Privacy policy
Effective:
Last updated:
1. Who we are
Lex Blast is published by Silarus SASU, the data controller. This policy covers the game at lexblast.com and the Lex Blast Android and iOS applications. For privacy questions or requests, contact hello@lexblast.com.
2. What we collect and why
- On your device: progress, high scores, language and appearance/sound/haptic preferences, cached game resources and pending uploads. These support saved games, offline play and reliable uploads. Game saves are local, not cloud saves.
- Gameplay summaries: a random installation identifier, game identifiers and continuation links, timestamps, game status, scores, rounds, word-length counts, passes, counts of rack redraws earned through rewarded ads, play duration, language and software versions. We also receive country derived from the connection, broad device/browser categories and native platform/version/build when available. We use these to measure game balance, check scoring behaviour, detect gameplay and reliability problems, and improve Lex Blast.
- Native first observations: on Android and iOS, we record the first app opening and first accepted word we observe for an installation, with the installation identifier, observation time, selected game language, platform and app version/build, plus country derived from the upload connection and broad device/browser categories. Existing installations may first be observed after an update. These records help us understand usability and reliability; they do not contain the word.
- Campaign information: supported campaign/referral parameters from incoming links may be saved and attached to summaries to understand how players find Lex Blast. We treat acquisition measurement as a separate purpose and do not disclose gameplay summaries to advertising providers. When you follow our Google Play download link, source, medium and campaign labels from the current page's link may be passed to Google Play for campaign reporting. We do not include advertising click IDs or gameplay identifiers in that link.
- Support: if you choose to email us for support, we use your email address and the information you send only to handle your request, not for marketing or advertising.
You do not need an account. Gameplay records are pseudonymous: the installation identifier links them together. They do not include the words played or your board and rack. We do not use a mobile attribution SDK. Advertising in ad-enabled Android and iOS versions is described below. The web game does not serve AdMob ads; earlier ad-free app versions do not serve them either.
We count successfully applied ad-earned rack redraws to understand game difficulty and balance. This count is linked to the gameplay summary and installation identifier. We use it only for gameplay balance and usability, not to measure ad performance or revenue. We do not include ad identifiers, creative details or revenue in these summaries, or send them to AdMob. The gameplay retention limits and objection and deletion process below apply to these counts.
Advertising in ad-enabled Android and iOS versions
Ad-enabled Android and iOS versions use Google AdMob for banner and optional rewarded ads. We request non-personalized ads, but Google may still process device information, identifiers, approximate location, ad interactions and diagnostics. We do not send gameplay summaries to AdMob.
When a bundled Wikimedia support banner is displayed instead, displaying it does not contact an advertising service. Its donation link opens an external website; Lex Blast adds no tracking to that link. The destination handles information under its own privacy policy.
3. Legal bases and limits
Where the EEA or UK data-protection laws apply, we rely on our legitimate interests to process limited gameplay summaries so we can maintain and improve Lex Blast's balance, scoring, reliability and usability. This measurement is first-party and is not used to profile you, personalize the game, make decisions about you, track you across services or target advertising.
We keep gameplay measurement separate from advertising. Our legitimate interest in gameplay measurement is not permission for advertising tracking. Where consent is required for advertising-related storage, access to device information or processing, we request it through Google's consent message. Non-personalized advertising does not remove those requirements. You can revisit available advertising choices as described below.
Local storage needed for saves, offline play and requested preferences is used to provide the game and the features you choose. We process support messages to answer your request and comply with applicable legal duties.
4. Service providers and network requests
Cloudflare hosts our website, API and database and processes network information, including IP addresses, to deliver and protect these services. Our gameplay database rows do not store raw IP addresses. See Cloudflare's privacy policy.
Google provides the email service used to receive privacy and support requests. The game also requests fonts from Google when available, sending ordinary network information with those requests. See Google's privacy policy.
In ad-enabled Android and iOS versions, Google also receives information through AdMob as described above. See how Google uses information from apps that use its services and Google's privacy policy for its processing, retention, international transfers and privacy controls.
Google may share advertising information with service providers and advertising technology partners involved in delivering, measuring and protecting ads, subject to the applicable settings and privacy choices. Where the European consent message applies, its partner list identifies the configured advertising partners and links to their data-use policies; you can revisit it through Advertising privacy choices. Google's ad technology partner directory provides additional information about eligible partners; it is not a list of partners all used by Lex Blast.
Native apps may check lexblast.com for app-update information. Links in Settings open public pages in your browser, where normal website requests take place. Our service providers may process information outside your country.
5. How long we keep information
Our retention policy is to keep installation-linked gameplay records for no longer than 12 months, then anonymize them so the retained statistics cannot be linked back to an installation.
We keep support emails for no longer than 12 months from receipt.
These 12-month limits apply to our gameplay records and support emails, not information processed by Google for advertising. Google's retention practices are described in the policies linked above.
Local saves and preferences remain until replaced or removed through app or browser storage controls. Successfully acknowledged queued reports are removed from the local upload queue. Reports waiting for a connection may remain on the device.
Operating-system backups may retain local data according to your backup settings.
6. Security
Production data uploads use HTTPS. The API uses installation credentials to authenticate gameplay uploads. No security measure can guarantee absolute protection.
7. Your choices and rights
Optional play reminders are scheduled on your device. Their preference stays on your device, and this feature does not send notification tokens or reminder activity to our servers. You can turn reminders off in the game settings.
In ad-enabled Android and iOS versions, where available, open Settings → Legal → Advertising privacy choices to review or change your advertising choices. The app checks Google's consent-management result before requesting ads. Changing advertising choices does not erase your local saves or change the separate first-party gameplay measurement described in this policy.
Contact hello@lexblast.com to ask about your data or request access, correction, erasure, restriction, portability or to object to processing, where applicable. We may need information to locate the relevant installation records and verify your request. Do not send passwords or authentication tokens.
An objection stops new collection and further use attributable to the identified installation once we can apply it. It does not undo earlier lawful processing or anonymous aggregate statistics. You may separately request erasure of installation-linked records where that right applies.
Clearing local storage does not itself delete records already received by our servers. Because you do not create a player account, your email address alone will not identify an installation's gameplay records.
EEA (including France) and United Kingdom
Where the GDPR or UK GDPR applies, your rights include access, correction, erasure, restriction and objection. Portability applies in the circumstances provided by law. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing. You may complain to your local supervisory authority, including the CNIL in France or the ICO in the UK.
Canada
Depending on the applicable federal or provincial law, you may request access to and correction of your information, challenge our handling of it, and withdraw consent subject to legal or contractual restrictions and reasonable notice. Contact us first with your concerns; you may also contact the Office of the Privacy Commissioner of Canada or the relevant provincial privacy authority.
United States
Depending on your state and whether its privacy law applies to our processing, you may have rights to access, correct, delete or obtain a copy of your information, and to appeal a decision on a request. Where applicable, you may also opt out of sale, targeted advertising or certain profiling. Contact hello@lexblast.com to make a request or appeal. We will not discriminate against you for exercising applicable privacy rights.
8. Audience
Lex Blast is designed and marketed for adults, not as a children's service. Please contact us with a privacy concern involving a child.
9. Changes to this policy
We will keep the current policy on this page and update its effective date when it changes. Material changes may require additional notice or consent.