Privacy Policy
This Privacy Policy explains how Zekiserv ("we," "us," or "our") handles information when you use Spellrun (the "Game"), available as a mobile application and in the browser. By using the Game, you agree to the practices described in this policy.
Summary
- Spellrun is an online multiplayer game, so some data does reach our servers. Unlike a purely on-device app, races are run and scored on our servers, which means your account and race results are stored there.
- We collect the minimum needed to run matches and rankings. An account identifier, your display name, your rating, and your race results — not your contacts, your location, or your browsing activity.
- We never sell your personal information, and we do not use it to build advertising profiles ourselves.
- You can delete your account from inside the Game, which removes your account and its race history from our servers.
Information We Collect
We collect and store on our servers:
- Account information. A display name, and — depending on how you sign in — an email address, a hashed password, and/or an identifier supplied by Google or Discord.
- Gameplay data. Your rating (RP), rank, wins, matches played, active cosmetic selection, and a history of recent races including placement, words per minute, accuracy, streak, words completed, and typos.
- Purchase status. Whether an ad-free entitlement is active on your account, which plan it came from, and when it expires.
- Limited technical telemetry. A fixed, deliberately short list of events — match start and end, disconnects, queue joins, connection round-trip samples, app version, and a device rendering profile (graphics backend and pixel ratio) used to diagnose poor performance on real devices.
We do not collect:
- Your contacts, calendar, photos, files, or location;
- Keystrokes outside of the words presented in a race, or anything you type elsewhere on your device;
- Payment card numbers or billing details (see Purchases below);
- Advertising identifiers that we ourselves store or link to your account.
Signing In With Google or Discord
Spellrun lets you create an account with an email address and password, or by signing in with Google or Discord. Signing in with a provider is handled by that provider — we never see, receive, or store your Google or Discord password.
When you use one of those options, we receive and store only:
- A stable account identifier from that provider, used to recognise you on your next sign-in;
- Your display name from that provider, used as your initial in-game name; and
- Your email address, where the provider reports it as verified.
If a provider reports an email address it has not verified, we do not store that address and we do not use it to link accounts. Where you sign in with a verified email that already matches an existing Spellrun account, we link the two so you keep one profile, one rating, and one race history rather than accidentally creating a second account.
We request only basic profile and email access. We do not post on your behalf, read your Discord servers or messages, or access your Gmail. Access tokens from these providers are used to complete sign-in and are not stored for later use. You can revoke Spellrun's access at any time in your Google or Discord account settings; doing so does not by itself delete your Spellrun account, which you can delete from inside the Game.
Guest Play
You can play without creating an account. A guest profile holds a temporary display name and rating so matchmaking works, and is not linked to an email address or a sign-in provider. Inactive guest profiles are deleted automatically after 14 days.
Where Your Data Is Stored
Account and gameplay data is stored in a database on our hosting provider's infrastructure, on servers that may be located outside your country. Some settings and preferences are also cached locally on your device so the Game can start quickly.
We keep account and gameplay data for as long as your account exists. Technical telemetry is short-lived and used for operational diagnosis, not tied to a long-term profile of you. Network addresses are used transiently to rate-limit sign-in attempts and abuse, and are not retained as part of your account record.
Advertising
The mobile version of Spellrun shows ads supplied by Google AdMob. AdMob is operated by Google and follows Google's own privacy policy, not this one. Where required in your region, the Game will present a consent prompt before personalised ads are shown, and you can change that choice later from the Game's settings.
We do not send AdMob your email address, your sign-in identifiers, or your race history. Purchasing an ad-free entitlement stops ads from being requested at all.
Purchases
Ad-free access is sold as a subscription or a one-time purchase through the platform store, with subscription status managed for us by RevenueCat. Payment is handled entirely by the store — we never see or store your card number, billing address, or other payment details. What reaches our servers is limited to which plan is active on your account and when it expires, so the Game knows whether to show ads.
Third Parties
We do not sell personal information. We share the limited data described above only with the service providers needed to operate the Game: our hosting provider, Google (for sign-in and AdMob), Discord (for sign-in), and RevenueCat (for purchase status). Each follows its own privacy policy.
The Game is also distributed through platform stores such as Google Play. Those platforms may collect information according to their own policies when you download, update, purchase, or review an app. We do not control store or device-manufacturer data practices.
Security
Passwords, where you set one, are stored only as a salted hash and never in readable form. Sessions use signed tokens, and traffic between the Game and our servers is encrypted in transit. Race results, ratings, and placements are calculated on our servers rather than trusted from the client, which protects the integrity of the leaderboard as well as your account.
No system is perfectly secure. Protecting your device — a screen lock, an updated operating system, and a password you do not reuse — remains an important part of protecting your account.
Your Choices
You can, at any time:
- Delete your account from inside the Game — see Delete Your Account for step-by-step instructions. This removes your account record and the race history attached to it from our servers.
- Play as a guest instead of creating an account.
- Revoke Google or Discord access in those providers' account settings.
- Change your ad consent choice in the Game's settings, where a consent prompt applies in your region.
- Clear locally cached data by clearing the app's data in your device settings, or uninstalling the Game.
Depending on where you live, you may also have the right to request a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Contact us using the details below and we will respond within the period required by applicable law.
Children's Privacy
Spellrun is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has created an account or provided us with personal information, please reach out and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If changes materially affect how information is handled, we will provide additional notice within the Game or on this page. Continued use of Spellrun after changes become effective constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or how Spellrun handles information, contact us at: