Wanderletter
Privacy Policy
Wanderletter is a word puzzle game for Android made by Weideas (weideas.tr) ("we", "us"). This policy explains what information the game handles, why, and the choices you have. We are responsible for the information described here.
The short version
- There are no accounts. We never ask for your name, email address or phone number.
- No ads, no advertising ID, no third-party trackers, analytics or crash-reporting SDKs.
- The game creates a random install ID that is not linked to your identity and uses it when it talks to our server.
- Gameplay statistics are sent only if you say yes, and you can turn them off at any time.
- Payments are handled by Google Play. We never see your card or bank details.
1. Information stored on your device
Your puzzle progress, settings, gem balance, unlocked items and a random install ID are saved in the game's private storage on your phone. This information stays on your device unless one of the features in section 2 sends it to our server.
Uninstalling the game, or using Settings → Reset progress, deletes it from your device. Depending on your Android settings, Android may include app data in your device backup.
2. Information sent to our server
a) Install ID and connection data (all players who are online)
When the game goes online, for example to load game settings or to check a purchase, it sends the random install ID and the platform (for example "android"). We store the install ID, the platform, and when it was first and last seen.
Like any internet service, our server receives your IP address. We use it only to protect the service from abuse (rate limiting, kept in hashed form for a short time, typically about a day). It may also appear in our web server logs, which we keep for 30 days. We do not use your IP address to find out where you are.
b) Purchases
When you buy something, Google Play processes the payment. The game sends us the purchase token, the product and the Google Play order number so that our server can confirm with Google that the purchase is genuine and give you the item exactly once. We store a one-way hash of the purchase token (never the token itself), the product, the order number, the purchase time, whether it was a test purchase, and its status. If Google tells us a purchase was refunded, we mark it as refunded.
c) Gameplay statistics (only with your consent)
After your first few puzzles the game asks whether you want to share statistics (the game calls them "usage statistics"). They contain no name or contact details, but each event is linked to the random install ID. If you agree, the game sends events such as:
- game opened (and whether it was the first launch) and session length;
- puzzle or daily puzzle started, completed or restarted, with the level ID, time taken, clues used, wrong tries, secret words found and extra tries bought;
- word found (only whether it was the Mystery Word, never the word itself), secret word found, perfect solve, destination or world completed, streak extended, badge earned;
- clue opened or used (type and gem cost), letters shuffled, out of tries, continue offer shown or used;
- store opened, purchase started, completed, failed or restored (product ID or error code only), starter pack offer shown;
- a setting changed (which setting and its new value), daily result shared (only whether it was shared or copied).
Each event also includes the app version, the interface language, the word language and the time. We never record the words you type. We use these statistics to tune puzzle difficulty and the game's balance.
You can turn statistics off at any time in Settings → Share anonymous statistics. Turning them off deletes any events not yet sent from your device. To delete events that were already sent, contact us (section 9).
d) Cloud backup (only if you create a backup code)
If you create a backup code in Settings, a copy of your save (progress, settings, gem balance and unlocked items, without the install ID) is stored on our server under that code. It is updated when you open the backup code, and when you leave the game after playing (at most every 30 minutes). Anyone who knows the code can restore this copy once, so keep it private. When the copy is restored on another phone, it moves to a new code for that phone and the old code stops working. Paid items are not restored from a backup; they come back through Google Play with "Restore purchases".
3. What we do not collect
We do not collect your name, email address, phone number, contacts, location, photos, files, microphone or camera input, or your advertising ID. The game shows no ads and contains no third-party advertising, analytics or crash-reporting tools.
4. Notifications and sharing
The optional daily reminder is a local notification scheduled on your phone. No push service is used, and no information is sent to us for it. You can turn it off in the game or in Android settings.
The share button uses Android's own share menu. We do not see what you share or with whom.
5. Why we use information
| Purpose | Information | Legal basis (where it applies) |
|---|---|---|
| Providing the features you use: verifying purchases, delivering items, restoring purchases, cloud backup | Install ID, purchase data, backup copy | Performance of our agreement with you |
| Preventing fraud and abuse, handling refunds, keeping the service secure | Install ID, purchase data, IP address | Our legitimate interests |
| Improving puzzle difficulty and game balance | Gameplay statistics | Your consent, which you can withdraw at any time |
| Meeting legal obligations such as accounting and tax rules | Purchase records | Legal obligation |
We do not sell your information, use it for advertising, or build advertising profiles.
6. Who we share information with
- Google (Google Play) processes payments and confirms purchases. Google's own privacy policy applies to the payment information you give Google.
- Our hosting provider, Verimin Bilgi İletişim Teknolojileri ve Ticaret Ltd. Şti. (Istanbul), stores our server and database on our behalf.
- Authorities, if the law requires it.
Our server is located in Türkiye. If that is outside your country, we protect transfers with the safeguards required by applicable law.
7. How long we keep information
- Install records: until you ask us to delete them, or at most 24 months after the game was last seen online.
- Gameplay statistics: 13 months.
- Cloud backups: until you ask us to delete them, or at most 24 months after the last update.
- Purchase records: as long as needed for accounting, tax and fraud-prevention obligations, at most 10 years.
- Server logs: 30 days.
8. Security
All communication between the game and our server is encrypted with HTTPS. Purchase tokens are stored only as one-way hashes, and access to the server and database is restricted. No system is perfectly secure, but we work to protect your information.
9. Your choices and rights
- Turn gameplay statistics on or off in Settings.
- Do not create a backup code if you do not want a copy of your save on our server.
- Delete the data on your phone by uninstalling the game or using Settings → Reset progress.
- Ask us for access to, or deletion of, the information we hold by emailing destek@weideas.tr.
Because there are no accounts, please include your backup code (if you created one) and/or the Google Play order number from your purchase receipt (it starts with "GPA.") so we can find your data. We reply within 30 days.
Depending on where you live (for example under the EU or UK GDPR, Turkey's KVKK, or California law), you may also have the right to correct your information, object to or restrict its use, receive a copy of it, and complain to your local data protection authority.
10. Children
Wanderletter is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.
11. Changes to this policy
If we change this policy, we will update the effective date above. If the changes are significant, we will also tell you in the game or on its Google Play page.
12. Contact
Weideas
weideas.tr
Email: destek@weideas.tr