Who we are
Wurder is run by Wurder Ltd. Wurder Ltd is a company registered in England and Wales (company number 16808723), based in Bristol. You can check our details on the Companies House register.
We are the controller of the personal information described here. That means we decide how it’s used and we’re responsible for looking after it.
This policy covers the website at wurder.app, the web game at play.wurder.app, the Wurder app for iPhone and Android, and Wurder Discovery sessions. Questions about any of it go to hello@wurder.app.
What we collect
We collect what the game needs to run, and not much else.
Your account
- Your email address, if you sign up with one.
- Your name and display name.
- Your Wurder ID. This is your public handle, so other players can see it.
- Your profile photo.
- How you sign in: email and password, Apple or Google. If you sign in with Apple or Google, we receive your name and email address from them, but never your password.
- Your settings, stats and achievements.
You can also play as a guest. A guest account holds just your name and, if you add one, a photo.
Wurder Classic games
- The game code, the Host, and who played.
- Each player’s target and Wurd.
- Every Wurder: who scanned whose QR code, and when.
- Points, Wurders, K:D, streaks, results and the game timeline.
Wurder Discovery sessions
- The group you join, your display name and your photo.
- The missions you’re given and the missions you complete.
- QR scans between participants, which record who met whom and when.
- For Organisers: your account, your organisation’s name, and how you set up the session, its groups and its missions.
Event access requests
If you ask for Discovery access, we collect your name, email address, organisation, the type of organisation, roughly how many people you expect, and anything else you choose to tell us.
Your device
- Device type, operating system, app version and language.
- A notification token, if you allow notifications.
- Crash and error reports from the app and the web game.
- IP address and standard server logs.
What we don’t collect
We don’t access your location or your contacts. The camera is only used to scan Wurder QR codes, and we don’t keep what it sees. We only access your photos when you choose a profile picture.
How we use it
UK data protection law says we need a lawful basis for each use. These are ours.
To run Wurder (contract)
Creating your account, signing you in, running games and sessions, keeping score, showing your stats and achievements, and sending you the game updates you’ve asked for.
To keep Wurder working and safe (legitimate interests)
Fixing crashes and bugs, preventing cheating, spam and abuse, keeping the service secure, understanding which pages people visit, replying to event access requests, and giving Organisers insights about their sessions. We also use anonymised, combined data to improve Wurder and for research (see Research).
You can object to any of these (see Your rights).
When you’ve said yes (consent)
Push notifications, which your phone asks you about first. You can turn them off at any time in your device settings.
When the law requires it (legal obligation)
Keeping records we are legally required to keep, and responding to lawful requests.
We don’t sell your information, we don’t show ads, and we don’t use your information to make automated decisions that have legal or similarly significant effects on you.
Who can see what
- Other players in your game or session can see your display name, Wurder ID, photo and scores.
- Your Wurd and target stay secret from the other players while the game is live. That’s the point.
- Hosts can see who is in the games they run.
- Organisers can see who has joined their Discovery session, and insights about how the session went.
- Our service providers process information for us, as explained below.
We will only share your information with anyone else if the law requires it, to protect someone’s safety, or as part of a sale or restructure of our business. In that case, this policy would still apply to your information.
Research
Wurder exists to get people talking to each other, and we study whether it works. We may share anonymised, combined findings with research partners such as universities. For example: how many connections were made between groups at an event.
These findings never include your name, photo, Wurder ID or anything else that could reasonably identify you. If we ever wanted to share information that identifies you, we would ask you first.
Service providers
We use a small number of trusted companies to run Wurder. They only process your information on our instructions.
- Google Firebase and Google Cloud: accounts, sign-in, the game database, photo storage and our servers.
- Vercel: hosting for wurder.app and privacy-friendly page analytics.
- Sentry: crash and error reports.
- Expo: delivering push notifications and app updates.
- Apple and Google: sign in with Apple, Google sign-in, notification delivery and the app stores.
- Formspree: delivering event access requests to us.
- Our email provider: handling the emails you send us.
Where your data lives
Our main database, and the backups of it, are stored in London.
Some of our providers, including Vercel, Sentry, Expo and Formspree, are based in the United States and may process information there. When that happens, we rely on the UK’s adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or the standard contract terms approved by the Information Commissioner, so your information gets the same level of protection.
How long we keep it
We don’t keep information for longer than we need it.
| What | How long |
|---|---|
| Your account, profile and stats | Until you delete your account |
| Wurder Classic games | Deleted 180 days after the game ends |
| Detailed gameplay logs | Deleted after 180 days |
| Notifications | Deleted after 30 days |
| Wurder Discovery sessions | Kept after the session so the Organiser can review it. When no longer needed, we delete it or anonymise it |
| Event access requests and emails | As long as we need to deal with them, and follow up |
| Crash reports and server logs | A limited period, then deleted automatically |
| Backups | Daily backups are kept for 14 days. Recovery copies are kept for up to 90 days |
Because of backups, a copy of deleted information can survive for up to 90 days before it is gone for good. Backups are only used to recover from a problem.
We may keep information for longer if the law requires it, or if we need it to deal with a complaint, a legal claim or a safety issue.
Cookies and analytics
We use a small number of cookies and similar browser storage. They’re only there to make Wurder work:
- a secure cookie that keeps you signed in on wurder.app;
- sign-in storage that keeps you signed in to the web game; and
- small amounts of storage that remember where you were, so the game can pick up where you left off.
Our page analytics come from Vercel. They count page visits without using cookies and without tracking you across other websites.
We don’t use advertising cookies. If we ever want to use cookies that aren’t essential, we’ll ask you first.
Age
You need to be 13 or over to use Wurder. We don’t knowingly collect information from anyone younger.
If you think a child under 13 has used Wurder, email hello@wurder.app and we’ll delete their information.
Security
Your information is encrypted when it travels between your device and our servers. Access to it is restricted, and our systems are backed up and monitored. No online service is completely secure, but we take reasonable steps to protect your information and we will tell you if a breach puts you at high risk.
Deleting your account
You can delete your account in the app at any time: go to Account, then Delete account. If you can’t get into the app, see Delete account or email us. We may ask you to prove the account is yours first.
Deleting your account removes your sign-in, your profile and your Wurder ID. Games and sessions you played in are shared with other people, so the record of them may stay until it is deleted as described in How long we keep it, but your name and details are removed from it or anonymised.
Your rights
You have the right to:
- get a copy of the information we hold about you;
- have it corrected if it’s wrong;
- have it deleted;
- limit how we use it;
- object to how we use it, where we rely on legitimate interests;
- get the information you gave us in a format you can take elsewhere; and
- withdraw your consent at any time, where we rely on consent.
Some of these rights have exceptions. For example, we may need to keep some information to deal with a legal claim.
To use any of them, email hello@wurder.app. It’s free, and we’ll reply within one month.
Complaints
If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right.
You can also complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk. See how to make a complaint.
Changes
We’ll update this policy when Wurder changes. The date at the top shows when it last changed. If a change affects you significantly, we’ll let you know in the app or by email before it takes effect.
Contact
Email hello@wurder.app with any question about this policy or your information.