Wordtumbler is made by Farstride Studio LLC. On this page, "we" means them.
The short version, and it is the honest one:
The rest of this page is the detail.
When you first open Wordtumbler, the app creates an anonymous account. You are a random identifier and nothing else. Attached to that identifier, we store:
Your name in the game. The game gives you one when your account is made: two words from a list we wrote, like SparklyBeagle or CheeryAcorn. You can change it in Settings, by picking from the same list. It is public.
Your results. For each daily puzzle you submit: which day it was, how many boards you cleared, your points, your total time, how long each board took you, and when you sent it. Also the version of the app and of the game's rules, so a result can always be traced back to the rules it was played by. Replays are stored separately: which day, how many boards, your points and your time.
What your results earn. Your badges, and your place in each season.
Your friends. If you connect with someone using a code or an invite link, we store that the two of you follow each other. We also store any codes and invite links you make, who used each link, and anyone you have blocked.
Whether you have anything unlocked. There is nothing to buy, so today this is empty for everybody.
Sign-in details. When the app signs in to our server, the sign-in system records the internet (IP) address it connected from, and a short line naming the app's version and your phone's iOS version. It is kept with your account and used for nothing else.
Where your touches land during a game. Used only to fix bugs. You can turn it off. See "Touch data" below.
That is everything. Your settings, and your practice games, stay on your phone.
Your name in the game is public. It appears on leaderboards next to your results. That is what a leaderboard is.
It is always two words from a list we wrote. You cannot type one, and our server refuses any name that is not built from the list. Nothing in the game lets you put your own words in front of another player.
If you change your name, your old one is kept for you for 24 hours, so you can change back. After that, someone else can take it.
Practice and Quick word need no connection. The words are inside the app. A practice game is never ranked and its result is never sent to us. Only a ranked daily run, or a replay of a day, sends a result.
After each game, including practice, the app sends us a record of your touches. For each touch: where on the screen it landed, when, how near the balls were, and whether it caught, placed or dropped a ball. It also says which kind of game it was, which day (not for practice), and the app's version. It does not include the letters, anything you type, or anything else about your phone.
We use it only to find bugs and improve the game, for example to see why a ball was hard to catch. It is stored with your anonymous account until you delete the account, so we can compare games over time. Only we can read it. Other players cannot, and it is never used for your score or rank. We never sell or share it. Deleting your account deletes it straight away.
It is on unless you turn it off: Settings › Testing › Send touch data. When it is off, nothing is recorded or sent. Turning it off does not delete what was already sent. Deleting your account does.
The app sends which day you played and how long each board took. It does not send your result. The server works your result out itself, from the times.
It is done that way so nobody can send a fake result. It also means the message is as small as it can be.
Other players, in the app: your name, and your results on the leaderboards and season tables you appear on. If you add friends, they see your results on their friends list.
Other players, outside the app: anyone with an account can read what the leaderboards show: your name in the game and, for each day you played, how far you got, your points, your best chain and your total time, and how many times you replayed a past day. We do not publish what time you played, how long each word took, or which version of the app you use. The boards update as results come in, so someone watching one closely can tell roughly when yours arrived. Nothing else about you is readable.
Only you: your badges, your blocks, and your codes and invite links. Someone who uses your invite link is shown to you.
Only us: your touch data, and your sign-in details.
We do not share anything with anyone else. We have no advertisers, no analytics partners and no data brokers. Our hosting provider, Supabase, stores the database for us and does not use it for anything of their own. Like any server, their systems see the internet address your phone connects from.
The same developer makes another app that handles health data. Wordtumbler's database is kept completely apart from it: a separate organisation at our hosting provider, with separate projects and separate keys. Nothing in Wordtumbler can reach that data, and nothing from the two apps is ever combined.
Everything: until you delete your account. That includes touch data. Results do not expire, because past days stay playable and their leaderboards stay open.
Settings › Account › Delete my account and data.
It happens straight away, and it cannot be undone.
What goes: your account, your name, every ranked result, every replay, every board time, your badges and season places, your friends, blocks, codes and invite links, your sign-in details, and your touch data. The database removes it together or not at all, so nothing is left half-deleted.
Your name becomes available for someone else.
Do this before you delete the app. Deleting the app removes your access to the button. Because there is no email address on the account, we have no way to find out which account was yours.
If you have already deleted the app, write to support@wordtumbler.app, but we will probably not be able to tell which account was yours.
Two things: a copy in backups, for a short time, and a note with nothing about you in it.
Backups. Our hosting provider keeps backups of the database for a short time, so we can recover from a mistake. An account you delete stays in those backups until they are replaced, and then it is gone. We do not restore deleted accounts from them.
A note that it happened. We keep a line saying an account was deleted, when, and how many results and friends went with it, so we can check that deleting works. It has no name, no account number and nothing else that could point to you.
Your sign-in details (see "What we store") are deleted with your account. Our sign-in provider can also keep a separate history of sign-ins, which would not be deleted with your account. We have that history switched off, so there is nothing in it.
Wordtumbler is rated 4+. It asks nobody, of any age, for personal information. There is no sign-up, no email, no chat, no messaging, no text that other players write, no adverts and nothing to buy.
We do not ask your age, because then we would be collecting your age.
Like every player, a child's phone sends us touch data unless it is turned off, and the sign-in details described above. A parent can turn touch data off in Settings › Testing, and can delete everything in Settings › Account.
Depending on where you live, you may have the right to see, correct or delete what we hold about you.
Deleting is a button in the app, and it is complete.
For anything else, write to support@wordtumbler.app with your name in the game. Because the account is anonymous, we cannot check that an account is yours. Anyone who knows a name could ask about it. So we will not send an account's contents to an email address. The screens in the app are the safe route, because holding the phone is the only proof there is.
If we change what we store, this page changes first, and says what changed.
Farstride Studio LLC