Privacy Policy

Last updated: 28 May 2026

Wordmancer is a single-developer iOS game built by Kenzy Thai. We take privacy seriously — single-player gameplay never requires an account, network access, or data collection. The information below covers the optional online features (Sign in with Apple, Daily Verse leaderboard, crash reporting).

1. What data we collect

When you launch Wordmancer for the first time without signing in:

Nothing leaves your device. Your runs, achievements, and settings are persisted to local on-device storage (MMKV) only.

When you tap "Sign In for Leaderboard" and authenticate with Apple:

Authentication identifier — an opaque Apple user ID provided by Sign in with Apple. We never see your real email unless you choose to share it via Apple's relay system.
Daily Verse scores — the best single-day score you achieve on a given daily seed, stored against your account so we can rank the leaderboard.
Profile name (optional) — a chosen display name shown next to your score on the leaderboard. You can leave this blank.
Lifetime stats (optional) — total runs, longest word, achievement unlocks. Used for in-app stat displays and cross-device sync.

When the app crashes or hits an unexpected error:

Crash diagnostics — stack traces, breadcrumbs (which screens you visited, which actions you took), device model, OS version. No personally identifying data. No location, no contacts, no photos.

2. What we do not collect

No advertising identifiers (IDFA).
No location data, contacts, photos, microphone, or camera access.
No third-party analytics SDKs (Facebook, Google Analytics, etc.).
No tracking across other apps or websites.

3. Third-party services

To deliver online features Wordmancer uses three vendor services:

Apple Sign In with Apple — authentication. Subject to Apple's Privacy Policy.
Supabase — managed PostgreSQL database hosting your account, profile, and Daily Verse scores. Data lives in the EU (Frankfurt region) under row-level security policies that prevent any user from reading or modifying another user's rows. Subject to Supabase's Privacy Policy.
Sentry — crash and error monitoring. Stack traces and breadcrumbs only, scrubbed of any user-supplied text. Subject to Sentry's Privacy Policy.

4. Children's privacy

Wordmancer is rated 4+ on the App Store. We do not knowingly collect any personally identifiable information from children. If you believe a child has provided us with such information, contact us at the address below and we will delete it promptly.

5. Your rights and account deletion

You can delete your Wordmancer account and all associated server-side data at any time directly inside the app:

Open Settings from the main menu.
Tap Delete Account at the bottom.
Confirm. Your account row, profile, and Daily Verse score history are permanently removed from the Supabase database within a few seconds. This action is irreversible.

If you signed up without using the app (you cannot — there is no web sign-up) or if the in-app flow fails for any reason, you can also request deletion by emailing kenzythai@yahoo.com with your Apple relay-email or chosen profile name. We will action the request within 7 days.

6. Data retention

Account data is retained until you delete your account. Crash diagnostics are retained for 90 days then automatically purged.

7. Data security

All network traffic uses TLS 1.2+. The Supabase service role key never ships inside the app — it lives only on our edge functions. Your Apple Keychain stores the session token; local game data sits in MMKV inside the app sandbox.

8. International data transfers

Servers are hosted in the EU (Frankfurt). If you play from outside the EU your data is transferred there under Supabase's standard contractual clauses.

9. Changes to this policy

If we materially change what data is collected or how it is used we will update this page and bump the "Last updated" date above. Continued use of the app after the change date constitutes acceptance.

10. Contact

Questions, deletion requests, or anything else: kenzythai@yahoo.com