Word & Sword · Privacy Policy
Last updated: 11 November 2026
Word & Sword ("the game") is an iPhone game made by Hakan Pasinli, an independent developer who lives in Türkiye ("we", "us"). There is no company behind it. This policy explains what information the game and this website use, why, who else receives it, where it goes, how long it is kept and what you can do about it. The Turkish version says the same and is also our notice under Türkiye's data protection law (KVKK, Art. 10).
Data controller: Hakan Pasinli. Contact: wordnswordsupport@gmail.com
The short version
- The game has no accounts of its own, and we run no servers. Your progress stays on your phone. If you use Game Center, Apple also keeps your best Vigil and your achievements. We do not ask for your name, email address, phone number, contacts, photos or location.
- The game shows ads from Unity. No ad service starts until the game has asked you, the first time you leave a round after winning stop I.
- In the EU and EEA, the UK, Switzerland and Türkiye, the game first asks your age, then asks adults whether ads may use data from this device. If you say you are under 18, ads are never personal.
- In the EU and EEA, the UK and Switzerland, there are no ads at all unless you allow them. In Türkiye, if you do not allow them, you still see ads, but they are not personal.
- Wherever ads may be personal, iOS also asks whether the game may track you (App Tracking Transparency). Ads are personal, and Unity gets your device's advertising identifier, only if you allow it.
- Change your mind at any time: in the game's settings, under Privacy, and for tracking in iOS Settings.
- When you buy something, Apple takes the payment. We never see your payment details.
- The game's notifications are made on your phone. Nothing about them is sent to us.
- To see or delete your data, write to us. We answer in writing within 30 days.
1. On your phone
The game keeps its save on your phone. It holds:
- your progress: the stops you have won, the hero words you have opened and your deck;
- your coins, how many free coins you have taken today, and the levels of your words and tiles;
- your longest stand in the Vigil, and how many Vigils you have kept;
- the day's relic, if you have one;
- your settings (sound, music, notifications), the lessons you have seen, and whether the game has asked you about ads and notifications;
- your privacy choices: your answer to the age question, your answer about ads, and your App Store country;
- how many days and rounds you have played, and the version that last asked for a rating, so that the rating prompt comes rarely;
- a record of your purchases and their store transaction ids, so that each purchase is granted once.
The save is never sent to us. The game has no cloud save and no leaderboard: your best time is kept on your phone, and nobody else sees it. The rivals you play against are recordings that come inside the game, and your own rounds are not uploaded.
Your phone's own iCloud backup may include the save, under Apple's terms. Deleting the game deletes the save from your phone.
2. Ads
The game is free and shows two kinds of ad:
- ads you choose to watch, for a second life, double coins, free coins or the day's relic;
- ads between rounds, never in your first two weeks, only after you have first won stop III, at most one every 90 seconds, and never after you have bought anything in the game (deleting the game forgets coin purchases; No Ads can be restored). Buying No Ads ends these for good. The ads you choose stay available, and play only when you choose them.
The ads come through Unity's LevelPlay mediation service (the ironSource SDK) and the Unity Ads network, both run by Unity Technologies. These are the only ad networks in the game. To show ads, measure them and prevent fraud, these services collect information from your phone, such as:
- device identifiers: the identifier your iPhone gives this developer's apps (IDFV), identifiers these services make for the app on your phone and, only if you allow tracking, your device's advertising identifier (IDFA);
- your IP address, and the approximate location (country or region) worked out from it;
- device information: model, operating system, language, screen size and connection type;
- how you interact with ads, such as views and taps, and your purchase history as far as these services receive it;
- performance and diagnostic information about the ads.
They use it to choose and show ads, to count views and taps, to pay for the ads, and to keep the ads safe from fraud. If you allow it, they may also use it to show ads more relevant to you. We do not receive this information ourselves. Unity's full list is in its own policy.
When the ad services start. They do not start during your first rounds. The first time you leave a round after winning stop I, the game asks what section 3 describes, and the ad services do not start until you have answered. Until then, no ads of either kind are shown.
Tracking (App Tracking Transparency). Wherever ads may be personal (section 3), iOS then asks whether the game may track your activity across other companies' apps and websites. It asks once. The game does not ask a player it knows to be under 18.
- If you allow it, Unity also receives your IDFA, and may combine data from this game with data from other companies' apps and websites to make ads personal and to measure them.
- If you choose "Ask App Not to Track", Unity does not receive your IDFA, and the game tells Unity not to make your ads personal and not to sell or share your information. You still see ads.
- You can change this at any time in iOS Settings > Privacy & Security > Tracking.
Unity decides how it uses ad data as an independent controller, under its own policies: the Unity Privacy Policy and the Game Player and App User Privacy Policy. It also uses the data to improve its services, and may pass ad requests to the advertising partners those policies name.
3. Your ad choices
Where the game asks first: the EU and EEA, the UK, Switzerland and Türkiye (with some territories where the same rules apply), and also when the game cannot tell your country. It looks at your App Store country and, if that is unknown, at your iPhone's region setting.
- First it asks your age: under 18, or 18 or older. It does not ask for a birth date. Your answer stays on this phone.
- If you are 18 or older, it asks whether our ad partner Unity may use data from this device to show you ads, including personalized ones: allow, or do not allow. If you allow it, iOS then asks about tracking (section 2).
- The ad services do not start until you have answered.
- In the EU and EEA, the UK, Switzerland, and when the game cannot tell your country: if you are under 18, or do not allow it, there are no ads at all. The ad services do not start, there are no ads you can choose to watch, and No Ads is not offered, as it would have nothing to end.
- In Türkiye: if you are under 18, or do not allow it, you still see ads, but they are not personal (contextual ads), and iOS does not ask about tracking.
Everywhere else, the game shows a short card, then iOS asks about tracking. Ads are personal only if you allow it.
If the game learns your country late: if the ad services have started and your App Store country then turns out to be in one of these regions, ads stop being personal at once, ads stop altogether in the regions where you must allow them, and the game asks at the next chance.
Apple's age range: where Apple's age range feature applies, iOS may ask whether to share your age range with the game, at the same moment and again when you open the game later. If you share that you are under 18, ads are not personal, the game does not ask about tracking and it skips its own age question. In the EU and EEA, the UK and Switzerland there are then no ads at all. For under-13s, see section 13.
Change your mind at any time: in the game's settings, under Privacy, you can turn Personal ads on or off and, where the game asks your age, answer again with Change age. The same place holds the policy, Support and Report an ad. The game tells Unity at once not to use your information for personal ads and not to sell it, and the change fully applies the next time you open the game. You will still see ads, less suited to you, except that in the EU and EEA, the UK and Switzerland turning Personal ads off stops ads at once. If you said you are under 18, Personal ads stays off. Tracking is in iOS Settings > Privacy & Security > Tracking.
Inside an ad: Unity's ads may show a Data Privacy icon. Tap it to see what Unity holds about your device for this game, to turn off personal ads, or to ask Unity to delete that data. That tool is Unity's.
Report an ad: in the game's settings, Privacy > Report an ad, or the Support page.
4. Purchases and Game Center
Apple's App Store processes in-app purchases. Apple handles your payment, and we never receive your card or account details.
- Apple tells the game what you bought and gives it a transaction id. The game keeps recent transaction ids on your phone, so that each purchase is granted exactly once.
- The purchasing code in the game (Unity IAP, by Unity Technologies) talks only to Apple, on your phone, to buy and to restore what you have bought. It sends nothing about your purchases to Unity or to us. The game does not use Unity's web shop or direct payment services.
- Every in-app purchase carries the game's age rating (13+).
Game Center. If your iPhone is signed in to Game Center, the game sends Apple your best time in the Vigil, for its leaderboard, and the achievements you earn. Apple keeps them with your Game Center account, under Apple's terms, and shows them to other players as your Game Center settings allow. The game sends Game Center nothing else, and we receive nothing from it beyond what any player sees on the leaderboard. If you are not signed in, nothing is sent. You can sign out in iOS Settings > Game Center.
5. Analytics and crash reports
We run no analytics of our own: the game contains no analytics service and no crash reporter. If you chose in iOS Settings (Privacy & Security) to share analytics with app developers, Apple sends us the game's crash and performance reports. They do not say who you are.
6. Notifications
If you turn notifications on, the game schedules at most one a day on your phone, in the evening. It asks once, after you have first won stop II. They are local notifications: their lines come inside the game, no notification service or server is involved, and nothing about them is sent to us. You can turn them off in the game's settings or in your phone's settings.
7. Emails to us
If you email us, we receive your email address and your message, and use them only to answer you. Our mailbox is Gmail, run by Google. We keep emails as long as we need them to help you, and delete them within 2 years at most: once a year we delete every email more than a year old. For a privacy request, we keep a short note of what you asked and how we answered for the same time.
8. This website
This site runs on Cloudflare Pages. When you visit, Cloudflare's servers process your IP address and basic details of the request (such as which page and which browser) to deliver the page and protect the site, and keep technical logs. The site sets no cookies of its own, runs no analytics and loads nothing from other sites.
9. Who receives your data, and where
Your data goes outside Türkiye to these companies, most of them in the United States:
- Unity Technologies (United States): ads (sections 2 and 3). Unity may store and process data in the United States, Israel and other countries where it or its service providers, such as Google Cloud, operate. For data from the EEA and the UK, Unity uses Standard Contractual Clauses.
- Apple (Apple Inc., United States; for the EEA, the UK and Switzerland, Apple Distribution International, Ireland): payments, Game Center and crash reports (sections 4 and 5). For data from the EEA, the UK and Switzerland, Apple uses Standard Contractual Clauses or adequacy decisions.
- Google (Google LLC, United States): our support mailbox, Gmail (section 7). Google may store emails in the United States and other countries.
- Cloudflare (Cloudflare, Inc., United States): this site (section 8), on servers around the world. For data from the EEA, the UK and Switzerland, Cloudflare uses the EU-US Data Privacy Framework or Standard Contractual Clauses.
We share data with these companies only so they can do their part of the game, and they protect it at least as well as this policy does. For ads, Unity also decides how it uses ad data, under its own policy. If you would like details of the safeguards for a transfer, write to us. We do not sell your personal data.
Their policies: Unity, Unity for players, Apple, Google. Cloudflare's is at cloudflare.com/privacypolicy.
10. How long it is kept
- On your phone, including your age answer and your ad choice: until you change it or delete the game.
- Apple's age range: only while the game is open.
- Ad data: Unity decides, under its own policy.
- Crash reports: in Apple's developer tools, under Apple's rules.
- Game Center: with your Game Center account, under Apple's rules.
- Emails: deleted within 2 years at most (once a year, those more than a year old).
- Site logs: at Cloudflare, under its terms. We keep no copy.
11. Purposes and legal bases
We use data for the purposes each section gives. Where KVKK or the GDPR (EU or UK) applies, our legal bases are:
- Making and performing our contract with you (KVKK Art. 5/2-c; GDPR Art. 6/1-b): providing the game and its purchases.
- Your explicit consent (KVKK Art. 5/1; GDPR Art. 6/1-a): personal ads and tracking, and in the EU and EEA, the UK and Switzerland all ads. You can withdraw it at any time in the game's settings under Privacy, and for tracking in iOS Settings. That does not change what happened before.
- Our legitimate interest (KVKK Art. 5/2-f; GDPR Art. 6/1-f) in funding a free game and keeping it safe: non-personal ads (outside the EU and EEA, the UK and Switzerland), counting ads, preventing fraud and running this site.
- Our legitimate interest in protecting young players: the age question.
- Our legitimate interest in helping players: answering your emails and, if you share them through Apple, fixing the game with crash reports.
- Our legal obligation (KVKK Art. 5/2-ç; GDPR Art. 6/1-c): answering privacy requests.
Unity relies on its own legal bases for the data it uses for itself (see its policy).
You do not have to give us any data. In the EU and EEA, the UK and Switzerland you can play with no ads at all. Elsewhere, once they have started, ads always need the data in section 2.
How it is collected: through the game and this site, electronically and automatically, and from what you tell us when you write to us.
12. Your rights
Depending on where you live (for example in the European Economic Area, the United Kingdom, Switzerland, Türkiye or California), you may have the right to ask what information is held about you, to get a copy, to have it corrected or deleted, to restrict its use, and to object to its use for advertising. You can withdraw consent at any time. The Turkish version lists your rights under KVKK Art. 11.
How to ask
- Write to wordnswordsupport@gmail.com and say what you want. We treat every email about your data as a request; there is no form.
- We answer in writing and for free within 30 days at most, or sooner if your law asks for it.
- We do not ask for an ID document.
- We hold very little: your emails. The rest is on your phone, or with Unity and Apple under identifiers we cannot see, so use their own routes below.
What you can do yourself
- What is on your phone: delete the game. That deletes the save. Purchases stay with your Apple account, and No Ads can be restored.
- What you have sent us: write to us and we will delete it.
- What Unity and its ad services hold: use the Data Privacy icon where a Unity ad shows one, or write to Unity at DPO@unity3d.com. You can also write to us, and we will help you reach them.
- What Apple holds: iOS Settings, or privacy.apple.com.
Complaints
- You can complain to your data protection authority.
- In Türkiye, write to us first. If we refuse, do not answer within 30 days, or you find our answer insufficient, you can complain to the Personal Data Protection Board (kvkk.gov.tr) within 30 days of learning our answer, and in any case within 60 days of your request.
13. Children
The game's age rating is 13+. It is made for a general audience, it is not directed at children under 13, and we do not knowingly collect personal information from children. The game tells the ad services it is not directed at children.
- Where Apple's age range feature applies, iOS may ask whether to share your age range with the game. If Apple tells the game a player is under 13, the game does not start the ad services. For ages 13 to 17, ads are not personal and the game does not ask about tracking.
- The game keeps the age range Apple gives only while it is open. It is not saved or sent anywhere.
- US law (COPPA): from a player we know to be under 13, the game collects no persistent identifier. It sends no ad request for that player, and purchases go only through Apple (section 4).
- If you are a parent and believe your child has given us personal information, write to us. We will delete what we have and help you reach Unity and Apple.
14. US state laws
We do not sell your personal data. Under some US state laws, personal advertising may count as "sharing" or "targeted advertising". To opt out, turn off Personal ads in the game's settings under Privacy, or ask the app not to track you (iOS Settings > Privacy & Security > Tracking). Either way the game tells Unity not to make your ads personal and that you have opted out of sale and sharing.
15. Changes
If this policy changes, we update this page and the date at the top, and mention important changes in the game's App Store update notes.