Privacy Policy

Last updated: September 28, 2026

This Privacy Policy describes how 6831 Plays, LLC ("we", "us", or "our") collects, uses, and shares information when you use WyldTyle (the "Service"). By using the Service you agree to the practices described here.

Information we collect

• Account information you provide when you sign up: username, display name, password (stored as a salted hash, never in clear text), security question and answer (the answer is also hashed), and avatar selection. If you sign up with Google or Apple instead, you choose only a display name, and we receive and store only an anonymous identifier for your Google or Apple account — not your email address, name, or anything else from that account.
• Gameplay data: games you play, scores, words placed, and your participation in multiplayer games and friend relationships.
• Preferences: theme selection and similar non-sensitive settings.
• Purchase records: when you buy the ad-free upgrade ("WyldTyle Pro"), our entitlements partner RevenueCat receives the transaction and tells us only that your account is entitled to the upgrade. We do not receive or store your payment card details.
• Device and session data: a session cookie, the IP address your request originated from (used transiently for routing and rate-limiting), browser/user-agent string, and on mobile a push-notification token if you enable notifications.
• Usage and analytics data: when you use the website or the mobile apps, Google Analytics (Google Analytics for Firebase in the apps) collects pseudonymous information about how you interact with them — pages and screens visited, in-game events such as starting or finishing a game, approximate location (derived from a truncated IP), device and browser type, and similar metrics — to help us understand and improve the Service. In the apps it also records the install (the first time the app is opened) and, if you allow tracking on iOS or haven't turned off ad personalization on Android, your device's advertising identifier, so we can tell which of our ads lead to installs.

Why we collect it

• To provide the Service: authenticate you, save your games, run multiplayer matches.
• To process purchases and grant entitlements (e.g., ad-free status).
• To show advertising to free-tier users: our own ads on the website, and Google AdMob in the mobile apps.
• To understand how players use the Service, measure traffic, and improve it (analytics), and to measure which of our ad campaigns lead to app installs.
• To prevent abuse, fraud, and cheating.
• To comply with legal obligations, including tax record retention.

Who we share it with

We share limited information with the following service providers, who act as our data processors:

• Google and Apple sign-in — if you choose to sign in with either, they confirm your identity to us and share only an anonymous account identifier. Your use of their sign-in is governed by their privacy policies.
• RevenueCat — manages purchase entitlements. Receives only your pseudonymous account identifier and purchase events.
• Stripe — processes the payment itself (via RevenueCat's web checkout on the website). Receives the information you enter at checkout (card details, billing address). Stripe is PCI-DSS compliant; we never see your card number. Purchases made in our mobile apps go through the App Store or Google Play instead, and do not involve Stripe.
• Google AdMob (mobile apps) — serves advertising to free-tier users. Google may collect device data subject to its own privacy policy. Premium users do not have AdMob loaded. The ads on the website are our own, served by us, and share nothing with third parties.
• Google Analytics (web) and Google Analytics for Firebase (mobile apps) — measure usage and, in the apps, which of our Google Ads campaigns lead to installs. Google processes this pseudonymous data subject to its own privacy policy; we have IP addresses anonymized. Loaded for all website visitors and app users; we don't send your name, email or account details to it.
• Amazon Web Services (AWS) — hosts the application servers in the United States.
• Neon — hosts our PostgreSQL database in the United States.

We do not sell your personal information.

Cookies and similar technologies

We use a small number of first-party cookies: a session cookie to keep you signed in, and a theme cookie to remember your visual preference. Google Analytics may set additional cookies for analytics; you can manage these through the consent banner shown to users in regions where consent is required, or via your browser settings.

Children

WyldTyle is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us at support@6831plays.com and we will delete it.

Data retention and deletion

You can delete your account at any time from your Profile page, or by emailing us if you can no longer access the app. See Delete your account for the full process. When you do, we anonymize your account: your username, display name, avatar, password hash, and security question and answer are wiped, and any link to a Google or Apple account is removed (for Apple, we also ask Apple to revoke our access). Your game and multiplayer history remains in the database (attributed to "Deleted User") so that other players' records continue to work. The underlying account identifier (a random UUID) is retained so that historical purchase records remain attributable for tax and accounting purposes; this identifier on its own cannot be used to identify you.

RevenueCat may retain pseudonymous purchase records associated with that identifier for the period required by tax and financial regulations. If you require those records deleted from RevenueCat as well, contact us and we will arrange this on your behalf.

Your rights

Depending on where you live, you may have rights to:

• Access the personal information we hold about you.
• Correct inaccurate information (your display name and avatar are editable from your Profile).
• Delete your account (see above).
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Lodge a complaint with your local data protection authority.

To exercise these rights, contact us at support@6831plays.com.

International transfers

Our servers and databases are located in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States.

Security

We use HTTPS for all traffic, hash passwords with bcrypt, and limit access to the underlying systems. No system is perfectly secure; if you believe your account has been compromised, change your password and contact us.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above. Material changes will be communicated through the Service before they take effect.

Contact

Questions or requests: support@6831plays.com.