WordMaxed Privacy Policy
Updated October 13, 2026
WordMaxed is provided by FLEXIBENDI LLC (Flexibendi, “we,” “us”). This policy covers the WordMaxed app, including Android and iOS, and its online services. Features and providers can vary by platform and app version.
Local game saves and preferences are stored on your device. Online matches, Daily Challenge and leaderboard submissions use our servers. The mobile app also uses Unity Analytics, TikTok’s business SDK, and Google AdMob, and optional online-game notifications use push-delivery services.
Data we process and why
- Local play: saved games, progress, preferences, and identifiers used to resume online play are stored on your installation. Local saves are not an automatic cross-device cloud backup.
- Daily Challenge and leaderboards: submitted scores, display names, game settings, challenge or season identifiers, and gameplay information needed to validate and rank submissions. Names and results can be visible to other players.
- Online multiplayer: player and installation identifiers, names, match and invitation identifiers, membership, turns, scores, game-state snapshots, and request timestamps. We process these to host games, reconnect players, synchronize turns, and protect match integrity. Relevant names and match activity are visible to other participants.
- Notifications: when you enable supported online-game notifications, we process a device push token, installation and player identifiers, platform and language, permission/preferences, and delivery-related information to send game updates.
- Analytics and diagnostics: Unity Analytics receives gameplay events, feature interactions, session information, game settings, language, app/device information, and service-generated identifiers to understand usage and improve the game. Diagnostics and network information, including IP addresses and request timestamps, can also be processed by our service infrastructure and SDK providers for reliability, security, and abuse prevention.
- Advertising: Google AdMob processes IP addresses (which can indicate approximate location), app and ad interactions, diagnostic information, and device or advertising identifiers for advertising, measurement, and fraud prevention. The data available depends on platform, device settings, consent choices, and SDK behavior.
- Purchases: where in-app purchases are available, the app store and Unity In-App Purchasing process product, transaction, receipt, and purchase-status information to complete or restore purchases and measure transactions. Removing ads does not automatically stop separate app analytics.
- In-app feedback: submitted subject and message text, a player identifier if included, and timestamps are processed by our feedback service to investigate issues and improve the game.
- Support: if you contact us, we receive your email address, message, and any screenshots or other information you choose to send so we can address the request.
Do not use sensitive personal information as your display name or include it in screenshots or support messages. We do not ask you to provide government identification, payment-card information, passwords, or authentication tokens for routine support.
Service providers and sharing
We use Amazon Web Services (AWS) to operate our online services and store associated game data. For supported notifications, AWS Simple Notification Service (SNS) routes delivery through Apple Push Notification service (APNs) on iOS and Google Firebase Cloud Messaging (FCM) on Android.
Unity processes app analytics and in-app purchase information. TikTok’s business SDK processes app launches, game-start and completion events, scores, turns, duration, platform/build information, and store-link interactions for app analytics and advertising measurement. These analytics are not all disabled by declining advertising personalization or turning off notifications. Google and its advertising partners process data through AdMob to deliver and measure ads and prevent fraud. Advertising data sharing is separate from the game information we share with players for leaderboards and multiplayer.
We may also disclose information when required by law or where necessary to investigate abuse or protect users and our services.
Your choices
- You can choose whether to use online multiplayer, submit scores, or enable notifications. Turning off notifications in the app or your device settings stops or limits delivery; it does not delete match history.
- Use the app’s advertising privacy options when offered, together with your device’s advertising and tracking controls. These controls do not delete previously collected data or necessarily disable all analytics or advertising processing.
- For access, correction, or deletion requests, follow the WordMaxed data-request instructions. You can start a request by email without reinstalling the app.
Retention and deletion
Local saves remain on your device until removed or affected by clearing app storage or uninstalling. Device backups may contain separate copies. Removing an entry from “My Games,” leaving a match, disabling notifications, or uninstalling is not a request to erase all server or provider data.
Online game data supports active and completed matches, reconnection, results, and service integrity. A committed online-game update extends match expiry by 14 days. Cleanup becomes eligible seven days after expiry and then schedules records for asynchronous removal. This is not a guarantee of deletion on a particular day. Leaderboard submissions and in-app feedback have no automatic expiry in the current service. Some request-history records, device-index records, backups, logs, and provider data follow separate handling and can remain after match expiry.
Notification registrations and token claims normally have a 90-day expiry refreshed by registration; this is not a deletion deadline for every associated device or provider record. Turning notifications off does not guarantee deletion of the provider’s delivery endpoint. There is no single automatic deletion period covering all WordMaxed data.
Deletion requests require us to identify the relevant records and verify the request. We will explain what can be deleted or de-identified, what additional verification is needed, and any information retained for legal, security, fraud-prevention, or other applicable reasons. Shared match records, backups, and provider-held information may need separate handling. We do not promise immediate or complete deletion merely because a request has been sent.
To begin, email biz@flexibendi.net using the request steps and safety guidance.
Security and international processing
Our public online-service connections use HTTPS. We use access controls and other safeguards, but no service can guarantee absolute security. Flexibendi and its providers may process data in the United States and other countries where they operate.
Children’s privacy
WordMaxed is not directed to children under 13. If you believe a child has provided personal information, contact us so we can investigate and address it.
Updates and contact
We will publish changes here with an updated date. For privacy questions or requests, contact FLEXIBENDI LLC at biz@flexibendi.net. General support is available at biz@flexibendi.net.