Privacy Policy

1. Introduction

Hepta Games Ltd. ("we", "our", "us"), a company registered in England and Wales, publishes Word Arrow Block (the "Game"). This Privacy Policy covers the Game only; our other games have their own policies, linked at the foot of this page.

By using the Game, you agree to the practices described in this Policy.

2. The Short Version

• Playing the Game is offline. Every puzzle ships inside the app. Your level progress is stored on your device and is never required to leave it.
• Global Circuit — our optional daily competition — is online, and entering it creates an account. That account holds a gamertag you choose, a two-letter country code, and your daily solve times. Nothing else.
• We never ask for your name, your email, or your phone number. There is no sign-up form. You can compete without any platform account at all.
• No advertising, no analytics, no trackers, no in-app purchases. The Game contains no advertising SDK, no analytics SDK and no crash-reporting SDK, and there is nothing to buy.
• You can erase everything from inside the Game, immediately and irreversibly — see Request Account Deletion.

3. Offline Play

All 10,000 puzzles are bundled in the app. Your level progress, your settings and your achievement counters are written to your device's own storage. Uninstalling the Game removes them.

The platform you download the Game from (the Apple App Store or Google Play) collects limited technical and diagnostic information under its own policies, and delivers the Game's optional music packs. That is governed by Apple and Google, not by us.

4. Global Circuit — What an Account Holds

Global Circuit is a daily competition: three authored boards a day, one attempt each, ranked by solve time, with a weekly table. Entering it creates an account on our server. Here is everything that account can hold:

And to be explicit about what we do not collect or store, anywhere: no email address, no real name, no phone number, no contacts, no photos, no advertising identifier, no device model or OS version, no IP address in our database, no user-agent string, and no location beyond that two-letter country code.

5. How You Sign In

There are three ways an account can be identified, and the first needs no platform account of any kind:

Anonymous device key — the default

The Game generates 32 random bytes on your device the first time it needs an account. They identify nothing but themselves: they are not derived from your device, your hardware or any advertising identifier. Our server never stores the key itself — only a SHA-256 hash of it. This is the default path, and you can play and appear on the standings using nothing else.

Apple Game Center (optional)

If you sign in with Game Center, GameKit gives the Game a signed statement of your team player ID, which we verify with Apple and then store. That identifier is scoped to us as a developer: it is not your Apple ID, not your email, and it cannot be used to recognise you in another developer's app. We use Game Center to sign you in and for nothing else — no Game Center leaderboards, no Game Center achievements.

Google Play Games Services (optional)

If you sign in with Play Games, the Game obtains a single-use authorisation code and sends only that. Our server exchanges it with Google for your Play Games player ID, which we then store. As with Game Center, this is a sign-in method only.

Your Game Center or Play Games display name is read on your device and offered as a suggested gamertag. It only reaches us if you accept the suggestion and confirm it — at which point it is a gamertag you chose, and you can change it at any time.

Signing in on a device that already has an anonymous account joins the two together so you keep one history. We record that a merge happened, and the gamertag of the account that was retired, so we can answer a support question about it later.

6. Country, and What Happens to Your IP Address

When your device first registers, Cloudflare — our hosting provider — tells our server which country the connection appears to come from, as a two-letter code. We store that code as a prefill for your country flag, so that confirming your profile is a single tap. It is a guess: a VPN or a holiday will get it wrong, which is exactly why you can overrule it in the country picker at any time, and once you have set a country we never overwrite it.

Your IP address is not stored in our database and is not written to our logs. Cloudflare's edge uses it in passing to count requests for rate limiting — protecting the server from floods and from automated abuse, which is our legitimate interest — and Cloudflare retains its own request logs under its own policy. We do not receive an IP-level log, do not export one, and hold no record that links an IP address to an account.

7. What Is Public

Global Circuit publishes its standings openly, so that a leaderboard can be read without an account. The published tables are served from circuit.heptagames.com and are readable by anyone who has the address. Each row carries three things and nothing more:

• your gamertag,
• your two-letter country code, and
• your time.

No account identifier, no sign-in identifier, no device key, and no record of when you played appears in a published table. There is nothing in a published row that links it back to your account.

8. Third Parties and Sub-Processors

We do not sell your data, we do not share it for advertising, and no advertising network, analytics provider or crash-reporting service receives anything from the Game. The complete list of outside parties involved is:

• Cloudflare, Inc. — hosts the Global Circuit server, the published standings, and the rate limiting described in Section 6. Privacy policy
• Turso (Chiselstrike, Inc.) — the managed database where the account records in Section 4 are stored. Privacy policy
• Apple Inc. — the App Store, and Game Center if you use it to sign in. Privacy policy · Game Center terms
• Google LLC — Google Play, and Play Games Services if you use it to sign in. Privacy policy

Our server keeps operational logs through Cloudflare so that we can diagnose faults. Those logs record that a request happened and any error text our code produced; they do not contain account identifiers, request contents or IP addresses written by us, and Cloudflare retains them for a short period.

9. How Long We Keep It, and Deleting It

We keep your account and your results until you delete them. There is no automatic expiry: a competition history is the point of a ladder, and pruning it silently would take away results people earned. Session tokens stop working 30 days after they are issued.

You can erase all of it from inside the Game — Settings → Delete All Data — and doing so removes the account itself, not just its contents: your gamertag, every daily and weekly result, your trophies and counters, your sign-in identifiers and the archive a previous "reset" left behind, all in a single operation, with nothing kept and nothing restorable by anyone, including us. Your device's identity is re-created at the same time, so the next launch is a new anonymous player. The full procedure, including the route for someone who has already uninstalled, is on the Request Account Deletion page.

One thing deletion does not reach, stated plainly: results already published to the public standings for a day or week that has finished are not rewritten. Those published entries carry only a gamertag and a country code, they are a historical record of a competition other people also took part in rather than a profile we hold about you, they are never regenerated, and they drop out of every live view in the Game within a week. Everything we hold about you is destroyed.

10. Purchases

The Game has no in-app purchases, no subscriptions and no virtual currency. We hold no payment information of any kind and never see one.

11. Data Security

All traffic between the Game and our server uses HTTPS. Session tokens are stored only as SHA-256 hashes, and the anonymous device key is stored only as a hash, so a copy of our database yields no working credential and no device key. Access to the production database is limited to the people who need it. No method of storage or transmission is completely secure, and we do not claim otherwise.

12. Children's Privacy

The Game is suitable for general audiences but is not directed toward children under 13 years of age, and we do not knowingly collect personal data from children. Please note that the gamertag described in Section 7 is published publicly. If you are a parent or guardian and believe a child has entered personal information into that field, or has created an account you would like removed, contact us at contact@heptagames.com and we will remove it.

13. Your Rights

Under UK and EU GDPR you have the right to access the personal data we hold about you, to have it corrected, to have it erased, to restrict or object to our processing of it, and to receive a copy of it in a portable form. You may also lodge a complaint with a supervisory authority — in the UK, the Information Commissioner's Office.

In practice:

• Erasure is available to you directly, in the app, and takes effect at once — no request, no waiting on us.
• Correction of your gamertag and country is available to you directly, in the app.
• Access and portability: email us and we will send you what your account holds. Because we hold no email address for you, please write from an address you can be reached at and quote your gamertag — the name shown on the Global Circuit standings — so that we can find the right account.

Our lawful bases are the performance of our agreement with you (running the competition you entered and keeping you signed in), your consent (choosing to sign in with Game Center or Play Games, and choosing to publish a gamertag on the standings), and our legitimate interests (rate limiting, and preventing cheating and abuse).

14. International Data Transfers

We are based in the United Kingdom, and our providers operate globally. Cloudflare serves each request from the location nearest you. The database holding the account records in Section 4 is currently hosted in India (the AWS ap-south-1 region), chosen for latency; we may move it to another region, and if we do we will update this section. Your data is therefore transferred outside the UK and the EEA, and for those transfers we rely on the safeguards our providers offer, including the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.

15. Changes to This Policy

We may update this Policy — in particular before any new feature that collects data. The current version always lives at this address, with the "Effective Date" above updated, and the Game links to it from its Settings screen. If a change materially affects what we collect, we will say so in the Game.

16. Contact Us

For anything in this Policy, or to exercise any of the rights in Section 13: