Privacy Notice

Who is responsible

Naeem Jamil is the data controller for personal information processed to provide Word Wonderland. Paddle independently handles payment-related information as Merchant of Record under its own privacy notice.

Information and purposes

• Account information: email address, account identifier, protected login credentials and authentication information, used to register, sign in, recover access and keep accounts secure. If you choose a social sign-in provider, it may supply basic account details such as a name or email address. We do not ask for a separate child profile.
• Purchase records: account and transaction identifiers, payment status, amount and access expiry, used to verify purchases, unlock paid words, process payment updates and prevent fraud. Payment card details are entered into Paddle’s checkout, not stored in the game’s purchase records.
• Technical information: IP address, browser or device information, page requests, diagnostic errors and usage information that hosting and service tools may process to deliver the app, maintain security and diagnose problems.
• Browser-stored settings: free-round completion markers and settings used to provide the game experience. Spelling answers and round scores are processed in the game; there is no account-based progress profile.
• Support communications you choose to provide, used to answer requests and resolve issues.

Legal bases

Account administration and purchased access are processed to perform our contract with you. Security, fraud prevention, diagnostics and service reliability rely on legitimate interests, balanced against your rights. Records required for tax, accounting or legal obligations are processed to comply with the law. Where consent is required, it must be obtained before the relevant processing, and may be withdrawn.

Children and adult accounts

The games are intended for children with adult supervision. A parent or guardian should manage registration and purchases; do not submit a child’s personal details when creating an account. The free sample can be played without an account.

Who receives information

Service providers including Lovable Cloud and its hosting, authentication, database and diagnostic infrastructure process information needed to operate the service. Paddle receives information needed for sales, payment verification, billing, taxes, invoicing and refunds. Your chosen social sign-in provider processes sign-in requests. External music hosts receive technical requests when audio is loaded or played, and Google Fonts receives requests to deliver the app’s typeface. Links to external sites are governed by those sites’ privacy notices.

Relevant information may be shared with professional legal or accounting advisers, or authorities where required by law. Service providers may process data in countries other than your own; legally required safeguards must apply to international transfers.

Retention and security

Account information is kept while needed to provide and secure your account. Purchase and support records are retained for the period needed to fulfil their purpose and applicable legal obligations. Data is deleted or anonymised when no longer needed. Essential browser storage remains until it expires or you clear it. We use appropriate technical and organisational measures, including encrypted connections and access controls; no online service can guarantee absolute security.

Your privacy rights

Depending on applicable law, you may have rights to access, correct, delete, restrict or object to processing of your data, obtain portable copies, withdraw consent and complain to your local data protection authority. These rights may be subject to identity checks and legal record-keeping requirements. Where UK or EEA rules apply, requests are normally answered within one month and international transfers require an applicable adequacy decision or safeguards such as standard contractual clauses. Payment-data requests can be directed to Paddle using the contact details in its privacy notice.

Cookies and browser storage

Essential cookies or browser storage support sign-in, session security and the free-round limit. No marketing cookie feature is added by the game. You can clear or block storage in your browser settings; doing so may sign you out or reset local game settings. Any optional analytics or marketing cookies that require consent must remain disabled until that consent is obtained.