Privacy
Privacy policy
Last updated: 2026-06-29.
What we collect
Words Attraction does not require an account. By default the app runs completely anonymously — no name, email, or phone number is collected. Below is the full list of data the app reads or sends off-device.
- App activity / game progress. Which puzzles you have completed, your current streak, hint balance, and archive access. Stored in Firebase Firestore keyed to your anonymous device id so progress survives a reinstall.
- Device or other identifiers. A Firebase installation id generated on first launch is used as the database key for your progress. It is not an advertising id, MAC address, IMEI, or anything tied to your real identity — it changes if you uninstall and reinstall the app.
- Crash logs and diagnostics. Firebase Crashlytics reports stack traces and basic device metadata (OS version, model, free memory) when the app crashes. No personally identifiable information is attached.
- Purchase history. When you make an in-app purchase, Apple or Google sends a purchase receipt to RevenueCat (see "Sub-processors" below). We never see your card details, billing address, or store account.
- Advertising ID. The app has one optional ad — a rewarded video you tap to watch for +1 bonus hint — and nothing else: no banners and no interstitials. To serve and frequency-cap that video, Google AdMob reads the device advertising ID. Where required we show a consent prompt first (the Google UMP form on Android, App Tracking Transparency on iOS); if you decline, the ad still works but is served non-personalised. See the "Advertising" section below.
We do not collect contacts, photos, location, microphone or camera input, messages, calendar, health or fitness data, or files outside the app sandbox.
How the data is used
- App functionality — sync progress and hint balance across reinstalls; grant purchased entitlements.
- Analytics — aggregate crash and stability metrics to fix bugs.
- Account management — RevenueCat uses the anonymous id to remember which device owns each entitlement.
- Advertising — if you opt in to the rewarded video, your advertising id is sent to Google AdMob to serve and frequency-cap that single ad.
Beyond that one opt-in ad, we do not build advertising profiles about you, run banner or interstitial ads, or sell your data — and when you decline tracking consent the rewarded video is served non-personalised.
Advertising
Words Attraction has a single ad: an opt-in rewarded video you can choose to watch to earn +1 bonus hint once you have used the day's free hints. There are no banner ads and no interstitials, and no ad is ever shown unless you tap to watch one. The ad is served by Google AdMob, which reads the device advertising id to deliver and frequency-cap it. Where required by your region or platform, a consent prompt appears first (the Google UMP form on Android, Apple's App Tracking Transparency on iOS); if you decline, the rewarded video still works but is served non-personalised. We never use it for cross-app profiling, and we do not sell your data.
Encryption in transit
All traffic between the app and our sub-processors uses HTTPS / TLS. No data is sent over plaintext HTTP.
Sub-processors
Words Attraction uses the following third parties to run the service. Each is bound by its own privacy policy; we share only the data described above.
- Google (Firebase Firestore, Authentication, Crashlytics). Hosts progress data, manages the anonymous Firebase Auth uid, and receives crash reports. See Firebase data & privacy and Google Privacy Policy.
- Google AdMob. Serves the opt-in rewarded video ad. Receives the device advertising id to deliver and frequency-cap the ad, and serves non-personalised when you decline consent. See how AdMob uses data and the Google Privacy Policy.
- RevenueCat. Verifies in-app purchases across devices. Receives the anonymous install id and the store-supplied purchase token — never your card or billing details. See RevenueCat privacy policy.
- Apple / Google (App Store, Play Store). Process the actual transactions. Their privacy policies cover that flow.
- Google Analytics 4 (this website only). See the "This website" section below.
Retention
Progress data is kept indefinitely while you use the app — that's what makes the reinstall-and-continue flow work. If you ask us to delete it (see below) we remove it promptly. Crash logs are kept by Firebase Crashlytics for up to 90 days, after which Google deletes them automatically.
Your rights & data deletion
To request deletion of the data we hold, email support@swtlm.com with the subject line "Words Attraction data deletion request". We confirm deletion within 30 days.
If you live in the EU/EEA, the UK, or California you also have the right to access, correct, or restrict processing of any data we hold, and to lodge a complaint with your supervisory authority. Send any of those requests to the same address above.
Children's privacy
Words Attraction is rated for all ages. Although the app is suitable for children, it is not directed specifically at children under 13 and is not enrolled in Apple's Kids category or Google Play Families. We do not knowingly collect personal information from children under 13. If you believe a child has provided information through the app, contact us and we will delete it.
This website
This landing page uses Google Analytics 4 (GA4) to measure aggregate visitor behaviour — pages visited, session count, and referral source. Analytics cookies (_ga, _ga_*) are set only after you accept via the cookie banner on first visit. No marketing cookies, ad-targeting cookies, or tracking pixels are set beyond Google Analytics. You can withdraw consent at any time by clearing your browser's local storage for this site (the key is ga_consent_words-suite-game).
Changes to this policy
We may revise this policy as the app evolves. Material changes will be reflected here with an updated "last updated" date. Continued use of the app after a change constitutes acceptance of the revised policy.
Contact
Questions: support@swtlm.com.