Word Spindles Privacy Policy

Effective date: 4 November 2026

Word Spindles is operated by Munchkin Marketing Ltd. (Company No. 11948331) trading as Black Radius Labs.

Registered office:
5 Station Road
Hinckley
Leicestershire
England
LE10 1AW

Email: admin@blackradiuslabs.com

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Word Spindles mobile game ("the Game").

By using the Game, you agree to the practices described in this policy.

1. Data Controller

For the purposes of applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the data controller is:

Munchkin Marketing Ltd. t/a Black Radius Labs

2. Information We Collect

Word Spindles does not require you to provide your name, email address, or other directly identifying personal information in order to play.

However, we may collect the following categories of information:

A. Anonymous Account Identifiers

When you first launch the Game:

• An anonymous Firebase Authentication account is created.
• A unique user identifier (UID) is generated.
• This UID is used to store and sync gameplay progress using Firebase Firestore.
• This identifier does not directly identify you as a person.

If you sign in to Google Play Games (automatically at launch where your device is already signed in, or from Menu → Settings):

• Your Play Games player identifier is linked to your anonymous account so your progress can be restored after a reinstall or on another device.
• Your saved progress includes your level, hint balance, unlocked and selected wheels and backgrounds, whether you own Remove Ads, today's rewarded-ad count, the transaction IDs of purchases already delivered (to prevent duplicate grants), and your Sanctuary: your coins, the items and room sizes you own, and how you have arranged and decorated your room.
• We do not receive your Google password.
• We do not access your Google emails or contacts.

B. Gameplay and Usage Data

We use Google Analytics for Firebase to understand how the Game is played so we can improve it. It records:

• App opens, sessions and how long they last (collected automatically by Firebase)
• Levels started and completed for the first time, with the time taken, hints used and shuffles used
• Tutorial started, completed or skipped, and whether the Sanctuary's first-visit tips were read to the end
• Hints used, hint shop opened, and whether a rewarded ad was completed (and whether it was for a hint or for coins)
• Sanctuary visits (how long each lasts, and how many things you place, move, recolour or redecorate there), the Sanctuary items and room sizes bought or sold with coins (with their coin price and your coin balance), and coin packs bought
• Purchases started, completed (including price and currency, reported by Google Play) or failed
• Advertisement impressions and the revenue they earn (reported by AdMob)
• Simple attributes: highest level reached, roughly how many Sanctuary items and how many cats you own, and whether you have made a purchase, own Remove Ads, or are signed in to Play Games

Analytics data is linked to a random app-instance identifier, not to your name or email. We do not use Google Signals.

Your choice: you can turn analytics off at any time from Menu → Settings → Share usage data. In the UK and EEA, storing analytics identifiers on your device also follows the choice you make in the consent form; if you do not consent, Firebase sends only limited, cookieless measurements without a device identifier.

C. Device and Technical Information

We may collect:

• Device model
• Operating system version
• App version
• Country (approximate location derived from IP)
• Language
• Crash reports and diagnostics

Crash data is collected through Firebase Crashlytics and is associated with your anonymous account identifier so we can investigate problems.

D. Advertising Data

Word Spindles uses Google AdMob to display advertisements:

• Rewarded ads that you may choose to watch in exchange for a hint or for Sanctuary coins (each limited per day).
• Interstitial ads shown occasionally between levels once you are past the early levels. These can be removed with the Remove Ads purchase.

AdMob and its advertising partners may collect and process:

• Advertising identifiers (such as the Google Advertising ID)
• Device information
• Approximate location (e.g., country-level data)
• Ad interaction data
• Technical and diagnostic information

Advertisements may be personalised or non-personalised depending on your consent choices.

For users in regions where consent is required (such as the UK and EEA), we use Google's User Messaging Platform (UMP) to collect and manage advertising consent in accordance with applicable law. Your consent preferences are stored and respected by the Google Mobile Ads SDK.

You may update your consent choices at any time within the app from Menu → Legal → Privacy Settings.

E. Purchases

Hint packs and coin packs (consumable) and Remove Ads (one-time, non-consumable) are sold through Google Play Billing. Google processes your payment; we never receive your card or payment details. We receive the product, a transaction ID and a purchase receipt, which we verify before delivering the item.

F. Other Google Play and Firebase Features

• Remote Config (Firebase) lets us adjust game settings, such as how often interstitial ads appear, without an app update.
• In-app review occasionally asks Google Play to show its rating prompt. Your rating and review go to Google Play; we do not receive them through the Game.
• In-app updates check Google Play for a newer version of the Game.

3. How We Use Information

We process information to:

• Operate and maintain the Game
• Sync and store gameplay progress
• Improve gameplay experience and balancing
• Analyse performance and usage trends
• Serve and measure advertisements
• Process and verify in-app purchases via Google Play
• Adjust game and advertising settings remotely
• Detect and prevent fraud, cheating, or abuse
• Maintain security and integrity of backend services

4. Legal Bases for Processing (UK/EU Users)

Where UK GDPR or EU GDPR applies, we rely on the following legal bases:

• Legitimate Interests – to operate, secure, and improve the Game.
• Performance of a Contract – to provide the Game and process in-app purchases.
• Consent – for personalised advertising, the use of advertising identifiers, and storing analytics identifiers on your device, where required by applicable law.
• Legal Obligations – where required by applicable law.

You may withdraw consent at any time from Menu → Legal → Privacy Settings, and switch analytics off from Menu → Settings → Share usage data.

5. Sharing of Information

We do not sell your personal data.

We may share information with trusted service providers that help operate the Game, including:

• Google Firebase (Authentication, Firestore, Analytics, Crashlytics, Remote Config)
• Google AdMob (advertising)
• Google Play Services (payments, Play Games sign-in, reviews, updates and platform functionality)

These providers process data according to their own privacy policies and applicable data protection laws.

6. International Transfers

Our service providers may process data outside the United Kingdom or European Economic Area.

Where this occurs, appropriate safeguards such as Standard Contractual Clauses or equivalent legal mechanisms are used in accordance with applicable data protection law.

7. Data Retention

We retain information only as long as necessary to:

• Provide the Game
• Maintain cloud save functionality
• Comply with legal obligations
• Resolve disputes
• Enforce agreements

Specifically:

• Cloud save and account – kept until you delete your account.
• Analytics – event-level data is kept for 14 months, then deleted; aggregated reports may be kept longer.
• Crash reports – kept by Crashlytics for 90 days.
• Purchase records – held by Google Play under its own policies.

If you stop using the Game, your anonymous account and associated progress data may be retained unless you request deletion.

8. Your Data Protection Rights

Depending on your location, you may have rights including:

• The right of access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to data portability
• The right to object to processing
• The right to withdraw consent

To exercise your rights, contact:
admin@blackradiuslabs.com

If you are in the United Kingdom, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
https://www.ico.org.uk

US State Privacy Rights

If you live in a US state with a consumer privacy law (such as California, Colorado, Connecticut, Virginia or Utah), you may have the right to know, access, correct and delete the personal information we hold, and to opt out of targeted advertising. We do not sell personal information. Where AdMob shows personalised ads, this may count as "sharing" for targeted advertising; you can opt out from Menu → Legal → Privacy Settings where shown, or through your device's ad settings. We will not discriminate against you for exercising these rights.

9. Data Deletion Requests

You can delete your account directly in the app from Menu → Legal → Delete Account. This is the fastest way to remove your account and associated game data. It also resets the Game's analytics identifier on your device.

If you cannot access the app and wish to request deletion manually, please contact us at:

admin@blackradiuslabs.com

For more details, see our Account Deletion page.

10. Children's Privacy

Word Spindles is not directed at children under the age of 13.

We do not knowingly collect personal information from children. If you believe a child has provided personal information, please contact us and we will take appropriate steps to investigate and delete such data where required.

11. Data Security

We implement reasonable technical and organisational measures to protect information. However, no system is completely secure and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time.

When we do, we will revise the "Effective date" at the top of this page.

Continued use of the Game after updates constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions about this Privacy Policy, please contact:

Munchkin Marketing Ltd.
t/a Black Radius Labs
5 Station Road
Hinckley
Leicestershire
England
LE10 1AW

Email: admin@blackradiuslabs.com

← Back to home