Version 10, effective 2026-10-17

About this policy

Wordlock is made and operated by Counterspell Games LLC, which is the data controller for everything described here. This policy explains what the game sends, who receives it, why, how long it is kept, and how you can have it deleted. It covers the game only, not the app store you bought it from and not any other site or app you reach from it.

The same text is published at https://counterspell.dev/legal. The copy inside the game and the published copy are generated from one file and are identical.

What we collect

Almost everything the game knows about you stays on your device. Your run, your unlocks, your stats, your settings, your collection, your achievements, and the name you choose are saved in files on the device. The parts of them that leave it are listed below, and nothing else is sent anywhere on its own.

These are the things that do leave your device. Each one is described in its own section below.

• The Daily leaderboard: a score you choose to submit, the words from that run and what each scored, and an anonymous player id

• A player account, created for you the first time the game reaches our online services, so a leaderboard row and a cloud backup can be recognised as yours

• Cloud backup: a copy of your saved profile, which the game can restore if it can still recognise your device

• Your Ledger: your lifetime stats and your best and longest words, which other players can open from a Daily board or their friends list

• Bug reports: only what you fill in and attach, and only when you press Send

• Word reports: a word you choose to send about the word list, with an optional note, and only when you press Send

• Name reports: another player's leaderboard name you choose to report, and only when you tap Report this name twice

• Your leaderboard name, checked by our online service when you set it

• Achievements: earned achievement ids, mirrored to your platform game service

• Advertising: an advertising identifier held by your device, read by the ad network where the game shows ads

• Game settings: each time the game starts, it asks our configuration service for its current settings, and that request carries an installation identifier

• On Android, a record of the cosmetics you have bought, so a purchase can be restored and cannot be claimed by someone else

• Gameplay analytics and crash reports: off unless you turn them on

What we do not collect

• Your real name, email address, phone number, or contacts. The only email we ever hold is one you type into a bug report yourself

• Your location. The game asks for no location permission and reads no location API

• Payment details. Purchases are handled entirely by the app store, which never gives us a card number

• Your photo library. The game can attach one image you pick to a bug report; it never reads or uploads anything else

• Anything you type, other than the display name you choose, the text of a bug report you send, and a word you report about the word list with its optional note

The game sends no push notifications and holds no push token. Daily reminders are scheduled by your own device and never reach us or anyone else.

Why we collect it

The leaderboard exists so a Daily score can be ranked against other players. Cloud backup exists so a reinstall does not have to mean starting over. Your Ledger is published so a friend, or a player who sees you on a board, can compare their record with yours. Bug reports exist so a fault you hit can be reproduced and fixed. Word reports exist so a word the game's list gets wrong can be checked and corrected in a later update. Achievements are mirrored so they appear on your platform profile alongside your other games. Advertising pays for the game where it is free. Gameplay statistics tell us where the difficulty is wrong and which content nobody uses, and crash reports tell us what is broken.

None of it is used to build a profile about you as a person, and none of it is sold.

The Daily leaderboard

When you finish a Daily and submit the score, the game sends that submission to Unity Gaming Services, which runs the boards. The submission holds your score, the date the board is for, the version of the game rules you played under, and the list of words you traced. The words ride along so a suspicious score can be checked against the board's own dictionary. Those words, and what each one scored, are kept on your row. The highest scoring word is shown beside your name to every player who opens that board, and the whole list is shown to any player who taps your row.

The row is filed under an anonymous player id that Unity Gaming Services creates for this installation of the game. That id is not your name, your email, or a device serial number, and we cannot use it to find out who you are. It is created the first time the game runs, so that it exists before you need it. If a board shows a name beside your score, that name is the handle you chose in the game; your real name is never attached.

When you choose or change that handle, the game sends it to a small program we run on Unity Gaming Services, which checks it against the same list of words the game checks on your device and then sets it as your board name. Nothing else is sent with it. If another player reports your handle and we agree it breaks the terms, we mark your player id, and the next time the game starts your board name is replaced with a plain one such as Player-3fa2c1 and you are asked to choose again. We keep a record of that change, the handle it replaced, and the handle you chose next, under your player id, until you delete your data.

Submitting is your choice. Playing a Daily without submitting sends nothing, and turning the optional data sharing setting off does not stop a submission you asked for, because the submission is the feature rather than a measurement of it.

Cloud backup

Where the game is signed in to Unity Gaming Services it keeps one backup copy of your saved profile there, under the anonymous player id described above, so that the game can offer it back to you later. The copy holds what your profile holds: your display name, your unlocks, your achievements and the dates you earned them, your stats, your settings, your Daily streaks and any Daily score still waiting to be sent, your friends list, your tutorial progress, your chosen language, and your chosen skins. It also records when the backup was made and a short tag naming the kind of device that made it, so a restore can tell you where the backup came from.

The backup is a copy, not a second account. There is no login, no password, and no way for anyone to fetch it with your name.

The backup is filed under your player account rather than under anything you could type in, because that account holds no name, email or password you gave us. How far it follows you depends on how that account was made. If the game signed you in anonymously, the account is tied to an id your device holds: uninstalling and reinstalling on the same device usually keeps it, because your phone backs it up along with the rest of the game's data, while moving to a new phone, or reinstalling with device backup switched off, usually does not, and a backup whose id is gone cannot be matched to you and cannot be recovered. If you signed in with your platform game service, Apple Game Center or Google Play Games, the account follows that sign in instead, so the backup can be found on another device you use with it. Treat the cloud copy as a convenience, not as a guarantee.

Your Ledger

The Ledger in the Coven shows your lifetime record, and other players can open it by tapping your row on a Daily board or your name in their friends list. So that they can, the game keeps a copy of it on Unity Gaming Services as public data under your anonymous player id. Any player of the game who has that id can read it, and only your player account can change it.

It holds what the Ledger page shows for each mode and nothing else: runs, wins, scores, words found, rounds cleared, time played, dice thrown and the other running totals on that page, along with your best word, your longest word, your best round, your best run and your win streaks. Your display name is not stored with it; another player sees it beside the name their board or friends list already shows. The dates you played, which items and curses you have used, your settings, your achievements, your collection and your run in progress are not part of it.

The game publishes it once it has signed in when the game starts, after each run, and when the game goes into the background, and only when something on it has changed. Nothing is published until you have finished a run. It does not depend on cloud backup being on, and there is no setting that keeps it private; Delete my data removes it.

Bug reports

Report a bug, in Options and in the in-run menu, sends a report so a fault can be fixed. You start it, and nothing is sent until you press Send.

A report holds what you type in the description box, your app version and game rules version, your device model and operating system, some technical details about the device such as its memory, processor, graphics chip, screen resolution and system language, and the display name you chose, so reports from the same player can be recognised. When a run is live it also holds that run's seed and how far you had got, which is what lets the fault be reproduced exactly. You can add an email if you would like a reply; leave it blank and none is sent. You can also attach recent game logs, a snapshot of the current run, and either a screenshot or an image you pick yourself. Each attachment is optional and each one can be switched off before you send. The description and the email are free text that you control, so please do not type anything into them you would not want us to hold.

Your lifetime stats and your settings are never attached and stay on your device.

Reports are delivered to a private developer channel hosted by Discord, so Discord processes the report on the way to us. They are kept until the fault is fixed and then deleted.

Word reports

Report a word, in Options beside Report a bug and in the in-run menu, sends a word you think the game's word list gets wrong. You type the word, the game looks it up and tells you which way it is asking, and nothing is sent until you press Send. Your own game is unaffected either way: the list does not change on your device.

A report holds the word you typed, whether the game currently accepts it and so whether you are asking for it to be added or taken out, the language and which word list was consulted, the note you may add saying why, and the display name you chose, so reports from the same player can be recognised. It also holds your app version, your game rules version, the platform you are playing on, and the time you sent it. The word and the note are free text that you control, so please do not type anything into them you would not want us to hold.

Nothing is attached to a word report. Unlike a bug report it carries no logs, no snapshot of your run and no image, it holds no email address, and it never includes your stats, your settings or your progress.

Word reports are delivered to the same private developer channel hosted by Discord, so Discord processes the report on the way to us. They are kept until the question about that word is settled and then deleted.

Name reports

You can report another player's name from their Ledger, which opens when you tap them on a Daily board or in your friends list. Report this name, at the foot of that page, sends the report on its second tap. Nothing is typed and nothing is sent before then.

A report holds the other player's anonymous player id and the name shown for them, where you saw it, a Daily board or your friends list, and the date, your own player id and the display name you chose, so repeated reports from one player can be recognised, and your app version, the platform you are playing on, and the time you sent it. It holds nothing else about you: no logs, no run, no image, and no stats or settings.

Name reports are delivered to the same private developer channel hosted by Discord, so Discord processes the report on the way to us. They are kept until we have decided what to do about that name and then deleted. The game remembers on your device which players you reported today, so the same player is not reported twice and no more than ten are reported in a day, and forgets them the next day.

Achievements

Where your platform game service is available, the game signs in to it and reports achievements you have already earned so they show on your platform profile. On iOS that service is Apple Game Center and on Android it is Google Play Games. What is sent is the id of an achievement and, for the achievements that fill up gradually, how far along it is. The sign-in and the account behind it belong to your platform, not to us; we never see your platform account details, and the achievement is earned on your device before anything is reported.

Advertising

Wordlock may show ads, and where it does they are served by Google AdMob. AdMob may fill a request from another ad network it works with on our behalf: AppLovin, DT Exchange, InMobi, ironSource, Liftoff, Meta Audience Network, Mintegral, Pangle, or Unity Ads. When it does, that network receives the ad request, including the advertising identifier your device holds, and serves the ad. Rewarded ads are optional and you choose when to watch one. Where an ad-free purchase is available and you own it, no ads are requested and the ad system is not started at all.

The game requests non personalised ads by default. That means the ads you see are chosen from the app and the general context rather than from a profile built about you across other apps and sites. AdMob, and any network that serves an ad, reads the advertising identifier your device holds in order to cap how often you see the same ad and to detect fraudulent clicks, and that identifier is shared with Google and with that network in that role. The game tells each of those networks that you have not consented to personalised ads and that your data may not be sold or shared for cross-context advertising. We do not use it to track you across other companies' apps or websites.

If you are in the EEA, the UK, or Switzerland, a consent form is shown before the first ad request and your answer controls what AdMob, and the ad networks it works with, may store and use.

On iOS the game shows Apple's tracking prompt before the first ad request, because the ad networks listed above may use your device's advertising identifier across apps. If you choose not to allow tracking, the identifier is not available to them. Personalised ads stay off either way, and if they are ever offered they will be off unless you turn them on.

Your phone's own privacy settings let you reset your advertising identifier or turn off ad personalisation at any time.

Game settings

Each time the game starts on a phone or tablet, it asks Google's Firebase Remote Config for its current settings, such as the score each round of a run asks for, so the game can be tuned without waiting for an update. The request carries an installation identifier that Firebase creates for this copy of the game, along with the game's own identifier. It carries nothing about how you play, your name, or your player account, and nothing is sent back about what you do with the settings.

This happens whether or not Share gameplay data is on, because it is how the game gets its settings rather than a measurement of you. If the service cannot be reached, the game uses the last settings it received, or the ones it shipped with.

Purchases

On Android, when you buy or restore a cosmetic, the game sends the store's reference for that purchase to our online services, which run on Unity Gaming Services. We ask the store to confirm it and record which items you own against your player account. We receive the product and an order reference, never a card number, name or address. The record is kept while your player account exists and is removed by Delete my data; the store keeps its own record of the purchase under its own policy. On iOS the game does not do this yet: the App Store handles the purchase and tells the game only whether you own the item.

Gameplay analytics and crash reports

Options has a Share gameplay data setting. It is off when you install the game and nothing optional is measured until you turn it on.

With it on, the game may send anonymous gameplay events, such as that a Daily was started or finished and what it scored, along with the basic app and device information the provider attaches to any event, and it may send crash reports describing what the game was doing when it stopped working. Where these are used the provider is Google, through Firebase. Turning the setting off stops collection entirely, not just the reporting of it.

These events are not tied to your name and are read as totals across all players, to answer questions like whether a stage is too hard or an item is never chosen.

Notifications

If you turn on the Daily reminder, your device schedules a reminder locally and shows it at the time you chose. No token is registered, nothing is sent to us, and no third party is involved. Turning the reminder off cancels it on the device.

Sharing and links out

The share button composes a short result card, with your score and the shape of your best word but not the word itself and not your name, and hands it to your device's share sheet. You choose whether to share it and which app receives it. Nothing is sent anywhere unless you complete that step.

The links in Settings open other companies' sites, such as our Discord server and our social pages, in your browser. Once you are there, that company's own privacy policy applies and it can see the usual things a website sees, including your network address.

Who we share it with

Your data is not sold, and it is not shared for advertising or for anyone else's own purposes. These are the only recipients:

• Unity Gaming Services, part of Unity Technologies, which stores Daily leaderboard rows, your leaderboard name, your public Ledger, your cloud backup and your purchase record

• Other players of Wordlock, who can see your leaderboard name, your Daily scores and the words behind them on the boards, and your Ledger

• Discord, which carries a bug report, a word report or a name report you choose to send to our private developer channel

• Apple Game Center or Google Play Games, which record the achievements you have earned

• Google, through AdMob where the game shows ads, through Firebase Remote Config for the game's settings, and through Firebase Analytics and Crashlytics where you have turned gameplay data sharing on

• AppLovin, DT Exchange (Digital Turbine), InMobi, ironSource, Liftoff, Meta, Mintegral, Pangle and Unity Technologies, where the game shows ads and AdMob passes an ad request to one of them to fill

• Your app store, which handles any purchase; on Android, Google Play also confirms it to us when you buy or restore an item

We may also disclose data where the law requires it.

How long we keep it

Data on your device stays there until you delete it or uninstall the game. A cloud backup is kept until it is replaced by a newer one or you delete your data. Your player account, and the record of what you have bought, are kept until you delete your data. A leaderboard row, and the words kept on it, is kept for as long as that board and its archive are running. Your public Ledger is replaced each time it changes and is kept until you delete your data. Bug reports are kept until the fault is fixed and then deleted. Word reports are kept until the question about that word is settled and then deleted. Name reports are kept until we have decided what to do about that name and then deleted. A record that your leaderboard name was reset is kept until you delete your data. Analytics data is kept under the retention settings configured in the provider's console: event data for 2 months, and data linked to a user or advertising identifier for 14 months, counted from that device's last activity, so the 14 months restarts each time the game is used. Achievement records are held by your platform under its own policy.

Deleting your data

Options has a Privacy and data screen with a Delete my data button. It removes your progress, stats, settings and name from the device, removes your cloud backup, your purchase record and any record that your leaderboard name was reset, removes your entries from the leaderboards and your public Ledger, and deletes the player account the game made for you, along with the display name filed with it. It also resets the analytics identifier held on your device, so nothing recorded after a deletion can be joined to anything recorded before it. If you are offline when you use it, the data on your device is deleted immediately and the rest is removed the next time the game is online. The screen tells you which of those has actually happened rather than assuming it worked.

Two things sit outside what that button can reach. Achievements you have earned are held by your platform game service, Apple Game Center or Google Play Games, under its own policy, and we are not able to delete them for you; your platform account settings are where those are managed. And if you signed in with a platform account, deleting your data removes our account and our link to it, and leaves your platform account itself untouched.

Uninstalling also removes everything held on the device, though it does not by itself remove a cloud backup, a leaderboard row, your public Ledger or the player account, so use Delete my data first if you want those gone.

To have a bug report or a word report deleted, or to ask any question about data we hold, write to info@counterspell.dev and describe the report. If you gave a reply email with a bug report, use that address so the report can be found; a word report has no email field, so name the word instead.

Your rights

Depending on where you live you may have the right to ask what data we hold about you, to have it corrected or deleted, to object to how it is used, and to complain to your data protection authority. Almost everything we hold is either on your device or filed under a player account that carries no name, email or password you gave us, and Delete my data is the fastest way to exercise a deletion right. For anything the in-game button cannot reach, write to info@counterspell.dev and we will answer within 30 days.

Children

The game is not directed at children under 13, and we do not knowingly collect data from them. Ads are requested at a general audience rating and the game is not flagged as child directed. If you believe a child has given us data, write to info@counterspell.dev and we will remove it.

Your choices

You can leave Share gameplay data off, or turn it off later, and the game works exactly the same. You can play Dailies without ever submitting a score. You can decline the Daily reminder. You can decline the shake and tilt controls when the game offers them, and play with the on-screen buttons instead; the motion sensors are not read until you say yes. You can delete everything at any time.

Changes to this policy

If this policy changes in a way that affects you, the version and effective date at the top change with it, and the published copy is updated at the same time. The copy inside the game is the same file, so it moves with the next update of the game; the current version is always the one at https://counterspell.dev/legal, and the version and date at the top of this page are how you can tell whether it has moved since you last read it.

Contact

Counterspell Games LLC

10920 Rose Ave, Los Angeles, CA 90034, USA

info@counterspell.dev

We aim to answer within 30 days.