Introduction
WordRush Arena ("we", "our", "the App") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, how we share it, and the choices and rights available to you under applicable laws including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), the European Union General Data Protection Regulation (GDPR), and the California Online Privacy Protection Act (CalOPPA). By using WordRush Arena you agree to the collection and use of information in accordance with this policy.
Contact
If you have questions or requests about this policy or your personal data, contact us at wilfred.cruz.ph@gmail.com.
Information We Collect
1. Information You Provide
- Account and profile data: username, display name, avatar (if you create an account or profile).
- Support and feedback: messages you send to support, including the email address you provide.
- Payment and purchase data: if you make in‑app purchases, we may collect billing identifiers and transaction records (payment processing is handled by third‑party providers).
2. Automatically Collected Information
- Device and usage data: device model, operating system, app version, unique device identifiers, IP address (anonymized where possible), and crash logs.
- Gameplay and analytics: session length, levels played, scores, in‑game events, and other telemetry used to improve the game experience.
- Advertising identifiers: advertising IDs (e.g., IDFA, GAID) used for ad delivery and measurement.
- Log data: server logs, timestamps, and diagnostic data.
3. Sensitive Personal Information
We do not intentionally collect sensitive personal information (e.g., precise geolocation, racial or ethnic origin, health data) except where you voluntarily provide it in support messages. Under CPRA, certain categories of data may be treated as sensitive; if we collect any such data, we will only use it for the purposes disclosed and with appropriate safeguards.
4. Third‑party Services
We use third‑party services such as Firebase (for analytics, crash reporting, and remote config) and AdMob (for ads). These services may collect information as described above. Their use is governed by their own privacy policies.
How We Use Information
- To operate and maintain the App and provide core gameplay features.
- To analyze usage and performance, diagnose issues, and improve the App.
- To deliver and measure advertising and promotions.
- To respond to support requests and communicate important updates.
- To detect, prevent, and address technical issues, fraud, or abuse.
Legal Bases for Processing (GDPR)
If you are located in the European Economic Area (EEA), our legal bases for processing personal data include:
- Performance of a contract: processing necessary to provide the App and its features.
- Legitimate interests: for analytics, fraud prevention, security, and product improvement, balanced against your rights and interests.
- Consent: where required (for example, certain cookies or tracking technologies), we will obtain your consent before processing.
- Legal compliance: to comply with legal obligations.
CCPA / CPRA — California Residents
This section describes additional rights and disclosures for California residents under the CCPA and CPRA.
Categories of Personal Information Collected
In the preceding 12 months we have collected categories of personal information described above, including identifiers, device and usage data, commercial information (purchase records), internet or network activity, and inferences drawn from other data.
Purposes for Collection
We collect personal information for the business purposes described in this policy, including providing the App, analytics, advertising, fraud prevention, and customer support.
Your California Privacy Rights
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purpose for collection, and the categories of third parties with whom we share it.
- Right to Delete: You may request deletion of personal information we maintain about you, subject to certain exceptions.
- Right to Correct: You may request correction of inaccurate personal information.
- Right to Opt Out of Sale or Sharing: We do not sell personal information for monetary consideration. Under CPRA, "sharing" for cross‑context behavioral advertising is treated similarly to a sale; you may opt out of sharing. To exercise this right, use the link below or contact us. Do Not Sell or Share My Personal Information.
- Right to Limit Use of Sensitive Personal Information: If we collect sensitive personal information, you may request limits on its use and disclosure.
- Right to Non‑Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.
To submit a request under CCPA/CPRA, contact us at wilfred.cruz.ph@gmail.com. We may need to verify your identity before fulfilling requests.
GDPR Rights (EEA Residents)
If you are located in the EEA, you have the following rights regarding your personal data:
- Access: request a copy of personal data we hold about you.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure ("Right to be Forgotten"): request deletion of personal data, subject to legal exceptions.
- Restriction: request restriction of processing in certain circumstances.
- Data Portability: request a machine‑readable copy of data you provided to us.
- Objection: object to processing based on legitimate interests or direct marketing.
- Withdraw Consent: where processing is based on consent, you may withdraw consent at any time.
To exercise these rights, contact us at wilfred.cruz.ph@gmail.com. We will respond within applicable legal timeframes and may need to verify your identity.
CalOPPA (California Online Privacy Protection Act)
CalOPPA requires that we disclose how we respond to Do Not Track (DNT) signals and provide a privacy policy link. At this time, our app does not change its data collection or processing when it detects DNT signals from browsers or devices. This policy is available via the app and at the link where this policy is hosted. Last updated: July 13, 2026.
Advertising and AdMob
WordRush Arena displays banner ads. We use an AdMobService to manage ad unit IDs and initialization. During development, when FirebaseEnv.devMode is enabled, the app uses AdMob test ad unit IDs. In production, the app will use the production ad unit IDs you provide. Ads may use device identifiers and other signals to deliver and measure ad performance.
If you wish to opt out of personalized advertising, you can do so through your device settings or the advertising controls provided by the ad networks.
Cookies and Local Storage
We may use cookies, local storage, or similar technologies to store preferences, session information, and lightweight configuration. These are used to improve your experience and are not used to store sensitive personal data. Where required, we will obtain consent for non‑essential cookies.
Analytics
We use analytics tools (for example, Firebase Analytics) to understand how players use the App and to improve features. Analytics data is aggregated and used for product improvement and troubleshooting.
Data Sharing and Disclosure
We do not sell personal data for monetary consideration. We may share data with:
- Service providers who perform services on our behalf (e.g., analytics, crash reporting, ad networks).
- Affiliates and partners for the purposes described in this policy.
- Law enforcement, government authorities, or other third parties when required by law or to protect our rights, property, or safety.
- Third parties in connection with a merger, acquisition, or sale of assets (with notice to affected users where required by law).
International Transfers
Data may be processed and stored in countries other than your own. When we transfer personal data across borders, we take steps to ensure appropriate safeguards are in place (for example, standard contractual clauses or other lawful transfer mechanisms) in accordance with applicable law.
Data Retention
We retain personal data only as long as necessary to provide the App and services, comply with legal obligations, resolve disputes, and enforce agreements. Aggregated or anonymized data may be retained indefinitely.
Security
We implement reasonable administrative, technical, and physical safeguards designed to protect personal data. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
Children
WordRush Arena is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us at wilfred.cruz.ph@gmail.com and we will take steps to remove it. For users in jurisdictions with higher age thresholds, we will comply with applicable law.
Third‑party Links
The App may contain links to third‑party websites or services. We are not responsible for the privacy practices of those third parties. Review their privacy policies before providing personal information.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will provide notice through the App or by other means. The "Effective date" at the top will be updated to reflect the change.
How to Exercise Your Rights
To exercise any rights described in this policy (CCPA/CPRA, GDPR, or other applicable rights), contact us at wilfred.cruz.ph@gmail.com. Please include sufficient information to verify your identity and describe your request. We will respond within applicable legal timeframes.
Data Protection Officer / Representative
If you are located in a jurisdiction that requires a local representative or data protection officer, contact us at wilfred.cruz.ph@gmail.com and we will provide the appropriate contact details.
Dispute Resolution and Contact
If you have a privacy concern or complaint, please contact us first at wilfred.cruz.ph@gmail.com. We will investigate and attempt to resolve your concern. You may also have the right to lodge a complaint with a supervisory authority (for GDPR) or the California Privacy Protection Agency (for CCPA/CPRA).