Privacy policy

The short version

• We never sell your data, and our games have no ads, ad trackers or analytics.
• We collect only what a feature needs to work, and we list it all below.
• Playing on your own needs no account, and nothing leaves your device.
• You can delete your account, and everything we hold about you, from inside the game at any time.

Playing on your own

Single-player games, settings, statistics and achievements are saved on your device, or in your browser on the web versions. We don't receive them unless you turn on an online feature below.

Playing online

Online play is optional, and only Truly Wordy and Cabin Classics have it. If you set it up, our servers keep the following:

• Your account: a random ID, a friend code, the times it was created and last seen, and scrambled (hashed) copies of its secret key and recovery code. We never keep the originals.
• Names: in Truly Wordy, a generated public name (such as BrightOtter-42) and, if you add one, a name only your friends see. In Cabin Classics, the name you choose for friends. Names are filtered for offensive words.
• Friends: who you're friends with, and requests waiting for an answer. The times of your recent requests are kept for two days, to limit spam.
• Games: the online games you play, their moves and results, and public matches.
• Daily results you send to friends: the score and how you did. Truly Wordy keeps them about a week, and Cabin Classics for 35 days.
• Your Profile (Truly Wordy): game statistics and recent achievements, shown to your friends. You can switch "Show my profile to friends" off.
• Save sync: a compressed copy of your progress (statistics, achievements, styles, daily results and play preferences), so it can follow you to your other devices. For each linked device we keep a random ID, a hashed secret, and when it was linked and last seen. A link code is kept, hashed, for up to 10 minutes.
• Notifications (Truly Wordy, only if you switch them on): your choices, quiet hours if you set them, and a push address for each device (at most five). Notifications are delivered by Google's Firebase Cloud Messaging, which uses a device ID of its own to do so.
• Purchases: payments are handled by Google Play, and we never see your payment details. For the Online Pass, we keep a hashed copy of the purchase token so a purchase counts only once.

Feedback you send

When you use "Send feedback", we receive your message, the app version, your device's platform and system version, and the time. Your name and account are included only if you choose to add them.

What we don't collect

No email address (unless you email us), no real name, contacts, location, photos or advertising ID. We don't store IP addresses: our servers hold them briefly in memory to stop abuse, then forget them. Our server logs record only short error codes, never anything about you.

Who else is involved

• Cloudflare runs our servers.
• Google runs Google Play (downloads, purchases and its own crash reports), Firebase Cloud Messaging (notifications), and Firebase App Distribution (test versions, for people we invite).

Each handles data under its own privacy policy. We share nothing with anyone else.

Keeping and deleting

We keep online data only while your account exists, or for the shorter times given above. Delete account, in each game's account settings, removes everything we hold about you at once. Any feedback you sent stays, with your name and account removed. You can also email privacy@notslopgames.com and we'll delete it for you.

Children

Our games are family-friendly. Online play needs no personal information, and there's no chat or messaging between players. We don't knowingly collect personal information from children under 13. If you think a child has shared some, email privacy@notslopgames.com and we'll remove it.

Changes and contact

If this policy changes, we'll update the date above and say what changed in the apps' notes. Questions: privacy@notslopgames.com.