Privacy Policy for One Word At A Time
Effective Date: January 20, 2026
This privacy policy explains how One Word At A Time ("the App", "we", "us") collects, uses, and protects your data. One Word At A Time is developed and operated by Kevin Merz.
1. Overview
One Word At A Time is a party word game where players collaborate to describe terms by alternating single words. The App is designed with privacy in mind:
- No user accounts required - The app works entirely without registration
- No cloud storage - All game data stays on your device
- No analytics or behavioral tracking - We do not track how you use the app
- Ads can be removed - A one-time purchase removes all advertising
- Pass-and-play gameplay - No internet connection required to play
2. Data Stored Locally on Your Device
All your data is stored exclusively on your device. We have no access to this data.
2.1 Game Data
- What: Player names you enter for game sessions, game settings (round duration, number of rounds)
- Storage: Locally on your device only (iOS UserDefaults)
- Purpose: To remember your preferences and player names between sessions
- Retention: Until you uninstall the app or clear app data
- Your control: You can change or remove player names at any time
2.2 Purchase Status
- What: Whether you have purchased the "Remove Ads" feature
- Storage: Locally via iOS UserDefaults, verified through RevenueCat
- Purpose: To remember your purchase and disable advertisements
3. App Tracking Transparency (ATT)
On iOS 14.5 and later, the App will ask for your permission to track your activity across other companies' apps and websites. This is required by Apple's App Tracking Transparency framework.
3.1 What Happens When You Allow Tracking
- We can access your device's Advertising Identifier (IDFA)
- This allows Google AdMob to show you personalized advertisements
- Ad networks can measure the effectiveness of their ads
3.2 What Happens When You Deny Tracking
- We cannot access your IDFA
- You will still see ads, but they will not be personalized to your interests
- Your app experience remains fully functional
3.3 How to Change Your Choice
You can change your tracking preference at any time:
- Open iOS Settings
- Scroll down and tap One Word At A Time
- Toggle Allow Tracking on or off
Alternatively: Settings > Privacy & Security > Tracking
4. Advertising (Google AdMob)
The free version of the App displays interstitial advertisements powered by Google AdMob. Ads are shown between game rounds (maximum once every 3 minutes).
4.1 What Google AdMob Collects
When you see advertisements, Google may collect:
- Device identifiers (Advertising ID/IDFA, only if you allowed tracking)
- IP address (used to determine approximate location for ad relevance)
- Device information (model, operating system version)
- Ad interaction data (whether you viewed or clicked an ad)
4.2 Personalized vs. Non-Personalized Ads
- In the EU/EEA and UK, you will be asked for consent before personalized ads are shown (via Google UMP)
- You can choose to see only non-personalized ads or reject ads entirely
- Non-personalized ads are based on contextual information rather than your interests
- Your consent preferences are managed via Google's User Messaging Platform (UMP)
4.3 How to Opt Out of Ads Entirely
- Purchase Premium: Buy "Remove Ads" to permanently disable all advertising
- Deny ATT Permission: Decline tracking when prompted (you'll still see non-personalized ads)
- Limit Ad Tracking: Enable "Limit Ad Tracking" in iOS Settings > Privacy > Tracking
4.4 Legal Basis
- ATT permission: Consent (required by Apple)
- Personalized ads: Consent (Art. 6(1)(a) GDPR)
- Non-personalized ads: Legitimate interest (Art. 6(1)(f) GDPR)
Google Privacy Policy: https://policies.google.com/privacy
Google Ads Settings: https://adssettings.google.com/
5. In-App Purchases (RevenueCat)
One Word At A Time offers a one-time "Remove Ads" purchase to unlock an ad-free experience.
5.1 What RevenueCat Processes
- Service: We use RevenueCat to manage and verify purchases
- Data processed: An anonymous app user ID, purchase receipts from Apple
- Purpose: To verify your purchase status and restore purchases on new devices
- What RevenueCat does NOT receive: Your name, email, or any personal information
5.2 Apple App Store
- All payments are processed by Apple through the App Store
- We do not receive or store any payment information (credit card, etc.)
- Apple manages your purchase history and handles refunds
5.3 Legal Basis
Contract performance (Art. 6(1)(b) GDPR) - processing is necessary to fulfill your purchase.
RevenueCat Privacy Policy: https://www.revenuecat.com/privacy
Apple Privacy Policy: https://www.apple.com/legal/privacy/
6. Data We Do NOT Collect
One Word At A Time does not collect:
- Names, email addresses, or contact information
- Precise location data (GPS)
- Usage analytics or behavioral tracking data
- Crash reports (unless you share them manually via Apple)
- Data from your camera, photos, contacts, or other apps
- Health data or biometric information
- Any data when you are offline (the game works fully offline)
7. Third-Party Services Summary
| Service | Purpose | Data Shared | Can Be Disabled |
|---|---|---|---|
| Apple ATT | Request tracking permission | IDFA (if permitted) | Yes - deny permission when asked |
| Google AdMob | Display advertisements | Device ID, IP address, ad interactions | Yes - purchase "Remove Ads" |
| Google UMP | Manage ad consent (EU/UK) | Consent preferences | N/A - required for compliance |
| RevenueCat | Purchase verification | Anonymous user ID, Apple receipts | No - required for purchases |
| Apple App Store | Payment processing | Handled entirely by Apple | No - required for purchases |
8. Data Security
- All local data is stored using Apple's secure frameworks (UserDefaults)
- Network communications use HTTPS/TLS encryption
- We have no servers that store your personal data
- Purchase verification happens through secure Apple and RevenueCat infrastructure
9. Data Retention and Deletion
- Local data: Retained until you delete it or uninstall the app
- Advertising data: Subject to Google's retention policies
- RevenueCat data: Subject to RevenueCat's retention policy (purchase records)
- Complete deletion: Uninstalling the app removes all locally stored data
10. International Data Transfers
When ads are displayed, data may be transferred to Google servers in the United States. RevenueCat may also process purchase data in the United States.
These transfers are protected by:
- Standard Contractual Clauses (Art. 46(2)(c) GDPR)
- Each provider's data processing agreements
Your game data (player names, settings) never leaves your device.
11. Your Rights (GDPR)
If you are in the European Economic Area, you have the following rights:
- Access (Art. 15): Request information about data we process
- Rectification (Art. 16): Correct inaccurate data
- Erasure (Art. 17): Request deletion of your data
- Restriction (Art. 18): Limit processing of your data
- Portability (Art. 20): Receive your data in a portable format
- Objection (Art. 21): Object to processing based on legitimate interests
- Withdraw consent (Art. 7(3)): Withdraw ad consent at any time via iOS Settings or in-app consent dialog
Since all your game data is stored locally on your device, you have full control over it at all times. To exercise rights regarding third-party services, contact: MerzKevin@me.com
12. California Privacy Rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal information is collected
- Know whether your personal information is sold or disclosed
- Say no to the sale of personal information
- Access your personal information
- Request deletion of your personal information
- Not be discriminated against for exercising your privacy rights
We do not sell your personal information. To exercise your rights, contact us at the email below.
13. Children's Privacy
One Word At A Time is a party game suitable for all ages. However:
- The App is not specifically directed at children under 13 (COPPA) or 16 (GDPR)
- We do not knowingly collect personal information from children
- Advertising shown may not be appropriate for all ages - parental guidance is recommended
- Parents can purchase "Remove Ads" to disable all advertising
14. Changes to This Policy
We may update this privacy policy to reflect changes in our practices or legal requirements. The effective date at the top indicates when this policy was last revised. Material changes will be communicated through an app update. Continued use of the app after changes constitutes acceptance of the updated policy.
Contact & Legal Information
Data Controller
Kevin Merz
Merowingerweg 11a
59494 Soest, Germany
E-Mail: MerzKevin@me.com
Questions or Concerns
If you have any questions about this privacy policy or how your data is handled, please contact us at MerzKevin@me.com. We will respond within 30 days.
Supervisory Authority
You have the right to lodge a complaint with a data protection authority. For North Rhine-Westphalia:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Website: www.ldi.nrw.de
Hosting
MKQ Internetservice
Kleinwolschendorf 16, 07937 Zeulenroda-Triebes, Germany
Website: www.mkq.de