Privacy for the
original game.
Current information about local saves, the former online service, advertising and how to contact support.
Last updated: 24 October 2026
Scope and contact
This policy describes the original Word Bomb: Word Puzzle Game by Matthew Holdsworth (Apple ID 6752510197). Word Bomb 2: Voyage has a separate policy. For privacy, access or deletion requests, email support@wordbomb.app and identify the original game. Do not send passwords, Apple verification codes or payment-card information.
Local saved games
The original game stores saved games and settings on your device. Removing the app or resetting its local data can remove those saves. Backup coverage has not been verified, so do not rely on a promise that a cloud or computer backup will restore them. Contact support before deleting local data if you want to preserve an existing game.
The former online service
Historical online features used Supabase for profiles, progress, settings, inventory, chat or media and multiplayer records. The former project was deleted, the online service is unavailable, and no account-database backup is currently known. Old online profiles and history cannot currently be restored. This does not establish that every copy held by an independent provider has been erased. The replacement service is available for the rebuilt beta described below; it does not restore online features in the old released app.
Classic 1.1.0: the rebuilt service
This section covers Classic 1.1.0 and its TestFlight builds. The App Store listing shows the currently available public version. If you choose its online features, Sign in with Apple creates a new Classic account; it cannot restore the deleted former profiles, history or balances. Offline play and local saves remain separate.
The rebuilt service uses your Apple account identifier, a new Classic account ID and a display name. The app does not request your name or email address from Apple. Authentication information is verified with Apple; the service encrypts its stored Apple authorization token and the app keeps its session token in iOS secure storage.
The Classic VPS can store account-linked saves, settings, completed-game summaries, B-Bucks balances, verified purchase identifiers and refund status, inventory quantities and item actions. Public community rankings, public discoveries, chat and secret-phrase challenges remain disabled. The build 197 repair enables the separate private invitation-code Classic Duel described below when its service rollout is active; the deleted former multiplayer service is not restored. Existing compatible rebuilt clients may also receive the Duel capability; older original-service binaries cannot use it. Network services, including Cloudflare and the VPS host, process connection information to deliver and protect requests.
Apple handles payments; Classic does not receive payment-card details. The beta is restoring the original 100, 500 and 1,000 B-Bucks packs using replacement product identifiers and the original regional prices. The old identifiers remain off sale to protect older app versions. Apple controls product approval, local prices and availability; TestFlight purchases use the sandbox environment. Spent consumable B-Bucks are not replenished by Restore.
The beta offers an in-app account deletion control. After your confirmation, it attempts to revoke Apple authorization and remove active account-linked records. If revocation fails, deletion remains pending so you can retry or contact support. Local saves are retained separately. Limited transaction and refund records, including an account hash, remain to prevent duplicate grants and handle refunds. A hashed Apple-identifier replay guard is retained for up to 24 hours and cleared during later authentication maintenance. Encrypted recovery copies can retain earlier data until rotated; deletion does not instantly erase backups or information held independently by Apple or Google.
Contact support@wordbomb.app for beta privacy or deletion help. Tell us your app version and the issue; never send account tokens, passwords, Apple codes or card details.
Advertising
The original app includes Google AdMob. Depending on choices, region and SDK behavior, ad requests can involve identifiers, IP address, device and app information, ad interactions, usage information and diagnostics. Do not assume the original app has the same advertising controls as Voyage or the upcoming update. iOS Settings → Privacy & Security → Tracking provides system tracking controls. Google processes information under its own policies.
Apple services and purchases
Apple processes App Store downloads, transactions and Sign in with Apple if used. Apple authentication does not restore the deleted game account database. The original purchase catalog is currently removed from sale; this website does not offer purchases. Manage Apple-held account and purchase information through Apple.
Support and deletion requests
Support uses your sender address, message and any attachments you choose to provide to answer and investigate your request. Email is routed by Cloudflare Email Routing and handled through Gmail. The old in-app account-deletion control depends on the unavailable online service, so email is the current route for help with access or deletion requests. We will explain what can be done with information still accessible to us; an automated deletion or historical recovery is not promised. Removing the app does not delete information independently held by Apple, Google or an email provider.
This website and future updates
The website is hosted by Vercel, which receives normal technical connection information such as an IP address and requested page. The site adds no visitor analytics or advertising-tracker script. Providers use their own retention practices and may process information in different countries. We do not publish an invented fixed retention period for unavailable historical records. Contact support to ask about applicable privacy rights or data still accessible to us. This page will be revised as the replacement service and update are verified.
Provider policies
Apple · Google / Gmail · Google partner sites · Supabase · Cloudflare · Vercel
Classic 1.2: private Phrase Relay and dictionary
This section describes Classic 1.2 and its TestFlight builds. Check the App Store listing for the currently available public version. Phrase Relay uses a signed-in Classic account and an invitation code. Anyone you share the code with can take the second seat after signing in; keep invitations private. The server stores participants, the chosen English phrase, board moves, partial clues, turn progress, completion records and timestamps. The server can read phrases to validate gameplay and investigate reports; this is not end-to-end encrypted messaging. Hidden words are withheld from the opponent until formed, except for partial clues they explicitly request.
Friend completion records are private, non-ranked records of server-confirmed play, using generated aliases. There is no public discovery feed, random matching, open chat, fake player activity or ranked prize for custom phrases. Reporting sends the selected reason and relevant challenge evidence to the operator, ends the challenge and blocks the pair. The operator can review reports and suspend Phrase Relay access. Contact support@wordbomb.app for safety help; never include passwords or tokens.
Challenge, move and attached report data are removed from the active database after 90 days. Invitations expire after seven days and active turns after 48 hours; expiry ends play but is distinct from data retention. Blocks remain until account deletion. Deleting either participant removes shared challenges and their attached reports from the active database; encrypted recovery copies follow separate backup rotation. Existing purchase records and local saves follow the rules above.
Build 194 and later include 97,566 English reference headwords from Open English Wordnet and Simple English Wiktionary, plus the original glossary. Lookup runs offline on your device and does not send search words to the Classic server. Earlier 1.2 test builds include only the original glossary and optional installed iOS dictionaries. If you choose a Source online button, your browser opens the named external dictionary website; that website receives the requested page and normal connection information such as your IP address under its own privacy policy. Optional installed iOS dictionaries may offer downloads or web search. The historical validation lexicon is separate and broader: not every accepted spelling has a definition. Translated controls do not translate English definitions or playable vocabulary. Dictionary sources, licences and unrestricted reference download.
Definition-backed new games · build 195 beta
Build 195 introduces a versioned list of 42,435 four-to-eight-letter English words. Every newly scored word on that policy carries a real source meaning or an explicitly source-listed form and base-word explanation. This smaller playable list is separate from the broader 97,566-headword dictionary. Names, abbreviations and unverified historical entries are not automatically admitted.
Existing unversioned saved games keep their original rules and are labelled Legacy save. They may still contain historical entries without verified definitions; those discoveries and existing scores are preserved. Start a new game to use the definition-backed policy. Exclusion from the new list is not a declaration that a term is linguistically invalid. Controls may be Spanish; definitions and playable vocabulary remain English. This beta information does not mean build 195 is publicly released.
Exact policy meaning index and notices · Policy version, coverage and integrity
Optional Game Center internal beta
In supported internal builds, Game Center is optional and separate from Sign in with Apple and the Classic account/wallet. If you connect and finish an eligible challenge, word-points scores and discovery achievement progress are reported to Apple for your Game Center player. Apple rankings may display your Game Center alias. The app keeps a player-bound pending record and discovered-word set locally for retries and achievement counts. That word set and identity are not sent to the Classic VPS or linked to its account. Apple manages its Game Center privacy controls. Ordinary solo play remains available without Game Center.
App-version association and signed-in Apple service validation remain pending; this is not a promise of availability in the published version.
Rollout: the 1.2.1 (197) repair is being prepared. Duel becomes available only when the Classic service enables its capability; this does not make the deleted former service available in old binaries.
Classic private Duel and account connection
Classic Duel is a separate optional three-minute, invitation-code match using a signed-in Classic account. Both players receive the same server-owned letter sequence; the service validates drops, boards, words and scores. Sharing a code lets another signed-in player take its second seat, so keep it private. The opponent sees your score, word count and completion state, not your Apple identifier or full board.
The Classic VPS stores participant account IDs, room codes, letter sequences, board/move state, score and timestamps for match operation and reconnect/retry protection. Waiting rooms close after ten minutes and rounds end after three minutes; closing a match does not immediately erase its records. Account deletion removes associated active match records. This mode has no free-text messages, public feed, currency prizes, paid advantages or fabricated players. Community publication and secret-phrase challenges remain disabled.
Sign in with Apple for Classic is separate from Apple Game Center. A network failure must not permanently hide account controls: the repair adds Retry online connection and a bounded authorization exchange. Offline solo play, local saves and the reviewed English validation/meaning corpus do not wait for dictionary APIs. Older saves keep their original word rules. Service or Apple sign-in failures do not grant a session, credits or a successful purchase.