Wordvore Privacy Policy

Last updated: October 25, 2026

This privacy policy explains how Keklik Studio (“we”, “us”), the developer of the mobile game Wordvore (called Kelimecil in Turkish; “the app”), handles information when you use the app. Keklik Studio is based in Finland and is responsible (the “controller”) for the information described here. If you have any questions, write to [email protected].

1. Information we collect

1.1 Anonymous identifier

When you first open the app, it creates a random identifier on your device and keeps it in the device’s secure storage. Our server stores only a one-way hash of it, together with an account ID. This identifier is not your device’s hardware ID or advertising ID, and it is not linked to your name or contact details.

1.2 Account record

The account ID, the date the account was created, the date you last used the app, and the days on which you used it, with the app’s platform (Android or iPhone), version and build number.

1.3 Sign-in with Google or Apple (optional)

In Settings → Account you can link your progress to a Google or Apple account, so that you can continue on another phone. When you do, Google or Apple confirms the sign-in to us, and we store the account number they give us with your account. The sign-in also contains your email address (Apple may give a private relay address instead); we do not store it, and we do not receive your password. For Apple we also keep a token Apple gives us, used only to remove the link when your account is deleted. Signing in is optional: the whole game works without it.

1.4 Game data

The words you guess and their ranks, your games and solved words (your archive), the hints you reveal, your power-ups and stars and their use, and the language of each game.

1.5 In-game usage data

To see how the game is played and where it can be better (for example, where new players stop, or which levels are too hard), the app tells our server about some of what happens in it: when it is opened, the tutorial steps you reach or skip, when you open the shop or start, cancel or fail a purchase, whether a rewarded ad was offered, watched or failed to load, whether an ad between levels was shown, the answer given in the ad consent form, and requests to our server that failed. Each record holds the event, its time, the app’s platform, version and build number, and your account ID; never your IP address, device identifiers or advertising ID. We also count the words the game did not recognize, by day and language, without linking them to you, so that we can add missing words. These records stay on our own server and are not shared with anyone or used for ads.

1.6 Purchases

When you buy something in the app, Google Play (or the App Store) handles the payment. We receive and keep a purchase record: the product, the store’s order number and purchase token, its state (pending, completed or refunded), what it gave you and when. Our account ID is passed to the store with the purchase, so that the purchase belongs to your account. We never receive your card or other payment details.

1.7 Ads

The app shows ads through Google’s ad service, AdMob: ads between levels and, when you choose to watch one, rewarded ads that give you a power-up. Google’s ad software in the app collects information itself, as Google describes: your device’s advertising ID, your IP address (from which an approximate location is derived), your interactions with ads and the app, and diagnostic information. Google uses it to show, measure and protect ads and, where you allow it, to personalize them. For a rewarded ad we give Google a one-time ticket number, which Google sends back to our server to confirm that the ad was watched; we do not give Google our account ID or your game data.

1.8 Technical data

Like any internet service, our servers and our network provider Cloudflare receive your IP address with every request. We use it only to protect the service from abuse, with short-lived counters that expire within minutes. We do not store IP addresses in our database and we do not keep request logs.

1.9 Information that stays on your device

Your app language, theme and sound settings, whether you have finished the tutorial, and when ads were last shown (so that they are spaced out) are stored only on your device and are never sent to us. (The tutorial steps you reach are counted as described in 1.5.)

1.10 What we do not collect

Name, email address (we do not keep the one in a Google or Apple sign-in), phone number, precise location, contacts, photos, camera or microphone data, and payment card details. We do not read your advertising ID ourselves; only Google’s ad software does.

2. Why we use it

• To run the game: saving your progress, showing your archive, providing hints and power-ups, and choosing your next level.
• To give you what you bought, and to handle refunds.
• To show ads, which keep the game free, and to give you the power-up a rewarded ad earns.
• If you sign in with Google or Apple: to let you continue your progress on another device.
• To protect the service from abuse and keep it secure.
• To find and fix problems, and to understand how the game is played so that we can improve it.

We do not build profiles of you and we never sell your information.

3. Legal basis (GDPR)

We process this information because it is necessary to provide the game and what you bought (GDPR Article 6(1)(b)), and because of our legitimate interest in keeping the service secure and free of abuse, in improving the game and in funding it with ads (Article 6(1)(f)). Where you are asked, personalized ads and the use of advertising information on your device rely on your consent (Article 6(1)(a)), which you can withdraw at any time in Settings → Privacy options.

4. Who we share it with

We do not sell or rent your information. We use these service providers:

• Cloudflare, Inc. provides our network connection and security, and stores our encrypted backups. It processes IP addresses and request data in order to deliver the service. See Cloudflare’s privacy policy.
• Google (Google Ireland Limited in the EEA and Switzerland, Google LLC elsewhere) runs AdMob, the ads in the app. For the information its ad software collects, Google acts as a controller of its own: see Google’s privacy policy and how Google uses information from apps that use its services.
• Google Play (and Apple’s App Store on iPhone) handles in-app purchases and their payment under its own terms and privacy policy; our server asks Google Play to confirm each purchase.
• Google LLC and Apple Inc., only if you choose to sign in with them: they confirm your sign-in to us. Your Google or Apple account is covered by their own privacy policies (Google, Apple).

Our servers are located in Finland, in the European Union. Cloudflare and Google operate global networks, so your information may pass through or be stored in other countries, including the United States, under their data protection terms (such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework). We may also disclose information if the law requires it.

5. How long we keep it

• Your account, game data, purchase records and any linked Google or Apple account number: until you delete your account in the app. Accounts that have not been used for 12 months are deleted automatically together with all their data.
• In-game usage records: 90 days; after that only daily totals are kept, without your account ID. The days you used the app: until your account is deleted. Unrecognized words (not linked to you): 180 days.
• Encrypted backups: up to 6 months, after which they are deleted.
• Abuse-prevention counters: a few minutes.
• What Google’s ad software collects is kept by Google under its own policy.

6. Deleting your data

In the app, open Settings → Delete account and confirm. This immediately deletes your account and all of its data from our servers, including your purchase records and the link to a Google or Apple account (for Apple, we also revoke the link with Apple); copies in encrypted backups are removed within 6 months. Power-ups and stars you bought but have not used are deleted with the account; Remove ads can be brought back on a new account with Restore purchases in the shop. Google Play keeps its own record of your orders. Step-by-step instructions are on the delete account page.

We do not store email addresses, so we cannot find your account from an email address alone. If you linked a Google or Apple account, you can install the app on any phone, sign in with it in Settings → Account and delete the account there. Otherwise, if you no longer have the app, your account will be deleted automatically after 12 months without use. You can still contact us with any request.

7. Ads and your choices

• In the EEA, the UK and Switzerland the app asks you, with Google’s consent form, before ads are personalized. You can change your answer at any time in Settings → Privacy options.
• On Android you can delete your advertising ID or opt out of personalized ads in your phone’s settings (for example Settings → Google → Ads, or Settings → Privacy → Ads).
• Remove ads in the shop turns off the ads between levels. Rewarded ads are shown only when you ask for one.
• Ads in the app are limited to content suitable for a general audience.

8. Age requirement

Wordvore is intended for players aged 13 and over and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used the app, for example by linking a Google or Apple account, contact us and we will delete the account.

9. Your rights

Under the GDPR you may ask us to access, correct or delete your data, to restrict or object to its processing, and to receive a copy of it, and you may withdraw a consent you gave. You also have the right to complain to a data protection authority: in Finland, the Office of the Data Protection Ombudsman (tietosuoja.fi), or the authority in the country where you live. Players in Türkiye also have the rights of Law No. 6698 on the Protection of Personal Data (KVKK) and may apply to the Turkish Personal Data Protection Authority. Write to [email protected]; we reply within 30 days. As we do not store names or email addresses, we may need you to make some requests from inside the app.

10. Security

Information is encrypted in transit (HTTPS), the device identifier is stored only as a hash, Google and Apple sign-ins are checked against the providers’ published keys, purchases and ad rewards are confirmed by our server with Google before anything is given, access to our servers is restricted, and backups are encrypted.

11. Changes to this policy

If we change this policy, we will update the date at the top of this page. For significant changes we will also tell you in the app or in the store release notes.

12. Contact

Keklik Studio — [email protected]