Privacy Policy

Effective October 22, 2026

Who operates Velune
Velune is operated by Kristian Gejdos. Contact frantisekgejdos@gmail.com for privacy questions, access requests, or support.

What the game stores
Velune creates a pseudonymous player account so it can score guesses and save progress across sessions. We store a generated player identifier and nickname, account and session dates, hashed authentication and recovery credentials, submitted words and ranks, puzzle completion and hints, activity dates, skill estimates, discoveries, ratings, and your settings. We do not ask for your email, contacts, location, photos, microphone, or advertising identifier to play.

Why we use this information
We use gameplay information to operate the game, preserve progress, maintain the same daily puzzle for everyone, select appropriate practice challenges, calculate achievements, and prevent abuse. Practice uses estimated skill and challenge difficulty; your daily answer and scoring are not changed to influence your behavior. No decision determines access to employment, credit, insurance, or other similarly significant opportunities.

Optional ad rewards
Velune includes an optional rewarded-ad integration for adults aged 18 or older. Advertising is disabled until the operator completes provider registration, regional privacy configuration and launch checks. No advertising SDK is initialized while the integration is disabled. When available, choose whether to complete an ad for the exact cosmetic collection frame shown before the ad. Core play, three free hints, daily results and earned discoveries never require an ad. Declining does not affect your game. There are no advertising notifications.

Advertising data and choices
When you choose to use available ad rewards, we save your declared age group (not date of birth), notice version and choices. Google Mobile Ads and Google User Messaging Platform provide ads and regional privacy messages. Their processing may include IP address, device/app information, ad interactions, diagnostics and consent signals. Read https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy for Google's processing and rights information. We request non-personalized ads with restricted data processing, disable the publisher first-party advertising ID, and do not request cross-app tracking permission or use fingerprinting. Non-personalized ads can still involve personal data and device storage. Advertising requests are gated by current privacy-SDK permission; unavailable consent or inventory never blocks core play. Advertising may be unavailable in some regions or for your age group. Platform and provider choices can be managed through Ad Privacy in Your Space, including sale/sharing controls where applicable. Advertising privacy choices are separate from optional product analytics.

Optional ad timing research
Improve Ad Timing is off by default and independent of Help Improve Velune. If you choose it, we record bounded ad events, estimated impression revenue with its currency/precision, exposure summaries, completed practice summaries, activity and return dates, and experiment assignments to evaluate offer timing and retention. We do not send raw guesses, recovery codes or crew contacts to ad networks. The timing model controls optional offers, never puzzle ranks, reward values or consent. Turning this off deletes optional ad events, decisions and assignments and rebuilds aggregate timing models from remaining permitted data. Minimal reward receipts and necessary anti-duplication records remain to deliver promised frames and protect the service. Frame rewards have no cash value, are non-transferable, and do not depend on granting tracking permission.

Optional product analytics
Product analytics is off by default. If you turn it on, we record limited feature events such as tutorial completion, sharing actions, reminder settings and practice selections, and may assign you to a product experiment. We use this to evaluate satisfaction, difficulty and retention. You can turn it off at any time in Your Space. Turning it off deletes your optional event history and experiment assignment. Essential saved gameplay remains available.

Crew and challenge sharing
Joining a crew is optional. Up to eight crew members can see your generated nickname, today's guess count and solved status, and weekly participation. Your individual words and recovery code are not shown to other players. Anyone with an invitation link or code may try to join until capacity is reached. A challenge link opens that puzzle in the Velune app without showing its answer first; browser pages only hand off invitations to the app. We record referrals from eligible links to measure activation and later participation. We do not upload your address book or send invitations on your behalf. Blocking and reporting a player leaves the shared crew and prevents joining a crew containing that player. Reports are reviewed by the operator.

Reminders
Daily reminders are optional local notifications scheduled on your device. You choose a time or enable smart timing. Smart timing uses on-device interaction history. Velune does not upload a push token for these reminders. You can disable reminders in the app or iOS Settings. We do not send advertising notifications.

Storage, providers and international processing
The iPhone app keeps its authentication and recovery credentials in Apple's Keychain. Cached gameplay and preferences stay in the app's storage. Cloudflare Workers and D1 process and store server data. The database was created in Cloudflare's Eastern Europe region; requests and operational processing may pass through Cloudflare's global infrastructure, including countries outside your country. We do not use cross-app advertising tracking. Advertising providers and any legally defined sharing are disclosed in the advertising section; available regional privacy controls govern that processing. Cloudflare processes network information such as IP addresses to deliver and protect the service. The application stores only keyed hashes for short-lived rate limiting, not raw IP addresses.

Retention and deletion
Saved gameplay remains while your account exists. Optional event history and reports are retained for at most 90 days. Application rate-limit records are removed after approximately 24 hours by daily maintenance. Optional ad events, timing decisions and ad reports are kept for at most 90 days. Superseded ad choice receipts are removed after one year; the latest choice remains while the account exists. Verified reward receipts and owned frames remain while the account exists. Unverified expired ad intents are removed after seven days. Ad response identifiers may accompany an issue report. Sessions expire after 90 days. Challenge links expire after 30 days. You can export your data or permanently delete your account in Your Space. Deletion removes active account records and associated gameplay; linked reports may be retained without your account identifier for the remaining review period. Provider backups can remain for their configured recovery period, up to 30 days. We may preserve information when legally required.

Your choices and rights
You can play without optional analytics or notifications, leave a crew, block and report a player, export your data, and delete your account. Depending on your location, you may have rights to access, correction, deletion, restriction, portability and objection, and to complain to your supervisory authority. We rely on providing the requested service for essential gameplay and selected reward delivery, consent for optional analytics and ad timing research, and legitimate interests for security and abuse prevention. Advertising device access and associated processing follow the applicable regional consent requirements and provider disclosures. Choices may be withdrawn in the app; withdrawal stops future optional processing and does not invalidate an already earned reward. The operator assesses market-specific rights and transfer arrangements before enabling advertising. Contact the address above if an in-app control cannot resolve your request.

Children
Velune is a general-audience word game and is not directed to children under 13. We do not knowingly collect accounts from children under 13. Please contact us if you believe a child has provided personal information so we can remove it. Local age and parental-consent requirements may be higher. Advertising rewards are for adults 18 or older and are unavailable for unknown or under-18 age groups. Age self-declaration is not identity verification; additional regional age requirements must be addressed before launch.

Model and changes
Semantic relationships are generated from the GloVe Wikipedia/Gigaword word-vector model. They can reflect ambiguity or biases in its source text and are game feedback, not factual claims about people or topics. We will update this policy when data practices change and notify players when required.