1. Introduction
Welcome to Wordletter Unlimited ("App", "we", "our", or "us"). This Privacy Policy explains how we collect, use, and protect information when you use our mobile application. We are committed to protecting your privacy and handling any personal data we obtain with care and respect.
By downloading or using Wordletter Unlimited, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the App.
2. Data Controller
Name: Mustafa Burak Acarkan
Company: Endor Bilişim
Email: info@endorbilisim.com
Address: Esentepe Mahallesi Talatpaşa Caddesi No: 5 / 1, 34394 Şişli / İstanbul / Türkiye
Phone: +90 212 945 42 98
3. Information We Collect
3.1 Information You Provide (Optional Account Sign-In)
Wordletter Unlimited does not require you to create an account. The App is fully playable without signing in. However, you may optionally connect your account to enable leaderboard participation and cross-device synchronisation. If you choose to sign in using Google Sign-In or Google Play Games, we receive and store the following data:
- Display name (your Google account name or Play Games gamer tag)
- Profile photo URL (from your Google account)
- Firebase-assigned User ID (UID) — a pseudonymous identifier
- Sign-in provider (Google / Play Games)
- Account creation date and last sign-in date
-
Device platform (
androidorios)
Your email address is handled solely by Google Firebase Authentication as part of the sign-in flow; we do not independently read, store, or process your email address in our own application database.
Account creation is entirely optional. Anonymous (guest) users are not required to provide any personal information.
3.2 Data Stored Locally on Your Device
For all users (including those who do not sign in), the App stores certain preferences and game progress data locally on your device using SharedPreferences (Android) / NSUserDefaults (iOS). This includes settings, statistics, and game state. This data never leaves your device and is not transmitted to us.
3.3 Data Stored on Our Servers (Firestore)
When you sign in, we store the following data in Google Cloud Firestore (hosted in the EU — europe-west region), associated with your Firebase UID:
| Collection | Fields Stored | Purpose |
|---|---|---|
users/{uid}
|
displayName, photoUrl, createdAt, updatedAt, platform | User profile for leaderboard display |
arcade_scores/{scoreId}
|
uid, displayName, score, finalScore, activeOptions, wordLength, timestamp, platform, appVersion | Global leaderboard — added when you submit a score |
This data is stored only if you sign in. If you delete your account (see Section 8), all of this data is permanently deleted from our servers.
3.4 Data Collected by Third-Party Services
The App integrates the following third-party services, each with their own data collection practices:
Google AdMob (Advertising)
We use Google AdMob to display advertisements. AdMob may collect device identifiers (e.g., advertising ID), IP address, and usage data to serve personalised or non-personalised ads. AdMob's data practices are governed by Google's Privacy Policy.
Firebase Authentication (Google LLC)
We use Firebase Authentication to manage optional user sign-in. Firebase Auth processes your Google or Play Games credentials to issue a secure session token. Firebase stores authentication tokens on our behalf. See Firebase Privacy and Security.
Firebase Crashlytics (Google LLC)
We use Firebase Crashlytics to detect and diagnose crashes. Crashlytics automatically collects the following when a crash or error occurs:
- Crash and error stack traces
- Device model and operating system version
- App version and build number
- Firebase Installation ID (a pseudonymous device identifier)
- Time of crash
This data is used solely to identify and fix software bugs. It does not include your name, email address, or game content. See Firebase Privacy and Security.
Google Sign-In & Google Play Games Services
On Android, you may choose to authenticate using Google Sign-In or Google Play Games Services. These services are provided by Google LLC and are governed by Google's Privacy Policy. Play Games may collect usage data, device identifiers, and game activity as described in Google's policies.
Google Play Services
On Android devices, Google Play Services may collect certain diagnostic and analytics data independently. Please refer to Google's Privacy Policy for details.
4. How We Use Information
We use the information collected (by us and our third-party partners) for the following purposes only:
- Providing and maintaining the App's functionality
- Enabling optional account features (leaderboard, cross-device sync)
- Displaying your name and avatar on the global leaderboard (only if you have signed in)
- Diagnosing crashes and errors via Crashlytics to improve App stability
- Displaying advertisements to support the free availability of the App
- Analysing aggregate, anonymised usage patterns to improve the App
- Complying with legal obligations
We do not use your data for any purpose other than those listed above.
5. Advertising & Your Ad Choices
The App is supported by advertising through Google AdMob. You may opt out of personalised advertising at any time by adjusting the advertising settings on your device:
- Android: Settings → Google → Ads → Reset advertising ID or opt out of personalised ads
- iOS: Settings → Privacy → Tracking → disable "Allow Apps to Request to Track"
Even if you opt out of personalised ads, you may still see non-personalised advertisements. Users who purchase the optional "Remove Ads" in-app purchase will no longer be shown any advertisements.
6. Data Sharing & Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share information only in the following limited circumstances:
- With third-party service providers (Google AdMob, Firebase / Google LLC) as described in Section 3, solely as necessary to provide those services
- If required by law, court order, or governmental authority
- To protect the rights, property, or safety of Endor Bilişim, users, or others
Your leaderboard display name and score are visible to all users of the App. You may remove this data at any time by deleting your account (see Section 8).
7. Data Retention
Local data (game progress, settings) persists on your device until you uninstall the App or clear the App's data from your device settings.
Server data (Firestore user profile and arcade scores) is retained for as long as your account exists. When you delete your account, all of your data stored in Firestore is permanently and irreversibly deleted within seconds of the deletion request (see Section 8).
Crashlytics data is retained by Firebase for 90 days, after which it is automatically deleted.
8. Account Deletion
You may delete your account at any time from within the App: Settings → Account → Delete Account.
Deleting your account will permanently and irreversibly:
- Delete all of your arcade scores from the leaderboard
- Delete your user profile from our servers
- Delete your Firebase Authentication account
Local data (settings, game statistics) stored on your device will remain until you uninstall the App or clear the App's data manually.
9. Children's Privacy
The App is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided personal information through the App, please contact us at info@endorbilisim.com and we will take appropriate steps to remove such information.
10. Your Rights
Depending on your location, you may have the following rights under applicable data protection laws (including GDPR and KVKK):
- The right to access the personal data we hold about you
- The right to rectification of inaccurate data
- The right to erasure ("right to be forgotten") — exercisable directly in-App via Settings → Account → Delete Account
- The right to restrict or object to processing
- The right to data portability
- The right to withdraw consent at any time
To exercise any of these rights, contact us at info@endorbilisim.com. We will respond within 30 days.
11. Security
We take reasonable technical and organisational measures to protect data:
- Data stored in Firebase Firestore is encrypted at rest and in transit (TLS 1.2+)
- Access to Firestore is controlled by security rules; users may only write to their own records
- Crashlytics data is processed by Google's secure infrastructure
However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of data processed by third-party services such as Google Firebase or Google AdMob.
12. Third-Party Links
The App may display advertisements or links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before interacting with them.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the App after any changes constitutes your acceptance of the updated Privacy Policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out to us:
Endor Bilişim – Mustafa Burak Acarkan
Esentepe Mahallesi Talatpaşa Caddesi No: 5 / 1, 34394 Şişli / İstanbul / Türkiye