our decision, or send a new email to privacy@pocketninjagames.com with "Appeal" in the subject line, within 60 days of our decision. Include the decision you are appealing and why you disagree. A person who did not make the original decision will review it, and we will write back with the outcome and the reasons for it within 45 days. If we deny the appeal, we will tell you how to complain to your state attorney general, and you may contact them directly — for example the Texas Attorney General's consumer complaint form, the Colorado Attorney General, or the Connecticut Attorney General.