Privacy Policy: Wordy Bunch on Discord

Who we are (Data Controller)

The data controller for Wordy Bunch is:

Wordy Bunch is a trade mark of Brainy Bunch Games Limited. Discord is not us. Discord runs the platform the activity lives on, and Discord's own handling of your account and activity is governed by Discord's privacy policy.

What we use, and why

• Your public Discord identity. When the activity opens, Discord asks you to allow it to see basic profile information (Discord's "identify" permission). Through that we receive your Discord user ID, username, and avatar picture code. We use them to show who is in a round, put your name on your channel's daily leaderboard, and show your avatar next to your score. We never see your Discord email, password, messages, or friends list.
• Where you are playing. The activity knows which Discord server and channel it was launched in (their ID numbers and the channel's name). We use this only to keep each channel's daily board and leaderboard separate, so your channel competes among itself.
• Your game results. Your score, the words you found, your word count, your best word, and the time you finished. These build the daily leaderboard, the community stats, and the champion word replay for your channel.
• A signed session pass. After you open the activity, our server gives your game a signed pass containing the identity and channel details above so later requests are known to come from a real Discord sign-in. It expires after 24 hours.

How long we keep it

The short answer: barely at all. The game server has no database and writes nothing about you to disk.

• Daily results and leaderboards are held in the server's short-term memory and disappear when the server restarts. They are never written to a database or a file.
• Live match rooms (scores and words during a round) are removed about 10 minutes after everyone has left the room.
• Session passes expire after 24 hours and expired ones are cleared out.
• The Discord sign-in token is used once, to confirm who you are with Discord, and is not stored on our server.
• Your personal stats (streaks and progress shown in the profile panel) are stored on your own device only, inside Discord's browser storage. They never leave your device.
• Abuse protection uses short-lived counters (kept briefly in server memory, keyed by network address) to limit how fast requests can be made. They are not used to track you.

Sharing your result

When you finish a board you can choose to share your result. If you do, the game builds a small picture of your result and posts it, with a caption like "YourName scored 42 on today's Wordy Bunch board", into a dedicated sharing channel on our official Wordy Bunch Discord server. Our server passes the picture straight to Discord and does not keep a copy. Sharing is entirely your choice: if you never tap share, nothing is posted. If you would like a shared post taken down, ask us (or a moderator in the server) and we will remove it.

What we do not collect

• Your email address, real name, phone number, or postal address.
• Your Discord password or messages. The activity cannot read your chats.
• Payment information. The activity is free and has no purchases of any kind.
• Location data (GPS, IP-based, or otherwise).
• Device advertising identifiers, contacts, calendar, photos, or microphone.
• Third-party analytics or advertising SDKs. There are none. We do not use Google Analytics, Firebase, Amplitude, or any behavioural-tracking service, and there are no ads.

Third-party services

• Discord runs the Activities platform the game lives in, handles your account and sign-in, and hosts anything shared into a Discord channel. See Discord's privacy policy and terms of service.
• Render hosts our game server. Like any hosting provider it carries the network traffic needed to serve the game. See Render's privacy policy.

We do not embed advertising SDKs, tracking pixels, or third-party analytics.

Children

Wordy Bunch is a general-audience word game with no adult content. It is played inside Discord, and Discord's own rules require account holders to meet Discord's minimum age. Because the only personal data we handle is the public Discord identity and game results of an existing Discord account, we do not knowingly collect additional information from children.

Your rights

Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have the right to access, correct, erase, restrict, or object to processing of your personal data, and to data portability.

• Most data clears itself. Because nothing is kept in a database, your results and session details disappear on their own when sessions expire, rooms close, or the server restarts.
• Ask us to remove a shared post. Shared result pictures live in our Discord server. Ask us or a moderator and we will delete the post.
• Ask us anything else. Email [email protected] with your Discord username and we will handle access or removal requests within 7 days.

Right to complain. If you are unhappy with how we have handled your information you can complain to the UK supervisory authority: the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, ico.org.uk. We would appreciate the chance to address your concern first.

Changes to this policy

If we change this policy, we will update the "Last updated" date at the top. Material changes, such as a new category of data or a new service, will be noted here before they take effect.

Contact

For game support: [email protected]

For data-rights requests, complaints, or anything addressed to the data controller: [email protected]