Last updated: 5 October 2026
Arena of words (package name com.wordarena.pvp; internally called Word Battle) ("the App") is a competitive word-guessing game operated by Alon Ben-Zion ("we", "us", "our"). Contact: arenaow.dev@gmail.com. This policy explains what information the App collects, why, and how it is handled.
Device account. When you first open the App, a random device identifier is generated on your device and sent to our server to create an account. No name, email, or password is required to play. Guest play is the default. There is no first-run login gate.
Optional Google Sign-In. If you choose to sign in with Google, the App sends Google's ID token to our server. We receive your Google account ID, email address, and (if Google includes it) display name from that token. We store the Google account ID and email so we can link your progress across devices. We do not store Google's display name as your in-game name — that name is the username you choose in the App. We do not access your Google contacts, calendar, photos, or any other Google data. You can keep playing as a guest without signing in.
In-game profile. We store the username you choose (used for exact-match friend search), display name, avatar letter, preferences (sound, haptics, reduced motion), and similar profile fields needed to operate the game.
Gameplay data. We store your game results (scores, words played, solve times), room entries, challenge and friend relationships, tickets, league standing, rating, and in-game currency balance (Gems). We also record first-party game events (for example, that you opened the shop or finished a round) on our own servers so we can operate the game, keep it fair, and understand how it is used.
Advertising (Android app). On the Google Play app, the hourly gem gift (5 Gems, once per 60 minutes) is granted after you watch a rewarded video ad. Those ads are served by Google AdMob using the Google Mobile Ads SDK. Before we request an ad in the European Economic Area, the United Kingdom, or Switzerland, we show Google’s User Messaging Platform (UMP) consent form. In the current version of the App we request only non-personalized ads: we do not use the Android Advertising ID to build a profile of you or to personalize the ad. The SDK may still access the Advertising ID, app and device information, IP address, and approximate location derived from IP, and may share that information with Google to serve the ad, measure it, and fight fraud. The website and browser version of the game do not show these ads; there you can collect the hourly gift without watching a video. We do not use other advertising networks.
Campaign measurement (Android app). On the Google Play app we use AppsFlyer to tell which link or ad campaign led to an install, and whether that player later finishes a match, pays gems to enter a room, or buys Gems. Verified purchases and that first paid entry are sent by our server. AppsFlyer may receive the Advertising ID, device and app information, IP address, and those events. We turn personalized-advertising consent off for this SDK. In the European Economic Area, the United Kingdom, and Switzerland we start AppsFlyer only after the same consent form used for ads, and we do not start it if you refuse. The website and browser version do not load AppsFlyer. AppsFlyer may send the install and those events back to the advertising partner that brought the install, so that partner can measure the campaign. When that partner is Meta, AppsFlyer sends Meta the install, app opens, purchase events, and the first paid entry so Meta can measure the ads.
Purchases (Google Play). The App sells Gems as consumable in-app products (product IDs gem_pack_p1 through gem_pack_p6) through Google Play Billing. Google Play is the merchant of record and processes the real-money payment. When you buy, the App sends us the Play purchase token. We send that token to Google to verify the purchase, then credit the Gem amount that our server has already assigned to that product. We store Google's order ID, product ID, Gems credited, and the time of the purchase. We do not receive or store your card number, Google account password, or other payment-instrument details. Gems are a limited, personal licence to use in-game features. They have no cash value and cannot be transferred, traded, or withdrawn.
Technical data. We record your timezone (from the device) to determine which daily competitions you are eligible for. We collect standard server logs (IP address, request timestamps, and similar request metadata) for security and abuse prevention. We do not use GPS or Android location permissions. These logs are retained for a limited period and are not used for advertising.
We do not sell your information. We use service providers who process data on our instructions:
The App is served over HTTPS. Webfonts may be loaded from Google Fonts. Opponent seats in rooms show generated names, not real identities. Friends can find you only by exact username match; there is no browsing or partial search.
Your data is stored on servers hosted by Render and in a PostgreSQL database on that host. Data is transmitted over HTTPS. We do not store passwords.
Your game account is retained as long as it exists. You can delete your account and associated personal identifiers in the App (Settings → Delete account and data) or by emailing us at the address below. After deletion, the account is marked deleted and personal identifiers (device ID, email, Google account ID) are removed. Raw game-event rows are kept for 90 days and then deleted in any case.
The App is not directed at children under 13. It is intended for players aged 13 and over. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
The Android app may show non-personalized rewarded ads. We do not request personalized ads. We do not knowingly serve behavioural advertising to children under 13. If we later personalize ads, we will add an age step first.
We have not appointed an EU representative or a data protection officer. If you are in the EEA, UK, or a similar jurisdiction, you can still contact us at the email below about this policy or to request access or deletion. Google Sign-In and Play purchases involve Google; their processing is described in Google's own policies. Google AdMob and UMP, when used, also involve Google; their ads and consent processing is described in Google’s own policies. AppsFlyer, when the Android app starts it, processes campaign measurement as described in AppsFlyer’s privacy policy. Meta, when it receives those events from AppsFlyer, processes them as described in Meta’s privacy policy.
We may update this policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised.
If you have questions about this policy or want to request data deletion, contact us at: arenaow.dev@gmail.com