Privacy Policy

1. Introduction

Welcome to Spellbinder. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our word puzzle game through our website or mobile applications (collectively, "the Game").

2. Information We Collect

2.1 Information You Provide

• Email Address: Required for account creation and authentication via one-time passwords (OTP)
• Display Name: Optional name you choose to display in the game and on leaderboards
• Timezone: Used to display times correctly for your location

2.2 Information Collected Automatically

• Game Progress: Scores, levels, spell points, equipped spells, discovered scrolls, and game history
• Usage Data: Games played, words found, time spent playing, and gameplay statistics
• Device Information: Browser type, device type, operating system, and screen size for optimal game experience
• Local Storage Data: Game preferences such as sound settings

2.3 Information Collected on Mobile (iOS)

• Contacts (Optional): If you grant permission, we access your contacts to help you find friends who also play Spellbinder. Contact data is used only to display friend suggestions and is not uploaded to our servers.
• Network Status: We monitor your device's network connectivity to enable offline play and sync your progress when you're back online.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Authenticate you via email OTP (no passwords stored)
• Save and sync your game progress across devices and sessions
• Display your achievements and rankings on leaderboards
• Enable social features like friend connections and scoreboards
• Improve the game experience and fix bugs
• Send important notifications about your account (e.g., login codes)
• Ensure fair play and prevent cheating

4. Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal data:

• All data transmission is encrypted using HTTPS/TLS
• Authentication uses time-limited one-time passwords sent to your email
• We do not store passwords - only secure session tokens
• On mobile devices, authentication tokens are stored securely in the device Keychain
• Database access is restricted and monitored
• Regular security updates and maintenance

5. Data Sharing and Disclosure

We do not sell your personal data. We may share information in the following circumstances:

• With Your Consent: When you connect with friends, your display name and scores may be visible to them
• Public Leaderboards: Your display name and scores may appear on public leaderboards
• Service Providers: We may use third-party services for email delivery and hosting
• Legal Requirements: When required by law or to protect our rights

6. Data Storage on Your Device

6.1 Web Browser

• Session Cookies: To keep you logged in during your session
• Local Storage: To store your sound preferences and game settings
• Session Storage: To maintain game state during play

6.2 Mobile App (iOS)

• Keychain: Securely stores your authentication token (encrypted by the operating system)
• App Storage: Stores your game progress, preferences, and pending game data for offline play
• User Defaults: Stores your preferences such as sound settings

This data is essential for the game to function properly. We do not use tracking cookies or third-party advertising cookies. The mobile app contains no third-party analytics or tracking SDKs.

7. Push Notifications

The mobile app may request permission to send push notifications. If enabled, we may use notifications to inform you about daily challenges, friend activity, or important account information. You can disable notifications at any time through your device settings.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct your information (e.g., display name)
• Deletion: Request deletion of your account and associated data
• Data Portability: Request your data in a portable format
• Objection: Object to certain processing of your data
• Permissions: Revoke contacts or notification permissions through your device settings

To exercise these rights, please contact us at [email protected] .

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we need to retain certain data for legal obligations or legitimate business purposes.

10. Children's Privacy

Spellbinder is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it promptly. If you believe we may have collected information from a child under 13, please contact us.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

13. GDPR Compliance (For EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• The legal basis for processing your data is your consent and our legitimate interests in providing the game
• You have the right to withdraw consent at any time
• You have the right to lodge a complaint with a supervisory authority

14. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion. We do not sell personal information.