Privacy Policy

This is a translation provided for convenience; the Turkish version prevails in case of conflict. Turkish version

Effective date: September 29, 2026 · Last updated: September 29, 2026

Wovel is a daily word and riddle game. You can play without creating an account. This notice explains in plain terms which data is processed while you play and when you visit our website.

1. Data controller

Wovel, the developer of the Wovel app. Contact: thecrimelogs.contact@gmail.com

2. What data is processed?

a) Data that stays on your device only

Your game state, your past plays (day number, whether you solved it, in how many tries, whether you used a hint), your theme and language preferences, your permission choices and an installation ID generated by the app are kept in your device's local storage. As long as you do not sign in, none of this is sent to our server on its own.

b) Data sent to our server

• Device registration: the installation ID (a randomly generated number that does not contain your name or email address), platform (Android/iOS), app version, language and time zone. Purpose: to show the correct day's puzzle and to be able to send notifications.
• Notification token: your device's push token, if you allow notifications.
• If you sign in with Google or Apple: your account ID and email address (if you chose "Hide My Email" with Apple, the relay address Apple provides), plus your play history up to that point (so that you don't lose your streak).
• Streak sync: if you are signed in, your daily result (solved/not solved, number of tries).

Our server is hosted in Türkiye.

c) Third-party services

• Firebase Authentication (Google): only if you sign in; used for authentication.
• Sign in with Apple: only if you sign in with Apple on iOS; your identity is verified by Apple. If you delete your account, the app's access to your Apple ID is also revoked.
• Firebase Cloud Messaging: sending notifications.
• Firebase Crashlytics: if the app crashes, the crash report, device model and operating system version. Your puzzle answers and your email address are not included in these reports.
• Google Analytics for Firebase: only if you give permission. If you don't, this collection is off from the start in the app and no events are sent.
• Google AdMob: only for rewarded ads that you choose to watch. Ad requests are non-personalized by default; unless you separately allow personalization, ads are not selected based on your interests. No ads are shown when you share after winning a game.

These services are provided by Google, and the data may be processed on servers outside Türkiye.

d) Website (wovel.nardin.app)

This section applies only to our website; the app has no such measurement. We use Cloudflare Web Analytics to see how many times the site is visited.

• It does not use cookies, stores nothing on your device, does not identify you and does not link your visits together to build a profile.
• All we see are aggregate numbers: which page was opened, which address the visit came from, browser and operating system type, and country.
• The measurement is made through a request your browser sends to Cloudflare. As a technical necessity of that request, your IP address reaches Cloudflare; we do not see your IP address.
• The service is provided by Cloudflare, Inc. (USA); the data is therefore processed outside Türkiye.

3. Why do we process it? (legal basis)

• Running the game and keeping your streak: performance of a contract (KVKK art. 5(2)(c)).
• Security, preventing abuse, diagnosing errors: legitimate interest (KVKK art. 5(2)(f)).
• Website visit statistics (cookieless, aggregate numbers): legitimate interest (KVKK art. 5(2)(f)).
• Analytics and personalized ads: your explicit consent (KVKK art. 5(1)). You can withdraw your consent at any time in the app under Settings → Privacy → Manage permissions.

4. How long is it kept?

• Game data linked to your account: until your account is deleted.
• Anonymous device registration: removed if the device stays inactive for a long time.
• Consent record and deletion record (with the link to your identity removed): 3 years.
• Crash reports and analytics: for the default retention period of the relevant Google service.
• Website visit statistics: as aggregate numbers, for Cloudflare's default retention period.
• Data on your device: removed from the device when you delete the app.

5. Deleting your account and data

If you have signed in, you can delete your account and your game data on the server instantly from the app (Settings → Account → “Delete my account”), or you can request it by writing to thecrimelogs.contact@gmail.com; we complete email requests within 30 days at the latest. Details: account and data deletion. If you have never signed in, we have no account that can be linked to you; deleting the app removes the data on your device.

6. Your rights under KVKK

Under Article 11 of KVKK (the Turkish Personal Data Protection Law), you have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether it is used for that purpose; to know the third parties in Türkiye or abroad to whom it is transferred; to request correction if it is incomplete or inaccurate; to request its deletion or destruction where the conditions are met; to request that these actions be notified to the third parties to whom it was transferred; to object to a result against you that arises solely from analysis by automated systems; and to claim compensation if you suffer damage. You can send your requests to the email address above.

Wherever you live: depending on the law of your country (for example the GDPR in the EU/EEA and the United Kingdom), you may also have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, to withdraw your consent at any time (this does not affect processing carried out before the withdrawal) and to lodge a complaint with your local data protection authority. Send your request to the email address above; we respond within 30 days at the latest.

7. Children

Wovel is designed for people aged 16 and over; it is not directed at children and does not serve ads directed at children.

8. Changes

If this notice is updated, the effective date changes; for significant changes you will be informed in the app.