Privacy policy
Explains what data we process for the Word Loop game and this website, why, and what your options are.
Who we are
Word Loop is developed and published by ZTN Suite. For anything about privacy, write to support@ztn-suite.com.
In short
- You do not need an account to play; you can continue as a guest.
- The current version of the app contains no advertising, analytics or tracking components.
- We do not sell your data.
- You can ask for your account and data to be deleted at any time: account deletion page.
Data we process
Only on your device
Your theme and language choices, whether you finished the tutorial, the word list downloaded for solo play and the daily mode record are stored on your device. Your guest session is kept in the device's secure storage.
Guest session and device
When you open the game, the server creates an account record. It contains: a random internal account ID, the account type (guest or registered) and its status, a player name if there is one, and creation and update times. For each installation we record a randomly generated install ID, the platform (Android or iOS), the app version and the last-seen time. Only a hash of the key used to renew your session is kept on the server.
Sign-in with Google
The app offers sign-in with Google (sign-in with Apple is not available yet). Sign-in happens on Google's own sign-in page; Google processes that sign-in and the identity, profile and email permission the app asks for, under Google's privacy policy. Our server only checks whether the email is verified; your email address is not stored in the account database. What is stored: the stable ID number given by Google, your display name, a link to your Google-hosted profile photo and the last sign-in time. Your guest progress moves to the new account.
Online play and progress
In online 1v1 matches we record the match type, language, the words and moves played, times, scores and the result; your rating (MMR) per language and the number of matches played are kept. Your Boost inventory and its change records are also kept on the server. This is needed to run matches fairly, for rankings and to prevent repeated or cheated results.
Privacy preferences
Your profile visibility, invite acceptance and analytics consent preferences are stored for your account. Analytics consent is off by default, and the app currently has no analytics component anyway.
Connection information
During an online connection your IP address is processed technically to establish the connection and to limit abuse, for example to cap the number of connections from a single address.
Data we do not process
We do not collect location, contacts, camera, microphone or an advertising ID. The app only asks for the internet permission. Free chat is not available in the app.
Purposes
- To provide the game and keep your account and progress.
- To run online matches on the server and verify their results.
- To prevent cheating, repeated submissions and abuse; unverified offline results do not pass directly into rankings or premium balances.
- To answer support requests and meet legal obligations.
Sharing
We do not sell your data and do not share it for advertising. In an online match your opponent sees your player name and information about that match; in a match against a bot the opponent is a bot and this information is not shown to another player. If technical service providers are used for our server infrastructure, they process data only on our behalf.
With Google sign-in, Google is involved in authentication (see above). If any of the following start to be used, this page will be updated: sign-in with Apple, purchases through Google Play and the App Store (verification with the payment provider), and Firebase Cloud Messaging and the Apple push notification service for notifications. None of these exist in the current version.
Retention and deletion
We keep account data for as long as your account exists. On a deletion request, deletable personal data is deleted within 30 days after verification (and leaves backups within a further 30 days) and suitable records are anonymised; device and notification tokens are removed. Records that must be kept by law (for example financial records) are separate. Details and steps: account deletion page.
The app has no free chat. If it is added later, it is designed so that chat messages are kept for 30 days and then deleted.
Your choices and rights
- You can ask for your account and data to be deleted: account deletion.
- Write to support@ztn-suite.com for requests about access, correction or objection concerning your data; we reply by email.
- You can delete local data on your device by uninstalling the app or clearing its data.
Security
Communication between the app and the server uses encrypted (TLS) connections. Session renewal keys are stored on the server only as hashes; your guest session sits in your device's secure storage. No system can be guaranteed to be absolutely secure.
This website
This site sets no cookies and loads no trackers, analytics tools or third-party scripts; the font is served from our own server. As with any web server, your IP address may be processed technically when you request a page. When you email us, we use the information you send only to reply and to handle your request.
Changes and contact
This policy is updated as the app changes; the new version is published on this page and the date above changes. Questions: support@ztn-suite.com.