Privacy Policy – WordLex

This privacy policy describes how the WordLex application collects, uses, and protects users' personal data.

1. Data collected

• Email address
• Username and/or display name
• Profile photo
• Game data (scores, statistics) for registered users
• IP address (for security, spam prevention, and technical logging)
• Post-match chat messages (if you choose to use the chat feature)

Important: For registered users, all games (online and local) are recorded and associated with your profile for statistical and progress tracking purposes.

2. Collection methods

• account creation and login
• online: data sent at the end of each game
• offline/local: data sent at the end of each game for registered users
• voice game: user identification at launch
• use of application features
• post-match chat: messages sent when you choose to chat with your match partner

3. Use of data

• authentication
• account management
• service operation
• improving user experience
• spam prevention and abuse protection
• collecting game statistics linked to user profiles
• content moderation of post-match chat messages

4. Advertising, consent and partners

4.1. Use of advertising

WordLex is a free application financed by advertising. To offer you this service at no cost, we display advertisements provided by Google AdMob, Google's mobile advertising platform.

4.2. Personal data collected for advertising purposes

When you consent to personalized advertising, Google AdMob and its advertising partners may collect and process the following data:

• Advertising identifier (IDFA on iOS, AAID on Android) to serve personalized ads
• Technical information: device type, operating system, IP address, browser
• Behavioral data: interactions with ads, browsing preferences, app usage
• Geolocation data (if authorized) for geo-targeted ads

4.3. Legal basis: your consent

The collection and processing of your personal data for advertising purposes is based on your explicit consent, in accordance with the General Data Protection Regulation (GDPR) and applicable laws.

A consent screen managed by Google UMP (User Messaging Platform) is presented when required by applicable regulations and as determined by Google. This interface allows you to:

• Accept personalized advertising (based on your profile and behavior)
• Accept only non-personalized advertising (generic ads not based on your data)
• View the list of advertising partners and manage your preferences partner by partner

4.4. Advertising partners

Google AdMob works with numerous advertising partners who may also collect and process your data when you consent to personalized advertising. These partners are listed in the consent management interface accessible from the app.

AdMob operates within the framework of the IAB Transparency and Consent Framework (TCF), which standardizes the collection and management of user consent for digital advertising in Europe.

4.5. Managing and withdrawing your consent

You can modify or withdraw your consent at any time directly from the WordLex application:

• Go to the application settings
• Select "Privacy settings" or "Manage consent"
• Modify your advertising preferences

Withdrawing your consent does not affect the legality of processing carried out before the withdrawal. After withdrawal, you will continue to see advertisements, but they will be non-personalized. In the absence of consent, only non-personalized advertisements may be displayed.

4.6. International data transfers

Google and certain advertising partners may transfer your data outside the European Union, particularly to the United States. These transfers are governed by appropriate safeguards such as the EU Standard Contractual Clauses and Google's compliance with applicable data protection frameworks.

4.7. Data retention by advertising partners

The retention period for data collected by Google AdMob and its partners depends on their own privacy policies and may vary depending on the purposes. These periods are available in the consent management interface and in Google's documentation.

5. Error tracking and technical stability

5.1. Use of Sentry

To ensure the best possible user experience and maintain the stability of the application, WordLex uses Sentry, a technical error monitoring service.

Sentry allows us to:

• Detect crashes and technical bugs
• Analyze application performance
• Improve service quality and security
• Quickly fix issues affecting users

5.2. Technical data collected by Sentry

When an error or crash occurs, the following information may be automatically transmitted to Sentry:

• Device information: model, operating system (iOS/Android), OS version
• Technical data: app version, device language, screen resolution
• Error logs: stack traces, error messages, debugging information
• Application state: actions performed before the crash, navigation path
• IP address: collected for technical purposes. We do not perform any voluntary association between this data and your user account

Important: Only information strictly necessary for debugging is transmitted. We do not voluntarily send game content to Sentry.

5.3. Legal basis: legitimate interest

The collection of technical data by Sentry is based on our legitimate interest to:

• Maintain a stable and functional application
• Ensure service security
• Quickly identify and fix bugs affecting users

This data is not used for advertising purposes and is only processed for technical and security purposes.

5.4. Hosting and international transfers

Sentry is provided by Functional Software, Inc. and hosted on servers located in the United States (sentry.io). Data may be transferred outside the European Union, but these transfers are protected by appropriate safeguards such as EU Standard Contractual Clauses and Sentry's compliance with applicable data protection frameworks.

5.5. Data retention by Sentry

Error data is retained for a limited period defined in our Sentry configuration, typically in the order of a few months, to allow incident analysis.

6. Data sharing

No personal data is sold or shared for commercial purposes outside the frameworks described above (advertising and technical monitoring).

Data may be processed by:

• Supabase (authentication and database)
• Google (Google Sign-In)
• Google AdMob and its advertising partners (if you consent to personalized advertising)
• Sentry (technical error monitoring and debugging)

7. Data retention

Data is retained as long as the account is active.

Post-match chat messages: If you choose to use the post-match chat feature with your match partner, your chat messages will be stored on our servers for 15 days for moderation purposes only, then automatically deleted. Messages do not constitute encrypted private messaging. These messages are not private and may be reviewed by our moderation team to ensure compliance with our terms of use.

8. Account deletion

Account deletion is permanent and results in deletion or anonymization of data.

9. Security

Technical and organizational measures protect the data.

10. Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: you can request a copy of your personal data
• Right to rectification: you can request correction of inaccurate data
• Right to erasure: you can request deletion of your data
• Right to restriction: you can request limitation of data processing
• Right to data portability: you can request your data in a structured format
• Right to object: you can object to certain types of data processing
• Right to withdraw consent: you can withdraw your consent for advertising at any time

11. Contact

[email protected]

Last updated: 2026