HyperWords Privacy Policy
Last updated: February 2026
HYPER HOLLOW GAMES ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains our data practices for our mobile game HyperWords ("the Game").
1. Controller
Art. 13(1)(a) GDPR
The controller responsible for data processing in connection with the Game is:
Hyper Hollow Games
Germany
Email: [email protected]
Website: www.hyperhollowgames.net
A data protection officer is not required as the company regularly employs fewer than 20 persons engaged in automated data processing.
2. No Direct Data Collection
HyperWords does not directly collect, store, or process any personal information from users. The Game:
- Does not require account creation or sign-up
- Does not ask for email addresses or personal details
- Does not use analytics software to track user behavior
- Does not contain advertisements
3. Google Play Games Services
Art. 6(1)(a) GDPR
HyperWords integrates with Google Play Games Services to provide leaderboard functionality. When you sign in to Google Play Games:
- Your Google Play Games profile name and avatar may be visible on leaderboards
- Your high scores are submitted to Google Play Games leaderboards
- This data is managed by Google according to their privacy policy
Sign-in is entirely optional and based on your voluntary consent. You can play the Game without signing in, but leaderboard features will be unavailable.
For information about Google Play Games' data practices, please review Google's Privacy Policy at https://policies.google.com/privacy
4. In-App Purchases
Art. 6(1)(b) GDPR
HyperWords offers optional in-app purchases. Purchases are processed entirely by Google Play Billing:
- We do not collect, store, or have access to your payment information
- All payment processing is handled by Google Play
- Purchase status is stored locally on your device only
Processing is necessary to fulfil the purchase you initiated. For information about Google Play's payment data practices, please review Google's Privacy Policy at https://policies.google.com/privacy
5. Vocabulary Progress & Spaced Repetition Data
Sec. 25 TDDDG
HyperWords stores your vocabulary progress, spaced repetition data, learning streaks, and preferences locally on your device. This includes:
- Words learned and their review schedules
- Daily challenge completion and streak data
- Game settings and difficulty level
This data is stored using local device storage mechanisms and never leaves your device. It is not accessible to us. Local storage is technically necessary for the Game to function and is therefore exempt from the consent requirement under the German Telecommunications Digital Services Data Protection Act.
6. Cross-Game Notifications
Art. 6(1)(f) GDPR
HyperWords may fetch promotional notifications from our server (hosted by Supabase Inc., USA) to inform you about other games by Hyper Hollow Games. This communication:
- Does not collect or transmit any personal information
- Only retrieves publicly available promotional content
- Does not track whether notifications are viewed or clicked
Based on our legitimate interest in informing users about our other products. The request to our server may expose your IP address to our hosting provider Supabase. No personal data is stored by us as a result of this request.
7. Google Play Store Data
Art. 6(1)(f) GDPR
The Game is distributed through the Google Play Store. Google may collect certain information as part of their platform services, including:
- Download statistics
- Crash reports (handled by Google Play Console)
- Device compatibility information
We may access aggregated, anonymized statistics provided by Google Play Console to understand game performance and stability, based on our legitimate interest in maintaining and improving the Game. This data is not stored separately by us.
8. Third-Party Processors & International Transfers
Art. 28, 44–49 GDPR
The Game integrates with the following third-party services, which may process data as described above:
- Google Ireland Limited / Google LLC (Ireland/USA) — Google Play Games Services for leaderboards, Google Play Billing for in-app purchases, Google Play Console for crash reports and statistics
- Supabase Inc. (USA) — hosting of promotional notification content
Data may be transferred to the United States. Where applicable, transfers are safeguarded by the EU-US Data Privacy Framework. Google LLC and Supabase Inc. are DPF-certified. No third-party analytics, advertising, or user tracking services are used.
9. Data Retention
Art. 13(2)(a) GDPR
We do not store any personal data on our own servers. For data processed by third parties:
- Google Play Games leaderboard data — retained by Google for as long as your Google account is active
- Google Play purchase records — retained by Google per their retention policy
- Google Play Console crash reports — retained by Google for up to 180 days
- Server logs from notification requests (Supabase) — retained per Supabase's data processing practices
- Local device data — retained until you uninstall the Game or clear app data
10. Data Security
Art. 32 GDPR
We implement appropriate technical measures to protect data related to the Game. All network communication between the Game and third-party services uses SSL/TLS encryption (HTTPS). Local game data is stored within Android's application sandbox, which restricts access to other applications.
11. Your Rights
Art. 15–22 GDPR
Under the GDPR, you have the following rights regarding your personal data:
- Access — obtain confirmation of whether your data is processed and receive a copy
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion of your data under the conditions specified by law
- Restriction — restrict the processing of your data in certain cases
- Data portability — receive your data in a structured, commonly used, machine-readable format
- Object — object to processing based on legitimate interests (see Section 13)
- Withdraw consent — withdraw any consent at any time without affecting the lawfulness of prior processing
- Automated decision-making — we do not use automated decision-making or profiling that produces legal effects
As we do not directly collect personal data, most of these rights are exercised through the respective third-party services (e.g., managing your Google Play Games profile through Google). To exercise any right with respect to us, contact [email protected]. We will respond within 30 days.
12. Children's Privacy
Art. 8 GDPR
The Game is designed to be safe for all ages. We do not knowingly collect personal information from children under 16. The optional Google Play Games integration is governed by Google's age requirements and parental controls.
13. Right to Object
Art. 21 GDPR
Where we process data on the basis of legitimate interests, you have the right to object at any time for reasons relating to your particular situation. This applies to cross-game notification requests (Section 6) and Google Play Store analytics access (Section 7). If you object, we will no longer process your data for those purposes unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. To object, email [email protected].
14. Right to Lodge a Complaint
Art. 77 GDPR
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. You may contact any EU supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. For Germany, a list of all data protection authorities is available at www.bfdi.bund.de. For the United Kingdom, you may contact the Information Commissioner's Office (ICO) at ico.org.uk.
15. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our data processing activities or legal requirements. Any changes will be posted in the Game and on our website with an updated "Last updated" date. The current version is always available at www.hyperhollowgames.net/games/hyperwords/privacy.
16. Contact Us
If you have any questions about this Privacy Policy or wish to exercise any of your data protection rights, please contact us at:
Hyper Hollow Games
Germany
Email: [email protected]
Website: www.hyperhollowgames.net
We will respond within 30 days.
Compliant with GDPR, UK GDPR, TDDDG, and Google Play Store requirements.