Privacy

Privacy policy

Last updated: 1 October 2026.

This policy describes what data is processed when you use the WordSpin website (wordspin.app) and the WordSpin iOS application, on what legal basis, and who to contact about it.

1. Controller

The data controller for both the website and the app is:

Nadzeya Yashchuk · Sole Proprietor (Einzelunternehmer)
Käferheimerstraße 153b / Tür 12
5071 Wals-Siezenheim, Austria
Email: contact@nadzeyayashchuk.com
Product email: support@wordspin.app

2. What the website collects

The website has no sign-ups, no accounts, no comments and no contact forms, and it never asks for personal data. Two things happen in your browser:

• Local storage on your device — your light/dark theme, your progress in the browser game and the daily word wheel, and your cookie choice. This never leaves your device; clearing your browser’s site data removes it.
• Google Analytics 4 — anonymous usage statistics (pages viewed, rough location by country, device type, and in-game events such as starting or finishing a puzzle) so we can see what works. IP anonymisation is on. Visitors in the EEA, the UK and Switzerland see a consent banner first and analytics stays off — no analytics cookies are set — unless they accept. Elsewhere analytics is on by default.

You can change your choice at any time: Cookie settings. Legal basis for analytics: Art. 6(1)(a) GDPR — your consent (EEA/UK/CH).

3. Server logs

The website is hosted on Cloudflare Workers Static Assets. As is standard for any web host, Cloudflare may briefly log technical request data — your IP address, user agent, timestamp, and the URL requested — for the purposes of delivering the page, blocking abuse, and computing aggregate traffic counts. Cloudflare retains these logs for a short period according to its own policies; we do not receive or store them ourselves.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in operating and securing the site.

4. What the iOS app collects

The app has no sign-ups, no accounts, and no servers of its own. Everything you do in the app — completed levels, words you’ve found, settings, hint cooldowns, whether you own Premium — is stored locally inside the app’s sandbox on your device. You can erase all of it by deleting the app. None of this data is transmitted to us.

5. Third-party services

WordSpin uses the third-party services listed below and no others. We do not embed social-network SDKs, attribution SDKs or remarketing pixels, and the app contains no analytics SDK.

Website

• Cloudflare, Inc. — hosts the site and delivers it from its edge network. See §3 above.
• Google Ireland Ltd. (Google Analytics 4) — website usage statistics, see §2. Governed by Google’s Privacy Policy.

Webfonts (Instrument Serif, Newsreader, Geist) are served from our own domain — no request is made to Google Fonts or any other font CDN.

iOS app

• Apple Game Center — optional. If you sign in, your achievements and your Dictionary Coverage score are submitted to Apple under your Game Center identity. You can decline, and the app works identically.
• Apple StoreKit — handles the optional Premium purchase and the Restore Purchases flow. We never see your payment information; Apple does.
• Advertising SDK — the iOS app displays one short interstitial after every third completed level and an optional rewarded ad for an extra daily hint. These surfaces are served by the third-party advertising provider identified in the app’s App Store privacy nutrition label, governed by that provider’s own privacy policy. Premium subscribers have the advertising SDK disabled and see no ads.

6. Cookies

The website sets Google Analytics cookies (_ga, _ga_*) only when analytics is allowed — after you accept the banner in the EEA, the UK and Switzerland, or by default elsewhere. No advertising or tracking cookies are set. You can withdraw consent with Cookie settings. The app does not use cookies; its data is stored in the iOS sandbox via the operating system’s standard mechanisms.

7. Children

WordSpin is suitable for general audiences. We do not knowingly collect personal data from anyone, including children under 13. If you believe a child has provided personal data to us (for example by emailing support), write to the address in §1 and we will delete it.

8. Your rights under the GDPR

If your personal data is processed by us — typically only if you have emailed us — the GDPR gives you the right to:

• access the data (Art. 15);
• have inaccurate data corrected (Art. 16);
• have data erased (Art. 17);
• restrict processing (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interest (Art. 21);
• withdraw any consent you have given, at any time and without giving a reason (Art. 7(3)).

To exercise any of these rights, write to the email address in §1.

9. Right to lodge a complaint

You may complain to the Austrian Data Protection Authority:

Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Vienna, Austria
www.dsb.gv.at

10. Changes

If this policy changes materially, the updated text appears on this page and the date at the top is bumped. Continued use of the site or the app after the update means you have read the current version.

11. Contact

Questions or requests: contact@nadzeyayashchuk.com (privacy / business) or support@wordspin.app (product help).