Privacy policy
Effective:
Last updated:
1. Who we are
Lex Blast is published by Silarus SASU, the data controller. This policy covers the game at lexblast.com and the Lex Blast Android and iOS applications. For privacy questions or requests, contact hello@lexblast.com.
2. What we collect and why
- On your device: progress, high scores, language and appearance/sound/haptic preferences, cached game resources and pending uploads. These support saved games, offline play and reliable uploads. Game saves are local, not cloud saves.
- Gameplay summaries: a random installation identifier, game identifiers and continuation links, timestamps, game status, scores, rounds, word-length counts, passes, play duration, language and software versions. We also receive country derived from the connection, broad device/browser categories and native platform/version/build when available. We use these to measure game balance, check scoring behaviour, detect gameplay and reliability problems, and improve Lex Blast.
- Campaign information: supported campaign/referral parameters from incoming links may be saved and attached to summaries to understand how players find Lex Blast. We treat acquisition measurement as a separate purpose and do not disclose gameplay summaries to advertising providers. When you follow our Google Play download link, source, medium and campaign labels from the current page's link may be passed to Google Play for campaign reporting. We do not include advertising click IDs or gameplay identifiers in that link.
- Support: if you email us, we receive your address and message to answer your request.
You do not need an account. Gameplay records are pseudonymous: the installation identifier links them together. They do not include the words played or your board and rack. We do not use a mobile attribution SDK. Advertising in ad-enabled Android versions is described below; the web game and initial public iOS release do not serve AdMob ads.
Advertising in ad-enabled Android versions
These versions use Google AdMob for banner ads and optional rewarded ads. Watching a rewarded ad is optional, and you can still play when ads are unavailable. We request non-personalized ads, rather than ads selected using your past activity. Non-personalized does not mean that no personal information is processed.
Depending on your privacy choices and the service's operation, Google may process your IP address and approximate location derived from it, device information and identifiers, ad interactions and diagnostic information for ad delivery, measurement and fraud prevention. Lex Blast does not send its gameplay summaries, words, board, scores or installation credentials to AdMob. Advertising choices and local reward limits are stored on your device separately from gameplay summaries.
When a bundled Wikimedia support banner is displayed instead, displaying it does not contact an advertising service. Its donation link opens an external website; Lex Blast adds no tracking to that link. The destination handles information under its own privacy policy.
3. Legal bases and limits
Where the EEA or UK data-protection laws apply, we rely on our legitimate interests to process limited gameplay summaries so we can maintain and improve Lex Blast's balance, scoring, reliability and usability. This measurement is first-party and is not used to profile you, personalize the game, make decisions about you, track you across services or target advertising.
We keep gameplay measurement separate from advertising. Our legitimate interest in gameplay measurement is not permission for advertising tracking. Where consent is required for advertising-related storage, access to device information or processing, we request it through Google's consent message. Non-personalized advertising does not remove those requirements. You can revisit available advertising choices as described below.
Local storage needed for saves, offline play and requested preferences is used to provide the game and the features you choose. We process support messages to answer your request and comply with applicable legal duties.
4. Service providers and network requests
Cloudflare hosts our website, API and database and processes network information, including IP addresses, to deliver and protect these services. Our gameplay database rows do not store raw IP addresses. See Cloudflare's privacy policy.
Google provides the email service used to receive privacy and support requests. The game also requests fonts from Google when available, sending ordinary network information with those requests. See Google's privacy policy.
In ad-enabled Android versions, Google also receives information through AdMob as described above. See how Google uses information from apps that use its services and Google's privacy policy for its processing, retention, international transfers and privacy controls.
Google may share advertising information with service providers and advertising technology partners involved in delivering, measuring and protecting ads, subject to the applicable settings and privacy choices. Where the European consent message applies, its partner list identifies the configured advertising partners and links to their data-use policies; you can revisit it through Advertising privacy choices. Google's ad technology partner directory provides additional information about eligible partners; it is not a list of partners all used by Lex Blast.
Native apps may check lexblast.com for app-update information. Links in Settings open public pages in your browser, where normal website requests take place. Our service providers may process information outside your country.
5. How long we keep information
Our retention policy is to keep installation-linked gameplay records for no longer than 12 months, then anonymize them so the retained statistics cannot be linked back to an installation.
This 12-month period applies to our gameplay records, not information processed by Google for advertising. Google's retention practices are described in the policies linked above.
Local saves and preferences remain until replaced or removed through app or browser storage controls. Successfully acknowledged queued reports are removed from the local upload queue. Reports waiting for a connection may remain on the device.
Operating-system backups may retain local data according to your backup settings.
6. Security
Production data uploads use HTTPS. The API uses installation credentials to authenticate gameplay uploads. No security measure can guarantee absolute protection.
7. Your choices and rights
In ad-enabled Android versions, where available, open Settings → Legal → Advertising privacy choices to review or change your advertising choices. The app checks Google's consent-management result before requesting ads. Changing advertising choices does not erase your local saves or change the separate first-party gameplay measurement described in this policy.
Contact hello@lexblast.com to ask about your data or request access, correction, erasure, restriction, portability or to object to processing, where applicable. We may need information to locate the relevant installation records and verify your request. Do not send passwords or authentication tokens.
An objection stops new collection and further use attributable to the identified installation once we can apply it. It does not undo earlier lawful processing or anonymous aggregate statistics. You may separately request erasure of installation-linked records where that right applies.
Clearing local storage does not itself delete records already received by our servers. Because you do not create a player account, your email address alone will not identify an installation's gameplay records.
EEA (including France) and United Kingdom
Where the GDPR or UK GDPR applies, your rights include access, correction, erasure, restriction and objection. Portability applies in the circumstances provided by law. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing. You may complain to your local supervisory authority, including the CNIL in France or the ICO in the UK.
Canada
Depending on the applicable federal or provincial law, you may request access to and correction of your information, challenge our handling of it, and withdraw consent subject to legal or contractual restrictions and reasonable notice. Contact us first with your concerns; you may also contact the Office of the Privacy Commissioner of Canada or the relevant provincial privacy authority.
United States
Depending on your state and whether its privacy law applies to our processing, you may have rights to access, correct, delete or obtain a copy of your information, and to appeal a decision on a request. Where applicable, you may also opt out of sale, targeted advertising or certain profiling. Contact hello@lexblast.com to make a request or appeal. We will not discriminate against you for exercising applicable privacy rights.
8. Audience
Lex Blast is designed and marketed for adults, not as a children's service. Please contact us with a privacy concern involving a child.
9. Changes to this policy
We will keep the current policy on this page and update its effective date when it changes. Material changes may require additional notice or consent.