Privacy Policy
This policy explains what information the game Word Meadow – Luna (and its Turkish edition, Kelime Bahçesi – Luna) collects, why, who receives it, and how you can control or delete it. We try to keep the data small: you can play without creating an account, and you never give us your real name, email address or phone number inside the game.
1. Who is responsible
The game is published by Yurdagül Eymür, an individual developer based in Türkiye ("we"). We decide how the data described here is used. Contact: support@wordmeadowluna.com.
2. The short version
- Your progress, garden and settings live on your device.
- The game quietly signs you in to our server with an anonymous ID (no email, no password) so that friends can see your public profile, visit your garden and invite you to duels.
- Your public profile (display name, avatar, badges, level and a few counters) is visible to other players.
- We use Google's Firebase (database, notifications, analytics, crash reports) and Google AdMob (ads), and Apple's Game Center, iCloud and App Store.
- We do not sell your data.
- You can delete your server data in the game: Settings → "Delete My Account and Data".
3. What we collect and why
| Data | Why | Where it goes |
|---|---|---|
| Anonymous account. A random user ID and a sign-in token created by Firebase Authentication. | To let the game store your public profile and use online features without an email or password. | Google Firebase (our project). The token is also kept on your device. |
| Public profile. Display name, avatar, badges, favourite badge, current level, total stars, number of 3-star and hard levels, bonus words found, duels played, daily streak, number of themes owned, and your Game Center player ID. | To show you on leaderboards and friend lists, and in duels. | Firebase database. Readable by other players (and technically by anyone able to query our database). |
| Game Center link. Your Game Center player ID (and team player ID / nickname-based key) mapped to your anonymous ID. | So friends can find your profile from Game Center. | Firebase database. Readable by other players. |
| Garden copy and visits. A compressed copy of your garden layout, display name, avatar, Game Center ID, number of likes. Visitors leave a daily note: like, 5-seed gift, a preset reaction, their name and avatar. | So friends can visit your garden, like it and leave gifts. | Firebase database. The garden copy is readable by other players; visit notes are readable by the owner and the visitor. |
| Invite codes. Your 6-character friend code and, if you enter someone's code, a record linking you to the inviter. | Friend invites and invite rewards. | Firebase database. |
| Gift codes. The code you enter and a record that your anonymous ID used it. | To give each player a code's reward only once. | Firebase database. |
| Player reports. If you report a player: your ID, the reported player's ID and the reason (up to 200 characters). | Safety and moderation. | Firebase database; not readable from the app. |
| Progress transfer code (Turkish edition only, for moving from the earlier app). A compressed copy of your save files, stored under a one-time 8-character code. | To move your progress to the new app. | Firebase database. Valid for 14 days and removed when used. |
| Push notifications. Your notification token (FCM/APNs) and app language. When you invite someone to a duel: your ID, Game Center ID, name, the invitees' Game Center IDs and the game mode. | To notify a friend of a duel invite. Only if you allow notifications in iOS. | Firebase database and Cloud Functions (Europe), Firebase Cloud Messaging and Apple's push service. The invite request is deleted after sending. |
| Game Center. Your Game Center identity, scores on weekly and level leaderboards, friends list (shown in the game, not stored by us), real-time matches and nearby matching for duels. | Leaderboards, friends and duels. | Apple. Governed by Apple's privacy policy. Duels exchange game messages directly through Game Center. |
| iCloud progress backup. Your save, profile and history, stored as a Game Center "saved game". | To restore progress on a new device. | Your iCloud account (Apple). We cannot read it. |
| Ads. Advertising ID (IDFA) if you allow tracking, IP address, device and ad-interaction data. | To show and measure ads and prevent fraud. | Google AdMob and its ad partners. See section 4. |
| Usage analytics. Gameplay events such as level finished (level number, time, hints used), hints opened (the word revealed), seeds earned/spent, rewarded ads started, gift code entered; plus device model, OS version, app version, country and a random app-instance ID. | To balance the game and fix problems. No name or email is attached. | Google Firebase Analytics. |
| Crash reports. Crash traces, device model, OS version, app state at the time of the crash. | To find and fix crashes. | Google Firebase Crashlytics. |
| Purchases. Which products you bought or subscribed to, handled by StoreKit. We receive no card or Apple ID details. | To unlock what you bought and restore it later. | Apple. Entitlements are checked on your device. |
| Local data. Progress, seeds, garden, settings, caches. | To run the game. | Only on your device (removed if you delete the app). |
The game does not ask for or use your location, contacts, photos, camera or microphone. A "local network" permission may appear because Game Center uses it to find nearby players for duels.
4. Ads and tracking
The game is free and shows ads through Google AdMob: a banner on the puzzle screen, optional rewarded videos (for example, for a hint) and occasional full-screen ads. Subscribing to the Garden Club or buying "Remove Ads" removes the banner and full-screen ads.
- Tracking permission (ATT). At launch iOS asks whether the game may track you across other companies' apps and websites. If you say no, ads are still shown but are not personalised with your advertising ID. You can change this any time in iOS Settings → Privacy & Security → Tracking.
- Consent form. Where the law requires it (for example the EEA and UK), Google's consent tool may ask for your choices about personalised ads. You can change them later where the form is offered.
- Ad networks may use identifiers, device information and ad interactions. See how Google uses data in ads.
- Ads are limited to content suitable for all ages (rating "G").
5. Who receives your data
- Google (Firebase Authentication, Firestore database, Cloud Functions, Cloud Messaging, Analytics, Crashlytics, AdMob) as our service provider and, for ads, as an independent controller under its own policy.
- Apple (Game Center, iCloud, push notifications, App Store purchases).
- Other players, who see your public profile and garden as described above.
- Authorities, if the law requires it.
Our database is hosted in Google's European multi-region. Google and Apple may process data in other countries, including outside the EEA and Türkiye, under their own safeguards.
6. How long we keep data
- Profile, Game Center link, invite code, notification token: until you delete them (see section 7).
- Progress transfer codes: single use, 14 days. Duel notification requests: removed once sent or expired (about 3 minutes). Anti-abuse counters for invites: kept with your anonymous ID.
- Crash reports: about 90 days. Analytics: for the retention period set in our Firebase project (up to 14 months).
- Reports about players: as long as needed for moderation and safety.
7. Deleting your data
In the game: open Settings → "Delete My Account and Data" and confirm. This permanently deletes from our server your public profile, invite code and invite record, notification token, Game Center link entries and your anonymous account, and turns profile sharing off (you can turn it back on later). Progress and seeds on your device are not deleted; use Settings → Reset Progress for that, or delete the app.
By email: the in-game button does not remove your garden copy and visit notes, gift-code use records, player reports or an unused transfer code. Write to support@wordmeadowluna.com from the email you prefer, tell us your display name and level, and we will delete these as well within 30 days. Because accounts are anonymous, we may ask for details only you would know.
Elsewhere: your iCloud saved game is managed in iOS Settings → your name → iCloud → Manage Storage → Game Center. Game Center data is managed through Apple. Ad and tracking choices: iOS Settings → Privacy & Security. Analytics and crash data are not linked to a name and cannot be looked up individually; they expire as described above.
8. Children
The game is made for a general family audience and is not designed to collect personal information from children. We do not knowingly collect names, emails or contact details from anyone, and ads are limited to all-ages content. Display names are screened for inappropriate words. If you are a parent or guardian and believe your child's data should be removed, email support@wordmeadowluna.com and we will act promptly. Children should use online features (friends, duels, gifts) only with a parent's agreement.
9. Your rights
Depending on where you live (for example under the EU GDPR or Türkiye's Law No. 6698, KVKK), you may ask whether we process your data, get a copy, have it corrected or deleted, object to processing, withdraw consent, or complain to your data protection authority (in Türkiye, the Personal Data Protection Authority). Email support@wordmeadowluna.com. We process data to run the game you asked for (contract), based on our legitimate interest in security, fixing bugs and improving the game, and, for personalised ads and tracking, on your consent.
10. Security
Data travels over encrypted connections and our database is protected by access rules so that you can only change your own records. No system is perfectly secure, so please do not put personal information in your display name.
11. Changes
If we change this policy, we will update the date above and, for important changes, mention it in the app or the App Store release notes.
12. Contact
Yurdagül Eymür, Türkiye · support@wordmeadowluna.com