Last updated: 09/22/2026
Effective: 09/22/2026
Woven Words ("the app", "we", "us") is published by Rift Studios LLC. This policy explains what the app collects, why, who can see it, and how to get rid of it.
If you only read one paragraph: we collect the account and gameplay data needed to run a turn-based multiplayer word game, we do not show ads, we do not use analytics or tracking SDKs, we do not sell your data, and you can delete your account and everything in it from inside the app at any time.
Rift Studios LLC
Contact: riftstudiosllc@gmail.com
For privacy questions or requests, email riftstudiosllc@gmail.com
Woven Words uses Firebase Authentication. Depending on how you sign in, we receive and store:
A user ID. A random identifier Firebase assigns you. It is how all your other data is filed.
Your email address, if you sign in with email and password, with Google, or with Apple. We also store whether that address has been verified.
Nothing beyond that from Google or Apple. We do not receive your password, contacts, or any other profile data from them.
You can also play as a guest without creating an account or giving us an email address. Guest play still creates a user ID so your progress can be saved.
If you sign in with Apple and use Hide My Email, we only ever see Apple's relay address, never your real one.
Stored so the game can work and so your progress persists across devices:
Display name and chosen avatar
In-game currency (gems, coins), experience, level, and power-ups
Games in progress: board state, tiles, whose turn it is
Finished games: final scores, opponent, and result
Lifetime records: games played, wins, losses, tiles placed, words completed, best scores and turns
Achievements you have earned
Single-player and Blitz progress
Friends and friend requests, if you add other players.
Your display name in a public index. This is how other players find you to send a challenge. It maps your display name to your account.
Matchmaking. When you look for a random opponent your user ID is briefly placed in a matchmaking queue and removed once you are matched.
If you turn on turn notifications, we store a push notification token for each device you use. It lets us tell you when it is your turn. It is not an advertising identifier and is not used for anything else.
You can turn notifications off at any time in Settings → Turn Alerts, which deletes that device's token, or in your device's system settings.
If you report a problem with a puzzle or rate a board, we store your rating or comment along with your user ID and the time, so we can find and fix the board.
Sound preference, tutorial progress, and a cached copy of your display name and avatar are kept on your device and are not sent to us. Uninstalling the app removes them.
We want to be specific, because "we may collect" language in most policies hides more than it explains. As of the date above, Woven Words contains no advertising SDK, no analytics SDK, and no crash-reporting SDK. Specifically, we do not collect:
Advertising identifiers (IDFA / Android Advertising ID)
Location of any kind, precise or approximate
Contacts, photos, camera, microphone, or files
Your device's address book or social graph outside the app
Behavioural analytics, session recordings, or event tracking
Any data used for advertising, profiling, or cross-app tracking
We do not sell personal information, and we do not share it with data brokers or advertisers.
Some of your data is visible to other signed-in players. This is how a multiplayer game works, but you should know exactly where the line is:
Visible to other players:
Your display name and avatar
Your level
Your game records — games played, wins, losses, tiles placed, words completed, and best scores
The games you have played against them, including scores
Not visible to other players:
Your email address
Your gem and coin balances
Your notification tokens or device information
Choose a display name you are comfortable being seen publicly. You can change it at any time in your profile.
We use it only to operate the game:
To sign you in and keep your progress attached to your account
To run multiplayer games, matchmaking, and friends
To show scoreboards, records, and achievements
To send turn notifications, if you have enabled them
To fix bugs in puzzles you report
To detect and prevent abuse of the service
We do not use your data to build advertising profiles, and we do not make automated decisions that produce legal or similarly significant effects.
Google (Firebase). The app runs on Firebase Authentication, Firebase Realtime Database, and Firebase Cloud Messaging. Google processes and stores this data on our behalf as our service provider. See https://firebase.google.com/support/privacy.
Google and Apple sign-in. If you use those sign-in options, they handle authentication and tell us your email address. Their own privacy policies apply to that exchange.
That is the complete list. We do not share your data with anyone else except where we are legally required to, or to protect the rights and safety of our users.
Our Firebase database and services are hosted by Google in the United States. If you use the app from outside the United States, your data is transferred there. Google maintains standard contractual clauses and other transfer mechanisms for this; see the Firebase privacy documentation above.
We keep your account data for as long as your account exists.
You can delete your account and everything in it from inside the app — Settings → Delete Account. Doing so:
Removes your user record, profile, records, and friends
Removes your display name from the public index
Forfeits any games in progress, so your opponents are not left waiting
Removes your push notification tokens
Playing as a guest? Signing out deletes a guest account outright, because there is no way to sign back into it. The app warns you before this happens.
Finished games may remain visible to the other player in their own game history, since that record is theirs as much as yours. Backups and server logs may retain residual copies for a short period before being overwritten.
You can also request deletion by emailing riftstudiosllc@gmail.com from the address on the account, and we will action it within 30 days.
Woven Words is not directed at children under 13 (or under 16 in regions where that is the applicable age), and we do not knowingly collect personal information from them.
If you believe a child has given us personal information, email riftstudiosllc@gmail.com and we will delete the account.
Access to your data is enforced by Firebase security rules: your account record and email are readable only by you, and writes are restricted to your own account. Data is encrypted in transit.
No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.
Depending on where you live, you may have the right to:
Access the personal data we hold about you
Correct it if it is wrong
Delete it — available directly in the app, see section 8
Export a copy in a portable format
Object to or restrict how we process it
Withdraw consent for notifications, at any time, in Settings
To exercise any of these, email riftstudiosllc@gmail.com. We will respond within the time your local law requires — 30 days under the GDPR, 45 days under the CCPA.
California residents: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not process it for cross-context behavioural advertising.
EU/UK residents: our lawful bases are performance of a contract (running the game you asked to play), consent (notifications), and legitimate interests (keeping the service working and free from abuse). You may lodge a complaint with your local supervisory authority.
If we change what we collect or how we use it, we will update this page and the "Last updated" date above. Material changes will be announced in the app before they take effect.
Rift Studios LLC
riftstudiosllc@gmail.ocm