Privacy Policy

1. Who We Are (Data Controller)

The data controller responsible for the personal information described in this policy is:

We trade as Brainy Bunch Games (the "studio", "we", "us"). This policy explains how we handle personal information across our website (brainybunchgames.co.uk) and the games we publish, including Wordy Bunch™ (UK trademark application UK00004382983, classes 9 and 41).

Each of our games may have its own product-specific privacy notice with additional detail about that game. Where a product notice exists, it controls; this studio-wide policy fills the gaps and describes our overall approach.

2. What We Collect

From our website

Our website is largely static. We do not set advertising cookies and we do not run third-party analytics. Standard server logs (IP address, browser user-agent, time of request) are retained briefly by our hosting provider for security and abuse-prevention purposes.

From our games

To make a multiplayer game work, we need to store a small amount of data tied to an anonymous identifier (not your real name or email). This typically includes:

• Display name and avatar you choose in the game
• Region (e.g. UK / US) for matchmaking and leaderboards
• Game stats — scores, words found, ranked rating, achievements
• Friends list — only the in-app codes you've shared with each other
• Anonymous gameplay event counts (e.g. "demo started", "tutorial finished") used to improve the game — not linked to you

We do not require you to give us an email address, phone number, or social-network login to play. If a feature ever requires extra information (e.g. an in-app purchase receipt), the in-game prompt will explain what's collected and why.

3. How We Use It

We use the information above only to:

• Run multiplayer matches, leaderboards, friends lists, and daily challenges
• Track your own progress, stats, and achievements within the game
• Detect cheating, abuse, and bugs
• Improve the game using anonymous, aggregate data

We do not use your data for advertising or for profiling you across other apps and websites.

4. Who We Share It With

We share data with a small number of infrastructure providers that help us run the service — for example, our database/realtime backend, our app distribution platforms (Apple and Google), and our payment processor (Apple/Google IAP) when you make an in-app purchase. These providers process data on our behalf under their own privacy and security commitments.

We do not sell, rent, or trade personal data with anyone.

5. Children

Our games are designed to be safe for general audiences and are rated 4+. We do not knowingly collect more information than is required to play, and we have no advertising or behavioural-tracking SDKs that target children. If you believe a child has shared personal information with us, please contact us and we will remove it promptly.

6. Your Rights

Under the UK General Data Protection Regulation and the Data Protection Act 2018 (and similar laws elsewhere), you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data erased ("right to be forgotten")
• Object to, or restrict, certain processing
• Receive a copy of your data in a portable format
• Withdraw any consent you've given

Because our games use an anonymous identifier, the simplest way to exercise these rights is from inside the game itself — most games include a "Delete my data" option in Settings. You can also email contact@brainybunchgames.co.uk and we'll handle it manually within one month, in line with UK GDPR.

Right to complain. If you're not happy with how we've handled your information, you have the right to complain to the UK supervisory authority: the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — ico.org.uk. We'd appreciate the chance to address your concern first, but you're entitled to go to the ICO at any time.

7. Data Retention

We keep gameplay data for as long as your in-game account remains active. If you delete your in-game profile, we delete your personal data from our active systems and from backups within a reasonable rotation period. Aggregate, anonymised statistics that cannot be linked back to you may be kept for analytical purposes.

8. Security

We use industry-standard infrastructure (encrypted connections, row-level security on our database, server-side validation of competitive actions) to protect your data. No system is perfect — if we ever suffer a breach that affects you, we will notify you and the relevant supervisory authority as required by law.

9. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change. For material changes affecting how we use personal data, we'll surface a notice in the game or on this page before the change takes effect.

10. Contact

Questions, concerns, or data-rights requests:

For the Wordy Bunch–specific privacy notice, see wordybunch.co.uk/privacy.html.