Privacy Policy

Last updated 2026-05-21 · Version 1.0

This Privacy Policy explains what information sqwordcollects when you use the app, how that information is used, and the choices you have. sqword is operated by FUNKARNU SL ("we", "us"). If anything in this policy is unclear, write to henrik@funkar.nu.

1. Information we collect

Information you give us

• Account identity. When you sign in we receive a Firebase Authentication user ID. If you sign in with email and password we receive your email address.
• Display name. The name you choose for yourself, shown to people you play against and on leaderboards.
• Friends and invites. The user IDs of people you add as friends or invite to matches, and any pending requests either direction.
• Notification preferences. Whether you've enabled turn, invite, and re-engagement notifications.

Information generated by playing

• Match data. Letters drawn, placements made, words scored, results, opponent ID, and timestamps for each match. We use this to run the game, score it, and show match history.
• Daily challenge results. Score, completion time, and streak for the daily puzzle.

Information collected automatically

• Device push token. A Firebase Cloud Messaging (FCM) token associated with your installation, used only to deliver in-game push notifications you've opted into.
• Diagnostics and analytics. Aggregated usage events (screen views, button taps, match outcomes), crash reports, and performance metrics, via Firebase Analytics, Firebase Crashlytics, and Firebase Performance Monitoring. Crash reports include device model, operating system version, app version, and a stack trace. We use these to find and fix bugs and to understand which features are used.
• Language preference. The dictionary language you've selected (e.g. English, Swedish).

2. How we use the information

• Run matches, scoring, leaderboards, and the daily challenge.
• Deliver push notifications you've enabled (your turn, new invites, friend requests, re-engagement reminders).
• Maintain account state across devices when you sign in with email.
• Diagnose crashes, fix bugs, monitor performance, and understand how the app is used so we can improve it.
• Detect and prevent abuse (cheating, spam, harassment) and enforce the sqword Terms of Service.

We do not sell your personal data. We do not use it for cross-app advertising or for any kind of behavioural ad targeting.

3. Where your data lives and who processes it

sqword relies on a small number of trusted service providers to operate. They process your data only to provide their service to us.

• Google Firebase (Authentication, Cloud Messaging, Analytics, Crashlytics, Performance Monitoring, Remote Config) — Google LLC and its affiliates.
• Cloudflare (Workers, D1, Durable Objects) — hosts match state, user records, friend graphs, and invites.

Both providers may process data in regions outside of Spain, including the United States, with standard contractual safeguards where applicable.

4. Retention

• Match history is kept while your account is active so you can see your past games and stats.
• Push tokens are kept until you uninstall the app, disable notifications, or sign out.
• Crash and analytics data is retained according to Firebase's defaults (typically 14 months for analytics; up to 90 days for crash reports) and cannot be tied back to you individually without your account ID.
• When you delete your account, we remove your profile, display name, friends, invites, and match-history references within 30 days. Aggregated, anonymised game data (e.g. word frequency for dictionary tuning) may be retained indefinitely.

5. Your choices and rights

• Access, correction, deletion. Write to henrik@funkar.nu from the email address tied to your account and we'll respond within 30 days.
• Notifications. Turn individual notification categories on and off in the app's Notification preferences screen, or revoke notifications entirely at the operating system level.
• Analytics. If you'd prefer not to contribute anonymous usage events, contact us and we'll disable analytics for your account.

If you live in the EU, EEA, or UK, you have additional rights under the GDPR / UK GDPR, including the right to object, the right to data portability, and the right to lodge a complaint with your local supervisory authority. Because the data controller is established in Spain, the lead supervisory authority is the Agencia Española de Protección de Datos (AEPD).

6. Children

sqword is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided personal information to us, please contact us and we will delete it.

7. Security

Data is transmitted over TLS. Account credentials are managed by Firebase Authentication; we never see your password. Backend access is restricted to FUNKARNU SL and audited service tokens. We cannot guarantee absolute security but we take reasonable steps to protect your information.

8. Changes to this policy

If we make material changes we'll update the "Last updated" date above and, where appropriate, notify you in-app. Continued use of sqword after a change means you accept the updated policy.

9. Contact

Questions, requests, or complaints? henrik@funkar.nu.