Privacy Policy
Last updated: November 3, 2026
This Privacy Policy describes how Where's Wally (“we”, “us”) handles information when you use our mobile application and this website (whereswaldogame.com).
1. Information we collect
- Account data — guest or signed-in profile name, optional email (Google sign-in), avatar, device identifiers for guest login.
- Gameplay data — level progress, times, accuracy, leaderboard stats on our servers.
- Diagnostics — crash logs and analytics (e.g. Firebase) to improve stability.
- Advertising & device signals — on the free (ad-supported) tier, Google AdMob and related partners may receive advertising identifiers, approximate location / region, device and app info, and interaction data used to select and measure ads. Premium / Remove Ads purchases turn ads off.
2. How we use information
- Provide progress sync and rankings
- Secure accounts and prevent abuse
- Show ads (free) or honor ad-free purchases
- Fix crashes and improve performance
- Comply with privacy laws (including GDPR / UK GDPR where they apply) and honor your ad-consent choices
3. Advertising, consent (EEA / UK / Switzerland)
Where required by law (for example in the European Economic Area, United Kingdom, and Switzerland), we use Google’s User Messaging Platform (UMP) — a certified Consent Management Platform under the IAB Transparency and Consent Framework (TCF) — before personalized ads are requested.
- You may accept, reject non-essential / personalized ads, or manage vendor and purpose choices in the consent form.
- Your choices can create a TC string that travels with ad requests so partners know what you allowed.
- Outside those regions, ads may still load under applicable rules; we do not use the EEA form as a fake gate for other countries.
- You can change ad privacy choices later in the app under Profile → Privacy options (when that entry is available for your region).
- You can also remove ads entirely with a one-time Remove Ads / Go Premium purchase.
Google’s ad / privacy information: Google Privacy Policy · AdMob & privacy.
4. Sharing
We do not sell personal information. Providers (hosting, analytics, ads such as Google AdMob) process data under their agreements and, where required, your consent choices. Public leaderboard shows display name, rank, levels, and times — not email or device IDs.
5. Retention & deletion
Delete from Profile → Delete account. Soft-deleted accounts are permanently removed after 30 days unless you sign in again. See How to delete your account.
6. Children
General audience. We do not knowingly collect data from children under 13. We do not treat the app as directed to children under the age of consent for personalized advertising where those rules apply.