Wourdoboros
Wourdoboros Privacy Policy
Last updated: 2 September 2026
Wourdoboros is made by Catro Creative LLC ("we", "us"), who are responsible for the information described here.
Our registered postal address is being finalised with our registered agent and will be added here as soon as it is. Until then, reach us at the email address in the contact section below.
This policy is about the game. There is a separate Terms of Service at https://wourdoboros.catro-creative.com/terms.
The short version
Wourdoboros does not know who you are.
- You are never asked for an email address, a password, or a name. There is no sign-up.
- Wourdoboros does not currently show ads, and carries no advertising identifier.
- There is no analytics or tracking software in the app. No third-party kit of any kind reports on how you play. The only company we send anything to is Google, to confirm a purchase.
- Your network address is never written down. It is turned into a scrambled code first. Our hosting provider sees it, as any provider must to deliver a request. See "Keeping matches fair".
- You can delete everything yourself, immediately, from inside the game. There is also a page on the web for asking us to do it.
1. Your account, and why it has no name on it
The first time you play, we create an account for you. We do not ask you for anything to do it — the game gives itself a random identifier and remembers it on your device.
That identifier, and a stored credential your device uses to prove the account is its, are the whole of your identity here. There is no email address, phone number, real name, date of birth, address or payment detail anywhere in our records.
This is why we cannot look you up. If you write to us about your account, the only thing that identifies it is your player id, which the game can show you.
2. What we hold
ⓘ A short list of records, none of which names you, and how long each is kept.
| What | Why we hold it | How long |
|---|---|---|
| Your player id — a random number, not derived from anything about you | It is the identity every other record is attached to | Until you delete your account |
| Your player name, if you set one | It is shown to the players you compete against | Until you delete your account |
| A stored credential for your device — kept only as a scrambled fingerprint, never in a usable form | So your device can prove it is yours without us holding anything a thief could use | Until it expires, which as at the date of this policy is 180 days from last use, or until you delete your account |
| Your coins, items, experience and daily streak | Running the game | Until you delete your account |
| Your rounds — the words you played, when, what you scored, and whether you finished or quit | Scoring; because other players race recordings of your rounds as opponents; and the fairness checks in section 3 | Kept while the game runs; see "What stays when you delete" |
| Feedback you send about a puzzle — a reason code from a fixed list, plus which puzzle, how that round went, which app version and which platform you played on, which tile theme you had equipped, and whether the game was talking to our server or had fallen back to playing offline. There is no text box anywhere, so there is nothing you can accidentally tell us | Fixing bad puzzles, and telling a bad puzzle apart from a bad connection | As long as a reported puzzle may still need looking at, which as at the date of this policy is 180 days |
| A daily scrambled code for the network you connected from, plus the network provider and the country | Spotting several accounts being played from one place, so that nobody can arrange easy opponents for themselves | Only as long as the fairness checks need them, which as at the date of this policy is 30 days |
| What our fairness checks noticed | Handling cheating | Until you delete your account |
| A record of any action a moderator took on your account | Keeping a record of what was decided and why | It outlives the account, without naming you; see "What stays when you delete" |
| A record of any coin pack you bought — Google's order number, which pack, how many coins | We are legally required to keep records of sales, and a refund cannot be reconciled without one | As long as tax law requires us to keep records of sales. It stops naming you the moment you delete your account; see "What stays when you delete" |
| A scrambled fingerprint of the purchase receipt | So one purchase is credited once and only once | Only as long as it is useful for checking a purchase with Google, which as at the date of this policy is 90 days |
| Names you have hidden | So we stop showing you a name you did not want to see | Until you delete your account |
| Reports you send about a player name or a word | Acting on them, and telling a pattern of reports apart from a single one | Until you delete your account; the report itself outlives it without naming you |
| Which version of these terms you accepted, and when | Knowing whether to ask you again when they change | Until you delete your account |
| Whether we have asked you to rate the game, and when | Not asking you again too soon | Until you delete your account |
| Short operational logs that can include your player id and, in a few places, your player name | Seeing that the game is working, and being able to say what happened when it is not | As long as our hosting provider keeps them, which is a short window measured in days |
We hold nothing about you beyond what running the game, keeping matches fair and recording a sale require. We read nothing that identifies your device — no advertising id, no device id, no model, and nothing about what else is installed on it. The only thing the game reports about your device is whether it is a phone or a browser, and only when you send feedback.
3. Keeping matches fair
ⓘ We record a scrambled code for the network you play from, so nobody can farm easy wins with spare accounts. We never write your network address down.
Keeping matches fair. To detect and prevent fraud and cheating, we record a short scrambled code standing for the network you connected from, along with your network provider and country, on your account and on each round you play. We never write your network address itself to any database or logs. Our hosting provider sees it, as any provider must to deliver a request, and briefly counts requests from it to stop abuse.
We keep these codes only for as long as these checks need them, which as at the date of this policy is 30 days.
The network code is not the only thing these checks read. They also look at records section 2 already lists: how close together two rounds on the same puzzle were, how old an account was when it won, and how many rounds were started and then quit. Nothing is collected for this that section 2 does not already name.
4. Purchases
ⓘ Google sells the coins and takes the payment. We only ever see that a purchase happened.
Coins are bought through Google Play. Google is the seller and handles the payment. We never see your payment details — no card number, no billing address, no name.
What reaches us is a record that a purchase happened: Google's order identifier, which pack it was, how many coins were credited, and a scrambled fingerprint of the purchase receipt. We keep that so that a purchase is credited once and only once, and so a refund can be reconciled.
We keep the record of a sale for as long as tax law requires us to keep records of sales. We keep the receipt fingerprint only for as long as it is useful for checking a purchase with Google, which as at the date of this policy is 90 days.
If you delete your account, the sales record stays and stops naming you. See section 8.
Refunds are Google's, not ours. See Google Play's refund help.
5. Who else sees any of this
ⓘ Two companies are involved: the one that hosts our servers, and Google, who sells the coins. Nobody buys your data and nobody is sent it for marketing.
We do not sell your data, and we do not share it for anyone's marketing. Nothing here is sent to an advertiser, a data broker, or an analytics company.
Two companies are involved in running the game:
- Our hosting provider runs our servers and database. Everything described here is stored on their systems, on our behalf and under our instructions.
- Google Play distributes the app and sells the coins. When you buy coins we ask Google to confirm the purchase, which means sending Google the purchase token it gave your device. Google is the seller and has its own relationship with you, governed by Google's privacy policy rather than this one.
If the game changes hands. If Wourdoboros or the company behind it is sold, merged or wound up, the information described here transfers with it, and whoever takes it on is bound by this policy until they publish a different one and tell you.
Pre-release test builds do one more thing, and the build itself tells you about it when you are running one. The released game does not do it.
6. What we do not do
- No ads today, and therefore no advertising identifier and no ad networks.
- No analytics or crash-reporting kit from any company, and nothing in the app that reports on your play in the background. The technical detail in section 2's feedback row reaches us only when you choose to send feedback, and it is the only information of that kind we receive. Our own servers keep short operational logs, which section 2 lists; nothing on your device sends them.
- No social login, no contacts, no friends list.
- No location. The country we record comes from the network connection, not from your device's location, and it is not read from the device.
- No microphone, camera, photos or files.
7. Your rights
ⓘ You can get a copy of your data and delete everything yourself, from inside the game, straight away. Section 8 says what a copy leaves out.
You can:
- Get a copy of your data, from inside the game. You can save it or copy it, and it is plain text you can read and keep. A small number of things are held back, and the copy lists each one and says why — see section 8.
- Delete everything yourself, from inside the game. It happens immediately. There is no waiting period and no way for us to undo it. Deletion is all or nothing: there is no way to remove part of what we hold and keep the account.
- Or ask us to delete it, at https://wourdoboros.catro-creative.com/account-deletion. That page explains the in-game route and gives you a way to reach us if you no longer have the device you played on. Because your account lives on that device and nothing else identifies it, we will delete any account we can identify with confidence, and we will tell you plainly if we cannot find one.
- Change your player name in the game at any time.
- Stop the fairness checks by not playing. They run on the matches you play, and they protect the players you are matched against, so there is no way to play without them. Deleting your account ends them.
- Complain to your privacy regulator. In the United States that is the Federal Trade Commission or your state attorney general; in Quebec, the Commission d'accès à l'information; elsewhere in Canada, the Office of the Privacy Commissioner; in Australia, the OAIC; in New Zealand, the Privacy Commissioner.
8. What stays when you delete
ⓘ Your rounds stay so other players' finished matches still have an opponent, with your name and id replaced. Nothing left points back to you.
Deleting your account removes everything that identifies you.
What survives is the rounds other players have already raced against. In Wourdoboros you compete against recordings of other people's rounds rather than live opponents, so deleting a round would remove an opponent from someone else's finished match. Those rounds stay, with your name and player id replaced by an anonymous placeholder that has nothing to do with your id. Nothing in them points back to you.
The record of any moderation action taken on the account also survives, in the same anonymous form. That record is about what a moderator did, and letting the subject of a decision erase the evidence of it would be the wrong design.
Data related to fraud and cheat detection, and data about other players, is not included in exports to protect the safety of our users and the integrity of the game. The file lists each thing held back and says why, so nothing is missing silently. Decisions we have made about your account are included.
A sales record survives for any coins you bought, in that same anonymous form: it says a pack was sold and for how much, and no longer says to whom. Two things keep it there. Tax law requires us to keep records of sales, and Google may still raise a refund against an order after the account that made it is gone — a refund we cannot reconcile is one where the coins never come back out of the game. The fingerprint of the receipt is dropped on its own clock whether or not you delete anything.
Rounds are kept for as long as the game runs. They are the pool of opponents, so nothing ages them out.
9. Children
Wourdoboros is intended for players aged 13 and over, and is not directed at children.
We do not ask anyone's age and we do not collect anything that we would treat differently for a child. If we learn that an account belongs to someone under 13, we delete it. If you believe a child has an account, write to us.
10. Keeping this safe
ⓘ There is very little to lose here, which is the main protection. What there is travels encrypted, and we will tell you if it is ever exposed.
Everything between your device and our servers travels over an encrypted connection. The credential your device uses is stored so that it cannot be used by anyone who obtains it. Your network address is never stored at all.
The strongest protection is what we do not hold: there is no email address, no password, no payment detail and no device identifier in our records, so there is none of it to lose.
No system is perfectly secure, and any data you choose to transmit is done so at your own risk. If information about you is ever exposed in a way that puts you at risk, we will tell you, and we will tell the regulator where the law requires it. Because we hold no email address or phone number for you, telling you means a message shown in the game the next time it is opened, or a notice at https://wourdoboros.catro-creative.com.
11. Where your data is held
Our hosting provider is Cloudflare, and our servers and database run on their network. Data may be processed in countries other than the one you live in, including in the United States.
We rely on our contract with Cloudflare to hold them to the same standards this policy sets, wherever they run our servers.
12. Why we hold each thing
| What | Why the law lets us |
|---|---|
| Your account, your rounds, your coins and items | You asked us to run the game for you by playing it, and none of this exists without them |
| The fairness codes in section 3, what those checks noticed, and the rounds they read | Detecting one person playing several accounts from one place to arrange easy opponents. Every regime here allows this without asking you first, because asking would tell the person being checked. We never store your address, and we keep the code only as long as the checks need it |
| Purchase records | Running the sale you asked for, making sure a purchase is credited once, and the law requiring us to keep records of sales |
| Feedback you send | You chose to send it, and it contains nothing you did not choose to send |
We do not ask you to consent to anything beyond the terms themselves, because there is nothing here you would be asked to consent to — no advertising, no analytics, and nothing read from your device. The country and network provider we record in section 3 come from the connection, not from anything the app reads off your phone.
13. Changes to this policy
If we change this policy we will publish the new version with a new date on it, and earlier versions stay available so you can read the one that applied to you. Where a change materially affects you, we will tell you in the game before it takes effect.
14. Contacting us
Catro Creative LLC
Our registered postal address is being finalised with our registered agent and will be added here as soon as it is. Until then, reach us at the email address in the contact section below.
Email: [email protected]
The person responsible for the protection of personal information here is our Privacy Officer, who can be reached at [email protected].
If you have a privacy request or a complaint, write to us and we will answer within 30 days. If we cannot do what you asked, we will say so and why. You can also complain to your privacy regulator without coming to us first — section 7 lists them.