WordHowler — Privacy Policy
Effective date: July 12, 2026 · Last updated: July 12, 2026
This Privacy Policy explains how Arvind Sethuraman (“we”, “us”, “our”) collects, uses, and shares information when you use the WordHowler mobile application (the “App”) on iOS and Android. By using the App you agree to the practices described here.
WordHowler is a real-time, massively-multiplayer word game. You compete on a shared global leaderboard using a display name you choose. We designed the App to collect as little personal information as reasonably possible.
1. A quick summary
- We do not ask for your real name, email address, phone number, or precise location to play.
- You choose a display username that is public on the global leaderboard.
- We collect gameplay data (scores, stats, streaks) and basic device/usage data to run the game and improve it.
- If you make an in-app purchase, Apple or Google handles the payment — we never see your card details. We store a purchase record to deliver your items.
- We show ads only to players who do not have an active purchase. If you have an active balance of swaps or hints, or an active Howl Pass, you see no ads.
- We use Google Firebase (analytics/crash reporting) and AppLovin MAX (ad mediation) as service providers. These may collect device identifiers.
- The App is not directed to children under 13 (see Section 10).
2. Information we collect
2.1 Information you provide
- Display username — the name you choose during onboarding (and any later change). It is checked for uniqueness and against a profanity filter, and is publicly visible to other players on leaderboards and in social features (Arch-Rivals, reactions).
- Support communications — if you email us, we receive your message and email address.
2.2 Information created when you play
- A device-scoped internal player ID (
internal_id), generated from your first username plus random characters. It is not shown to other players and is used as your account key. - Gameplay data: round scores, rounds played, streaks, best words, first-find results, “sufficient round” counts, and your swap/hint balances and power-up usage.
- Purchase records: the platform transaction identifier and validation status for any in-app purchase, and the items granted. Used to deliver purchases and prevent duplicate delivery.
Your identity is device-scoped. If you uninstall the App, the link between your device and your internal_id is removed from the device. See Sections 8 and 11.
2.3 Information collected automatically
- Device and technical data: device model, operating-system version, app version, language/region, and IP address.
- Usage and diagnostics: in-app events (screens viewed, rounds played, features used), performance data, and crash logs — collected via Google Firebase.
- Identifiers: mobile advertising identifiers (Apple IDFA on iOS, Google Advertising ID on Android) and similar SDK identifiers, subject to your consent choices (Section 6).
2.4 Advertising data (non-paying players only)
When we serve ads (rewarded video only) to players without an active purchase, our ad partners may collect a device advertising identifier, IP address, and ad-interaction data to serve and measure ads. Players with an active purchase (swaps/hints balance > 0, or an active Howl Pass) are not shown ads.
2.5 Push notifications
If you enable notifications, we store a device push token to send you occasional gameplay notifications (e.g., your current rank). You can turn these off in Settings or your OS settings.
3. How we use information
We use the information above to:
- Create and operate your player account and display your username on leaderboards.
- Run the game: compute scores, resolve rounds, rank players, and power social features.
- Deliver and validate in-app purchases and maintain your power-up balances.
- Show, cap, and measure ads to non-paying players, and keep the experience ad-free for paying players.
- Analyze usage, fix crashes, and improve the game.
- Detect, prevent, and address fraud, abuse, cheating, or technical issues.
- Comply with legal obligations.
4. Legal bases (EEA/UK users)
Where the GDPR/UK GDPR applies, we rely on: performance of a contract (running the game and delivering purchases), legitimate interests (securing and improving the App, non-personalized measurement), consent (personalized advertising and, on iOS, access to the advertising identifier), and legal obligation where applicable. You may withdraw consent at any time (Section 6).
5. Service providers and third-party SDKs
We share information with the following providers, who act on our behalf or as independent controllers for their own disclosed purposes. Review their policies for details:
| Provider | Purpose | Privacy policy |
|---|---|---|
| Apple (App Store, StoreKit) | App distribution, in-app purchases, receipt validation | apple.com/legal/privacy |
| Google (Google Play Billing) | App distribution, in-app purchases (Android) | policies.google.com/privacy |
| Amazon Web Services (AWS) | Cloud hosting of game servers and data | aws.amazon.com/privacy |
| Google Firebase | Analytics and crash reporting | firebase.google.com/support/privacy |
| AppLovin MAX | Ad mediation (serves rewarded ads) | applovin.com/privacy |
| Mediated ad networks (e.g., Google AdMob, Unity Ads, and others enabled in MAX) | Bid on and serve rewarded ads | See each network's policy; AdMob: policies.google.com/privacy |
The specific mediated ad networks may change over time. Ad partners may act as independent controllers of the advertising data they collect.
6. Advertising and your choices
- Rewarded video only. We use opt-in rewarded video ads; you choose whether to watch. We do not show forced full-screen ads, banners, or ads during active gameplay.
- Ad-free by purchase. Players with an active swaps/hints balance or an active Howl Pass are not shown ads.
- iOS — App Tracking Transparency (ATT). Before accessing the IDFA for personalized ads, iOS will ask your permission. If you decline, we and our partners will not use the IDFA to track you; ads may still be shown on a non-personalized basis.
- Android — Advertising ID. You can reset or delete your Advertising ID, or opt out of personalized ads, in your device settings.
- Consent (EEA/UK). Where required, we present a consent request (via our ad/analytics SDK's consent tool) for personalized advertising; you may change your choice later.
7. How we share information
We do not sell your personal information for money. We share information only:
- with the service providers in Section 5, for the purposes described;
- with ad partners, as described in Sections 2.4 and 6 (non-paying players);
- to comply with law, enforce our terms, or protect rights, safety, and security;
- in connection with a business transfer (merger, acquisition, or asset sale), subject to this policy.
Some sharing for advertising/analytics may be considered “sharing” or a “sale” under certain U.S. state laws (e.g., California). See Section 9 for your choices.
8. Data retention
- Player records (username,
internal_id, gameplay stats, purchase records) are retained while your account is active and as needed to operate the game and meet legal/accounting obligations. - Per-round results are short-lived and expire shortly after each round (a rolling window measured in minutes).
- If you uninstall the App, the device-to-account link is removed on the device; your server-side record may persist as an orphaned record (unreachable from any device) until deleted per our retention practices or your request (Section 9).
9. Your rights and choices
Depending on where you live (e.g., EEA/UK under GDPR, California under CCPA/CPRA, and other jurisdictions), you may have the right to access, correct, delete, or port your information, to object to or restrict certain processing, to opt out of personalized advertising, and to withdraw consent.
- In-app: you can change your display username in Settings, and turn notifications and ad-tracking permission on or off.
- Deletion: the current version of the App does not include an in-app “delete account” button. To request deletion of your server-side record, email us at theappdreamer@gmail.com with your display username (and, if you have it, your
internal_idfrom Settings → About). We will verify and process requests as required by law. - Opt out of personalized ads: use the ATT prompt (iOS), your Advertising ID settings (Android), or the in-app consent tool where offered.
We will not discriminate against you for exercising these rights. To exercise any right, contact theappdreamer@gmail.com.
10. Children's privacy
WordHowler is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact theappdreamer@gmail.com and we will delete it. Because usernames are public and the App shows advertising to non-paying users, the App is intended for teen and adult audiences per its store age rating.
11. International data transfers
We operate globally and use providers (including in the United States) that may process your information outside your country. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.
12. Data security
We use reasonable technical and organizational measures to protect information, including encryption of data in transit, server-side validation of purchases, and encryption-at-rest of certain on-device content. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
13. Changes to this policy
We may update this policy from time to time. We will change the “Last updated” date above and, for material changes, provide a more prominent notice in the App or store listing. Your continued use after an update means you accept the revised policy.
14. Contact us
Questions or requests about this policy or your data:
Email: theappdreamer@gmail.com
Governing law: the laws of the State of California, United States, without regard to conflict-of-laws rules.