Effective August 10, 2026
Privacy Policy
Word Tycoon 2 records gameplay locally and, only if you choose to share it, uploads reviewed playtest data and your in-game company profile when a connection is available. Eligible Daily and Weekly scores can also appear on public in-game scoreboards.
The data is used to operate and moderate those scoreboards, understand play, balance the game, find confusing interactions, and improve reliability—not for advertising or cross-app tracking.
Gameplay data subject to collection
All gameplay activity within the categories described here is subject to local recording and, when optional sharing is on, collection. This may include successfully sold words, scores and payouts, letters purchased, selected, scrapped, or moved, taps and drags, market purchases, offer types, rerolls, round choices, Bonus Objectives, difficulty and seed mode, run outcomes, company progression, screen navigation, feature use, app version and platform class, and coarse enumerated technical failures.
Successful sold words are recorded exactly because they are essential to understanding the game. Ordered letter arrangements, scrap contents, and letter-movement events can also reveal an incomplete or invalid composition even though the journal does not label it as a submitted word.
When optional sharing is on, the upload also includes the in-game company name, selected logo, seal, and color. Company names are free-form user content. Use a fictional, non-sensitive name and do not enter your real name, contact information, another person's personal information, or confidential material.
Public Daily and Weekly scoreboards
After you accept the current version of optional sharing, eligible Daily and Weekly results may be ranked in public top-50 scoreboards. A public row can show your in-game company name and mark, score, challenge period and difficulty, and the first time the server accepted that score. Scores are ordered by highest score and then earliest first server submission time. Old eligible scores are not retroactively published when you accept this version of sharing.
The service uses opaque player and moderation handles to operate reporting, hiding, abuse prevention, and moderation. Public scoreboard responses do not expose the raw installation identifier, write credential, or raw run identifier. Hiding removes that player only from your local view and does not remove the row for anyone else. Reporting sends the row for review but does not automatically hide it. We may review, filter, remove, or refuse company profiles and scores that violate the Terms of Use.
Pseudonymous identity and exclusions
Each installation creates a random collector identifier and a high-entropy write credential. The service stores only a one-way keyed digest of that credential. Those values keep gameplay in order and authorize erasure without an account. They are associated with the shared company profile and are therefore pseudonymous, not anonymous, but are not advertising identifiers or raw device identifiers.
The automatic upload contract excludes email addresses, contacts, advertising identifiers, share recipients or destinations, raw custom and random seeds, random-number state, raw card, run, or offer identifiers, page URLs, touch coordinates, screen recordings, arbitrary error messages, and a verified real-world identity. The public scoreboard excludes raw installation and run identifiers. The collector database does not store IP addresses or user-agent strings in gameplay or scoreboard tables, although hosting infrastructure necessarily processes network metadata to route and protect requests.
Optional automatic upload and your controls
Reviewed events are written to an app-private local journal first. That journal is the offline queue: uploads occur in small encrypted-in-transit HTTPS batches when a connection is available, and safe retries do not duplicate records. A run snapshot is updated by increasing revision so the data desk reflects the latest state without allowing an older retry to overwrite it.
Before any upload can begin, the first-launch screen offers equal Play offline and Share & join leaderboards choices. The expanded company-profile and public-scoreboard collection requires version 2 consent: an earlier opt-in does not silently authorize it, and the game asks again before sending under the new contract. An earlier offline choice remains offline unless you later opt in.
You can pause or resume automatic uploads later in About & settings. Pausing stops future transfers while paused but keeps new gameplay queued locally, so it can be uploaded if you resume. Pausing does not remove rows already uploaded or published.
Erase all progress requests deletion of this installation's live uploaded events, uploaded company profile, run snapshots, collector registration, and public scoreboard rows before clearing the local journal and gameplay history. The local company name and visual choices are retained so you can begin again with the same profile; clear app data or uninstall to remove those local preferences. If the deletion service cannot be reached, the app keeps the confirmation open rather than discarding the deletion credential.
Storage and retention
Your active run, company name and visual profile, local scores, sold-word history, achievements, Tokens, Headquarters progress, and upload queue are stored in the app's private device storage and excluded from Android cloud backup and device transfer. Gameplay history remains until you erase progress, uninstall the app, or the device platform clears app data. Erase Progress retains the local company name, visual choices, setup choices, and sharing preference; clearing app data or uninstalling removes those retained local preferences.
Uploaded live rows and public scoreboard rows may be retained while the game is being tested and improved. Pending moderation reports are retained until review or erasure, and records supporting an active restriction remain until restoration or erasure. Dismissed or restored report records may remain for up to 180 days after review for moderation audit before scheduled cleanup.
App-managed encrypted recovery backups are retained for up to 35 days after successful creation; an outage can delay cleanup until the backup service runs again. A keyed deletion receipt containing no gameplay or company profile may remain for up to 30 days solely so an interrupted erase can be confirmed safely. Hosting providers may maintain additional limited disaster-recovery copies under their own operational retention. We may keep aggregated or de-identified findings longer when useful for balancing, research, or reliability.
You may contact us with a privacy request; because gameplay is pseudonymous, the in-app erase control is the reliable way to identify and remove a specific installation's live data and public rows.
No advertising or cross-app tracking
The app has no advertising SDK, ad attribution, third-party behavioral analytics provider, cross-app tracking, or screen recording. When sharing is enabled, automatic gameplay and company-profile collection goes only to the dedicated Word Tycoon 2 playtest and scoreboard service.
This informational website does not add app-owned advertising, behavioral analytics, or tracking cookies. If you email support or report a scoreboard row, we receive the information you choose to send and the relevant opaque moderation handle. It is used to answer the request, enforce the Terms of Use, and improve or maintain the game.
Contact
Word Tycoon 2 is the publisher and data controller for this playtest collection.
Questions or privacy requests: support@wordtycoon.com.