Privacy Policy — Word Savant

Last updated: October 28, 2026

1. Who we are

Word Savant is a word search puzzle game developed and operated by KosmoGames Studios ("we", "us", "our"). This Privacy Policy explains how the Word Savant mobile application (the "App") handles information.

If you have any questions, you can reach us at support@kosmogames.com.

2. Information the App processes

2.1 Information stored only on your device

The App stores the following information locally on your device using standard local storage. Unless you sign in to the optional account (section 2.8), KosmoGames Studios does not receive, store, or have access to this information, apart from the daily challenge times and generated player name described in section 2.9. To protect your progress if you change or reset your device, the App can keep a copy of it in your own iCloud account (iOS) or Google Play Games saved games (Android), and your device's operating system may also include it in its standard backup to your personal iCloud or Google Drive account. Only you can access these copies; KosmoGames Studios is not a party to them.

• Your puzzle progress, completed grids, and current level
• Your daily streak and last-played date
• Your grid times (your best time and your recent times for each grid format), shown in the Notebook tab
• Mid-puzzle state (so you can resume where you left off)
• App preferences such as language and sound settings
• Records of in-app purchases you have made (so the App knows you have removed ads)
• Your generated player name and the randomly-generated player identifier (section 2.9)

If you play on several devices with the same iCloud or Google Play Games account, the copy kept there can link them under one player identifier: the oldest one is kept, and the App asks our server to move the daily challenge times, and the generated player name if the kept identifier has none yet, from the other identifier onto it. The other identifier, with any daily challenge attempt in progress under it, is then erased from our server (unless it belongs to an optional account, section 2.8, which is never emptied this way).

This information is removed if you uninstall the App or clear the App's data through your device's settings.

2.2 Information we do not collect

The App does not collect, request, or transmit any of the following:

• Names, email addresses, phone numbers, or other contact information (except that a Google sign-in token may include your name and email address if you choose the optional account; we never store them, see section 2.8)
• Passwords (the optional account in section 2.8 uses Sign in with Apple or Google, and we never see a password)
• Photos, contacts, calendar entries, or files from your device
• Location data of any kind (precise or approximate), except that when the App talks to our server (the optional account or the daily challenge ranking), our server's request logs include your IP address, from which an approximate location can be derived, kept up to 7 days for operation and security (see sections 2.8 and 2.9)
• Microphone audio or camera images
• Behavioral profiling data collected by us (note: Google AdMob may collect advertising data — see section 2.3)

2.3 Advertising — Google AdMob

The App is free to play and is supported by advertising served by Google AdMob, a service provided by Google LLC. Ads are shown at natural breaks (between completed puzzles) and as optional rewarded ads (you choose to watch one to reveal a hint). Ads are never shown mid-puzzle or in a way that interrupts active gameplay.

To serve relevant ads, Google AdMob may use your device's advertising identifier (IDFA on iOS, Advertising ID on Android) and other signals according to Google's Privacy Policy. You can opt out of personalised advertising at any time:

• iOS: Settings → Privacy & Security → Tracking → disable "Allow Apps to Request to Track", or limit ad tracking in Settings → Privacy & Security → Apple Advertising.
• Android: Settings → Google → Ads → "Delete advertising ID" (Android 12+) or "Opt out of Ads Personalization" (earlier versions).

Remove ads permanently: you can purchase "Remove Ads" once inside the App. After purchasing, no ads of any kind will ever be shown to you, and the advertising identifier will no longer be accessed for this App.

2.4 In-app purchases — RevenueCat

When you buy "Remove Ads" inside the App, the transaction is processed by Apple (App Store) or Google (Google Play) according to their own billing systems. We never see your payment details.

To verify that purchases were completed successfully and to restore them, the App uses RevenueCat as a purchase-receipt validation service. When you make a purchase, RevenueCat receives an anonymous user identifier generated on your device along with the transaction receipt from Apple or Google. This is used solely to deliver your purchase. RevenueCat does not receive your name, email, or payment details from the App.

2.5 Network usage

The App may connect to the internet to:

• Download additional puzzle packs as you progress (the first puzzles are bundled with the App so it works offline)
• Load and display ads (if you have not removed ads)
• Verify in-app purchases
• Back up and restore your progress, if you have signed in to the optional account (section 2.8)
• Time your daily challenge, save your generated player name, and show the daily challenge ranking (section 2.9)

Puzzle-pack download requests do not include personal information.

2.6 Anonymous usage statistics

To help us improve puzzle quality and the overall experience, the App sends a small set of anonymous product events to a server operated by KosmoGames Studios. This data is not shared with any third party and is used only for our own internal product decisions.

What we record:

• When a puzzle is started or completed, and the theme category
• When the store, hint panel, or settings screen is opened
• On the first grid: which grid it was and its language, how many words were found out of how many, how many lines (drawn or tapped) formed a word or not and how many were too short, time spent and time to the first word, whether the grid was resumed and how it was left (finished, back to home, or App put in the background), text size (in the App and in the system settings), whether found words were hidden, screen orientation and rotations, screen size, phone or tablet, and how many hints and definitions were used
• At the end of the first-run tutorial: which slide it ended on, whether it was skipped, and how long it took
• The app version, platform (iOS or Android), and a randomly-generated identifier that lives only in this app's storage on this device

What we never record in these events:

• Your name, email, or any personal contact information
• The device's advertising identifier (IDFA / Advertising ID)
• Location of any kind
• Words you type or search for
• Your generated player name (section 2.9)

The random identifier is not linked to your Apple ID, Google account, or any identifier that could identify you outside the App, even if you use the optional account: it is a different identifier from the player identifier described in sections 2.8 and 2.9. It is reset if you uninstall the App or clear its storage.

2.7 Crash reporting — Firebase Crashlytics

To find and fix crashes and stability problems, the App uses Firebase Crashlytics, a crash-reporting service provided by Google. When the App crashes or hits an unexpected error, Crashlytics sends Google a diagnostic report so we can fix the problem.

A crash report includes technical information such as:

• The error and its stack trace (which part of the code failed)
• Device model, operating-system version, and app version
• A randomly-generated, app-specific installation identifier (a Crashlytics install UUID)

Crash reports do not include your name, email, location, or the words you type or search for. Crashlytics is only active in the released App, and no crash data is collected from development builds.

2.8 Optional account (Sign in with Apple or Google)

You can play Word Savant without any account. If you choose to, you can sign in with Apple (iOS) or Google (iOS and Android) so that your progress is backed up online and can be restored on another device. When you sign in, the App sends us a sign-in token issued by Apple or Google, which our server checks and then uses only as described below.

What our server stores for an account:

• The account identifier that Apple or Google gives our App for you: an opaque code, which on its own does not reveal who you are, and which tells us whether you signed in with Apple or Google
• For Sign in with Apple only, a token that Apple gives us so we can revoke the App's access to your Apple ID when you delete your account
• A randomly-generated player identifier that links your account to your backup
• A backup of your game progress, with the time it was last updated: completed puzzles, level, daily streak, words found and words learnt, milestones already shown, solving pace, grid times (best and recent times for each grid format), puzzles in progress with their play time and hints used, your language choice, and your generated player name (as its three numbers, with the time you chose it)
• The date the account was created

We never store your name or email address. Sign in with Apple is requested without them. The Google sign-in token may include your name, email address, and profile picture; our server reads the token only to verify the sign-in and stores none of them. Your account backup links the player identifier to your Apple or Google account; it is not linked to the anonymous usage statistics of section 2.6.

Where: this data is stored by KosmoGames Studios on Cloudflare, on our own server at hub.kosmogames.com and its database. It is not shared with any third party and is never used for advertising. Our server keeps technical logs of each request (such as the time, the address requested, and network information like your IP address or approximate location as seen by Cloudflare) for up to 7 days, for operation and security. We do not use them to identify you.

How long: until you delete your account. You can do so at any time inside the App, in Settings, under the account section. Deletion immediately and permanently erases your account, player identifier, and online backup from our server, together with your generated player name, your daily challenge times, and any daily challenge attempt in progress (section 2.9), and, for Sign in with Apple, revokes the App's access to your Apple ID. The progress already on your device stays there, and the App goes on without an account: it creates a new random player identifier, and the next time it reaches our server it saves your generated player name again under that new identifier, as for any player without an account (section 2.9). If you no longer have the App, install it again on any device, sign in with the same Apple or Google account, and delete the account from Settings. If you need help, email us at support@kosmogames.com.

If you do not sign in, nothing in this section applies, and your progress is backed up only as described in section 2.1.

2.9 Daily challenge ranking and generated player name

The daily challenge has a ranking: the fastest players of the day appear on a podium, and you can see a few players close to your own time. It works with or without the optional account. To take part, the App sends our server the randomly-generated player identifier created on your device (the same one described in section 2.8 if you sign in).

Generated player name. On the ranking, you appear under a name the App generates for you, made of a noun, an adjective and a number (you can pick another pair of words in Settings, and the number stays the same: it is unique to you, no other player has it). You never type it, so it can never be your real name. Our server stores it as three numbers (the position of each word in the App's word lists, and the number), with the time you last chose it.

Daily challenge times. Our server measures the time itself: the App tells it when you start, pause, resume, take a hint, and finish the daily challenge, and never sends a time of its own. While an attempt is in progress, the server keeps its start time, its paused time, and its number of hints. When you finish, it keeps only the result: the day, the language, your ranked time (or a note that the game was not ranked), the number of hints used, and when the result was posted. To check that the grid was really solved, the App also sends the words it found; the server compares them with the day's grid and does not store them.

What other players see: on the ranking, other players see only your generated name, an avatar (a colour worked out from a code that does not reveal your player identifier, with the first letter of your generated name), and your ranked time. They never see your player identifier, and the ranking never shows how many players took part. Your generated name is never included in the anonymous usage statistics of section 2.6.

Rate limiting: to protect the ranking from abuse, our server uses your IP address for a moment to limit how many requests can come from one address in a minute. This check runs on Cloudflare's rate limiting service, and the IP address is not stored in our database. As for the optional account, our server's technical request logs (which include the IP address) are kept for up to 7 days, for operation and security.

Fair play: we use daily challenge times to spot cheating, such as a modified App, scripted requests, exploiting a bug, or playing under several identifiers. If we find it, we can remove the times concerned and leave that player out of the rankings: for 30 days the first time, for good after that. To do so, our server keeps the date the exclusion ends, with the player row. Your progress, your purchases and your backup are never affected, and you can keep playing. To contest a decision, email us at support@kosmogames.com.

Where: on our own server at hub.kosmogames.com and its database, hosted on Cloudflare. This data is not shared with any third party and is never used for advertising.

How long: attempts in progress are erased when you finish, and any that are left over are erased each night once their day is over. Daily challenge times are kept for 90 days, then erased automatically. If you use the optional account, deleting it (section 2.8) immediately erases your generated name, your times, and your attempts in progress (the App then saves the name again under a new identifier, without an account, as section 2.8 explains). If you play without an account, there is no button to erase this data: your times are erased after 90 days, and your player row (the player identifier, the date it was created, and the end date of any ranking exclusion) and your generated name stay on our server.

3. How we use information

The information processed in connection with the App is used only to:

• Save your puzzle progress and resume where you left off
• Back up your progress and restore it on another device, if you use the optional account (section 2.8)
• Track your daily streak
• Time the daily challenge and show its ranking under your generated player name (section 2.9)
• Remember that you have purchased remove-ads so you are never shown ads again
• Show ads to support the free version of the App (unless you have removed ads)
• Understand, in aggregate and anonymously, how puzzles are played, so we can improve content and fix problems (section 2.6)

We do not use any information for profiling, scoring, or training machine learning models on personal data.

4. Third-party services

The App relies on the following third parties for the limited purposes described above. Each operates under its own privacy policy.

• Google AdMob — for displaying ads. See Google's Privacy Policy.
• Apple App Store / Google Play Store — for in-app purchase processing. See Apple's Privacy Policy and Google's Privacy Policy.
• RevenueCat — for verifying and restoring in-app purchases. See RevenueCat's Privacy Policy.
• Firebase Crashlytics (Google) — for crash and stability reporting (section 2.7). See Firebase's Privacy and Security information.
• Sign in with Apple / Google Sign-In: to sign in to the optional account (section 2.8), only if you choose to. See Apple's Privacy Policy and Google's Privacy Policy.
• Cloudflare: hosts our server and database for the optional account backup (section 2.8) and the daily challenge ranking (section 2.9). See Cloudflare's Privacy Policy.

The App does not include social network SDKs or any third-party trackers beyond those listed above.

5. Data retention

Information stored on your device by the App remains there until you uninstall the App or clear its data. The copy in your own iCloud account or Google Play Games saved games, and any iCloud Backup or Google Auto-Backup made by your operating system, stay in your own cloud account under your control. If you use the optional account, its data and online backup are kept on our server until you delete the account (section 2.8). Daily challenge times are kept for 90 days, attempts in progress are erased each night once their day is over, and without an account your player row and generated player name stay on our server (section 2.9). Purchase receipts are retained by Apple, Google, and RevenueCat according to their own policies. Data held by Google AdMob is subject to Google's retention policies.

Anonymous usage events (section 2.6) are stored by KosmoGames Studios for up to 24 months and then deleted or aggregated. Because these events contain no personal information, we cannot retrieve or delete events tied to a particular person.

6. Data security

Your game progress is stored on your device, protected by your device's own security (passcode, encrypted storage, app sandboxing). Communication with Apple, Google, and RevenueCat for purchase verification is encrypted in transit (HTTPS). If you use the optional account, your backup is sent to our server only over HTTPS, and only a valid session issued after your Apple or Google sign-in can read, replace or delete it. Daily challenge requests (section 2.9) are also sent only over HTTPS. Ad requests to Google AdMob are also transmitted over HTTPS.

7. Your rights

Depending on where you live, you may have rights under privacy laws such as the EU/UK GDPR, the California Consumer Privacy Act (CCPA), Quebec Law 25, the Brazilian LGPD, or other regional regimes. These typically include the right to:

• Know what information is being processed about you
• Request a copy of that information
• Request correction or deletion of that information
• Withdraw consent where applicable
• Lodge a complaint with your local data protection authority

Unless you use the optional account, Word Savant stores your game data only on your device and in your own cloud account, apart from the daily challenge data of section 2.9 (your times, erased after 90 days, and your player row and generated player name), so in most cases there is nothing for us to retrieve, correct, or delete on your behalf. To exercise rights over data on your device, simply uninstall the App or clear its storage in your device settings. If you use the optional account, you can delete it and its online backup yourself at any time inside the App (section 2.8). For advertising data collected by Google, please refer to Google's data controls. For any other request, email us at support@kosmogames.com and we will respond within 30 days.

8. International users

Word Savant is available in multiple regions. The privacy practices described here apply regardless of where you use the App.

9. Changes to this Policy

We may update this Privacy Policy from time to time, for example to describe new features or reflect legal changes. The "Last updated" date at the top of this page indicates when the most recent changes took effect. If we make material changes, we will revise the App listing and provide reasonable notice. Continued use of the App after a change constitutes acceptance of the updated Policy.

10. Contact us

© 2026 KosmoGames Studios. Word Savant is a trademark of KosmoGames Studios.