Privacy Policy

1. Who we are

Fun Times Studio, Inc. ("Fun Times Studio", "we", "us", "our") develops and operates the mobile game Super Word Galaxy (package name com.funtimesstudio.superwordgalaxy) and the website at www.funtimesstudio.com. For the purposes of the EU and UK GDPR, Fun Times Studio, Inc. is the data controller for the information described in this policy.

This policy explains what information Super Word Galaxy and our website collect, why we collect it, who we share it with, how long we keep it, and how you can access or delete it. It applies to every version of the game, including builds distributed through Google Play and the Apple App Store.

If you do not agree with this policy, please do not use the game. Questions are welcome at support@funtimesstudio.com.

2. At a glance

The short version, before the detail:

• We do not sell your personal information, and we never have.
• Super Word Galaxy shows no third-party ads and does not use advertising identifiers or build advertising profiles.
• You need an account to save progress and play against others. That account is built on an email address and a display name.
• Access to your phone contacts is entirely optional, used only to help you find friends who already play, and can be refused or revoked without losing any other feature.
• You can delete your account and data yourself from inside the game, or by emailing us. See section 9.
• Payments are processed by Google and Apple. We never see your card or bank details.

3. Information we collect

We collect only what the game needs to work. The table summarises it; the subsections explain each category.

3.1 Account information

To create an account you provide an email address and a display name, plus a password if you register directly with us. Passwords are handled by Google Firebase Authentication and are stored in hashed form; we never see or store your plaintext password.

You may instead sign in with Google or with Apple. When you do, we receive your email address and, where available, the name on that account, which we use as your starting display name. We do not receive your Google or Apple password. If you use Apple's Hide My Email feature, we only ever hold the relay address Apple generates for you.

You also pick an in-game avatar. That is a cosmetic choice stored as a number; we do not ask for your gender, your date of birth, your address, or your phone number.

3.2 Game progress and play data

So your galaxy survives a reinstall or a new phone, we store your progress against your account: levels completed, stars, scores, in-game currencies and items (gold, comets, keys, star gems, memory fragments, astral essence, mana, hints, boosters), lives, selected character and wand, tutorial progress, daily login streak, and timestamps of your last activity and sync.

For multiplayer we also store competitive records: your Stellar Rating and peak rating, skill ratings derived from the words you play and the tiles you use, total battles played and won, and a record of each battle, including the words played, moves, rounds, and the result.

3.3 Social and multiplayer features

If you invite a friend, we generate an invite link tied to your player ID. When someone accepts, we record a friendship on both accounts, including the friend's ID, display name, avatar, when the friendship started, and whether it came from a link or a contact match.

When you search for an opponent, we briefly place an entry in a matchmaking queue containing your display name, ratings, equipment strength, and streak, so a suitable opponent can be found. The entry is removed once you are matched or you cancel.

Chat. Where the game lets you send messages to another player, we store the message text, your player ID, display name, and avatar, and the time it was sent, so it can be delivered and shown in the conversation. Please do not put sensitive personal information in chat messages. We may review reported messages to enforce our rules or comply with the law.

3.4 Contacts access (optional)

If you grant contacts access, the game reads your contacts' display names, and reads a phone number and photo thumbnail only so the list looks right on your screen. Here is exactly what happens to each:

• Contact names are sent to our server to be compared against registered player names, so we can show you which contacts already play. Names are used for that lookup and are not added to a marketing list or shared with anyone.
• Phone numbers and contact photos never leave your device. We do not upload, store, or transmit them. A phone number is only used locally if you choose to send an invite, and it is your own messaging app that sends it.
• We do not build a social graph of your contacts, and we do not use contacts data for advertising.

You can revoke contacts access at any time in your device settings (Android: Settings › Apps › Super Word Galaxy › Permissions; iOS: Settings › Privacy & Security › Contacts). Revoking it stops any further reading of your address book immediately.

3.5 Notifications

If you allow notifications, Firebase Cloud Messaging issues a push token for your installation, which we store on your account so we can send battle invitations, challenge alerts, and daily streak reminders. The token identifies the app installation, not you personally, and is deleted when you sign out or delete your account. Some reminders are also sent by email to the address on your account. You can turn notifications off in your device settings at any time, and you can ask us to stop sending reminder emails by writing to support@funtimesstudio.com.

The game also schedules purely local reminders on your device. Those never reach our servers.

3.6 Purchases

Super Word Galaxy offers optional in-app purchases of consumable items. Purchases are processed entirely by Google Play Billing or the Apple App Store under their own privacy policies. We receive confirmation that a purchase succeeded so we can credit your items. We never receive or store your payment card number, bank details, or billing address. Refunds are handled by the store you bought from.

3.7 Technical and diagnostic data

Like any online service, our infrastructure providers automatically process limited technical data when the game connects, including your IP address, the approximate region derived from it, device and operating system type, app version, and timestamps. This is used to deliver the service, verify that requests come from a genuine copy of the app, prevent abuse, and diagnose faults. If the game crashes, a crash report containing device state and a stack trace may be sent to us so we can fix the problem.

3.8 What we do not collect

For clarity, Super Word Galaxy does not collect or request: your precise or coarse location, camera or photo library access, microphone or audio recordings, health or fitness data, SMS or call logs, files or documents on your device, biometric data, or your advertising identifier.

4. How we use information

We use the information described above to:

• Create, authenticate, and secure your account, and let you recover it.
• Save and synchronise your progress across devices and reinstalls.
• Run gameplay features: matchmaking, battles, leaderboards, streaks, quests, and rewards.
• Operate the social features you choose to use, including invites, friend lists, and messages.
• Deliver purchases and keep your item balances correct.
• Send you service messages, and notifications you have opted into.
• Diagnose crashes, fix bugs, and improve balance and performance.
• Detect and prevent cheating, fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our terms.

We do not use your information for automated decision-making that has legal consequences for you, and we do not profile you for advertising.

5. What other players can see

Super Word Galaxy is a social game, so some information is visible to others by design. Please choose a display name you are comfortable being seen publicly.

• Your display name, avatar, ratings, daily streak, and equipped character and wand are shown to opponents, to players in matchmaking, on friend lists, and on leaderboards.
• Leaderboard entries showing your display name and score may be visible publicly, including outside the game.
• Battle records, including the words you played, are visible to your opponent in that battle.
• Messages you send are visible to the recipient.

Your email address and push token are not features of the game's social surfaces and are not intentionally displayed to other players. We are progressively hardening how those fields are stored so they are reachable only by you and by our servers.

6. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share data only in these situations:

Service providers who process data on our behalf

These providers are contractually bound to process data only on our instructions and to protect it appropriately.

Other players

As described in section 5.

Legal and safety

We may disclose information if we are required to by law, a court order, or a valid request from a public authority, or where we reasonably believe disclosure is necessary to investigate fraud or abuse, protect our rights, or protect the safety of any person.

Business transfers

If Fun Times Studio, Inc. is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.

7. Advertising and tracking

Super Word Galaxy contains no third-party advertising SDKs and shows no third-party ads. We do not collect the Android Advertising ID or Apple's Identifier for Advertisers, we do not fingerprint your device, and we do not track you across other apps or websites. There are no advertising cookies on our website.

If we ever introduce advertising, we will update this policy, raise the version date at the top of this page, and obtain any consent that applicable law requires before any advertising data collection begins.

8. How long we keep data

• Account and progress data is kept for as long as your account exists, so you do not lose your game.
• Matchmaking queue entries are transient and removed when a match is made or cancelled.
• Battle records and chat messages are kept while they remain relevant to the players involved.
• Push tokens are removed when you sign out, when the token becomes invalid, or when your account is deleted.
• Contact names submitted for friend matching are used for the lookup and are not retained as a contact list.
• Crash and diagnostic logs are kept for a limited period, typically no more than 90 days, in line with our providers' defaults.
• Purchase confirmations may be kept longer where tax, accounting, or fraud-prevention law requires it.

An account that has been inactive for an extended period may be removed along with its data. We will make a reasonable attempt to notify you at the email address on your account first.

9. Deleting your account and data

You are in control of your data, and deleting it does not require you to ask permission.

Option A — delete it yourself, in the game

1. Open Super Word Galaxy and make sure you are signed in.
2. Go to your Profile screen.
3. Choose Delete Account.
4. Type DELETE in the confirmation box to confirm.

This immediately removes your sign-in credentials and your player profile, and clears the game data saved on your device. It cannot be undone: your progress, items, ratings, and any purchased items are gone for good, and purchases are not refundable once the account is deleted.

What deletion covers

Deletion removes your authentication record and your player profile, including your email address, display name, avatar, progress, currencies, items, ratings, streak, and push token, and removes you from our live leaderboard.

A small amount of residual data may persist for a short period afterwards:

• Records of shared activity, such as a completed battle or a message you sent, may remain visible to the other player involved, since that record is also theirs.
• Historical high-score entries may retain the display name you used at the time.
• Encrypted backups and provider logs cycle out on their normal schedule, generally within 90 days.
• Data we are legally required to keep, such as purchase records for tax purposes, is retained for the required period and used for nothing else.

If you want any residual item removed sooner, email support@funtimesstudio.com and we will remove what we are able to remove.

Deleting less than everything

You do not have to choose between all and nothing. Write to us and we can change your display name, unlink a Google or Apple sign-in, clear your friend list, remove specific messages, or stop reminder emails, without deleting your account.

10. Your privacy rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you, and receive a copy of it.
• Correct data that is inaccurate or incomplete.
• Delete your data, as described in section 9.
• Port your data to another service in a machine-readable format.
• Object to or restrict processing that relies on our legitimate interests.
• Withdraw consent at any time, for example for contacts access or notifications, without affecting anything we did while consent was in place.
• Not be discriminated against for exercising any of these rights. Using them will never degrade your game.

To exercise any right, email support@funtimesstudio.com. We will verify your identity through the email address on your account and respond within 30 days, or sooner where the law requires. You may use an authorised agent where local law allows.

California residents: we do not sell personal information and do not share it for cross-context behavioural advertising, so there is nothing to opt out of, but the access, deletion, correction, and non-discrimination rights above apply to you.

EU, UK, and Swiss residents: if you believe we have handled your data improperly, you may lodge a complaint with your local supervisory authority. We would appreciate the chance to put it right first.

11. Children's privacy

Super Word Galaxy is not directed to children under 13 (or the equivalent minimum age in your country, such as 16 in parts of the European Economic Area). The game includes player-to-player messaging, friend invitations, and optional contacts access, and it is intended for a general audience of teenagers and adults rather than for children.

We do not knowingly collect personal information from children under that age. If we learn that we have, we will delete the account and its data promptly.

If you are a parent or guardian and believe your child has created an account, email support@funtimesstudio.com with the display name or email address used. We will verify your relationship to the child, delete the account and its data, and confirm to you when it is done. You do not need a court order or a lawyer to make this request.

12. How we protect data

We take reasonable and appropriate technical and organisational measures to protect your information, including:

• Encryption in transit using TLS, and encryption at rest by our cloud providers.
• Passwords stored only as salted hashes, by Google Firebase Authentication.
• Server-side access rules so that account data can be written only by its owner.
• App attestation, so requests from tampered or cloned copies of the game can be rejected.
• Access to production data limited to the people who need it to run the service.

No system is perfectly secure, so we cannot guarantee absolute security. Use a strong, unique password, and tell us at support@funtimesstudio.com if you think your account has been compromised. Where a breach is likely to present a risk to you, we will notify you and the relevant regulators as required by law.

13. International data transfers

Fun Times Studio, Inc. is based in the United States, and our cloud providers operate data centres in several countries. Your information may therefore be transferred to, stored in, and processed in the United States or other countries whose data protection laws differ from those where you live.

Where we transfer personal data out of the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK Addendum, as implemented in our agreements with our providers.

14. Changes to this policy

We may update this policy as the game evolves. When we do, we will revise the "Last updated" date at the top of this page. If a change materially affects how we handle your personal information, for example a new category of data or a new purpose, we will give you clear notice in the game or by email before it takes effect, and obtain your consent where the law requires it.

Continuing to use Super Word Galaxy after a change takes effect means you accept the updated policy.

15. Contact us

Privacy questions, data requests, and complaints all reach a real person at the address below. It is also the fastest route to having your data deleted.