Privacy

Last updated: October 26, 2026

Who runs Wordibo

Wordibo (wordibo.com) is run by Alberto Estirado (Finland), the data controller. Questions about privacy: wordibo.app@gmail.com.

No ads

Wordibo shows no ads and contains no ad code.

Accounts

We use Firebase Authentication (Google) for accounts:

• Guest. When you open the game we create an anonymous guest account. It has a random user ID and no name or email.
• Google or email and password. If you sign in, Firebase stores your email address, your display name (Google) and which sign-in method you used. Passwords are handled by Firebase; we never see them.
• Linking. A guest can link Google or email later. The user ID stays the same, so your progress is kept.

Cloud save

Your game progress is saved in Cloud Firestore (Google) in one document per account, keyed by your user ID. It holds your save (cards, levels, packs, coins, settings), when it was last updated and a version number. Access rules allow only your own signed-in account to read, write or delete it.

Analytics

Analytics is off until you say yes. On your first visit we show a cookie banner with Accept and Reject. Google Analytics for Firebase only runs after you tap Accept. Until then, Google Consent Mode keeps all analytics and ad storage denied. You can change your choice any time with the Cookies link at the bottom of every page.

If you accept, it collects standard usage data such as first visit, sessions and engagement time, plus these game events:

• app open, match start and match end (mode, set, difficulty, result, points, coins, stars)
• tutorial start and finish
• word and set unlocked, pack opened
• sign up, log in and account linked (method: Google or email)
• answers and game setup for the difficulty curve (word, attempt, level, answer speed)

Your Firebase user ID is set as the analytics user ID, including for guests. Events do not include your email or name.

Stored on your device

The game keeps your progress and a few settings in your browser's local storage. During a Google sign-in it briefly uses session storage. Firebase Authentication stores its own data in your browser (for example IndexedDB). Google Analytics cookies are only set if you accept analytics.

Hosting

The site is served by Firebase Hosting (Google), which processes technical request data such as your IP address to deliver the pages.

Why we use your data

• To run the game (account and cloud save): needed to provide the service you asked for.
• Analytics: only with your consent.
• Hosting logs and security: our legitimate interest in keeping the site working and safe.

How long we keep it

• Account and cloud save: until you delete them or ask us to.
• Analytics: as set in Google Analytics, max 14 months.
• Hosting logs: for Google's standard retention period.

Who processes it

Google acts as our processor for Firebase (Authentication, Firestore, Hosting) and Google Analytics. We don't sell your data or share it with anyone else.

Transfers outside the EU

Google may process data in the United States. These transfers are covered by the EU-US Data Privacy Framework and Standard Contractual Clauses.

Children

Anyone can play Wordibo. You can play as a guest without giving any personal data.

Your rights

You can ask to access, correct or delete your data, to restrict or object to how we use it, and to get a copy to take elsewhere. You can withdraw analytics consent at any time with the Cookies link. Write to wordibo.app@gmail.com. You can also complain to a data protection authority, for example the Finnish Data Protection Ombudsman (tietosuoja.fi).

Your choices

• Play as a guest without giving any personal data.
• Accept or reject analytics, and change it later with the Cookies link.
• Clear your browser storage to remove local progress.
• Sign out at any time.
• To get a copy of your data or have your account and cloud save deleted, write to wordibo.app@gmail.com.

Changes

If this policy changes we will update this page and the date above.