This Privacy Policy explains how KHAGHERI ANTAR LLC YEREVAN collects, uses, stores, shares, and otherwise processes personal data in connection with 7 Wonders of Words and its related services (the “Game”).

The Game, its accounts, customer support services, events, promotions, and other digital features are collectively referred to as the “Services”. Any web version or page specifically used to access or support the Game is a “Website”.

This Privacy Policy applies when you download, install, access, or play the Game; create, connect, or use an account; contact customer support; participate in an in-game event, promotion, survey, or contest; submit content, feedback, reports, or other communications; or otherwise interact with the Services.

It describes the personal data we collect, how we obtain and use it, the legal bases on which we rely where applicable, the parties with whom we may share it, how long we retain it, how we protect it, and the rights and choices that may be available to you.

This Privacy Policy does not replace our Terms of Use. The Terms of Use govern access to and use of the Services, while this Privacy Policy explains how we process personal data.

Separate or supplemental notices may apply to particular Game features, platforms, or jurisdictions.

We may update this Privacy Policy from time to time. We will publish the revised version and update the "Last updated" date. Where required by law, we will provide additional notice or request consent before a material change takes effect.

KHAGHERI ANTAR LLC YEREVAN, 0014 N. Adonts str. 6/1, 3th floor 54 is responsible for determining how and why personal data is processed in connection with the Game and acts as the data controller, except where another entity is identified as controller or applicable law provides otherwise.

Our contact details are:

KHAGHERI ANTAR LLC YEREVAN

Company registration details: Reg. # 271.110.1224280

Registered address: Yerevan, 0014 N. Adonts str. 6/1, 3th floor 54

Privacy and Data Protection Email: support@khagheriantar.am

General question about the game: 7wow@khagheriantar.am

Questions, complaints, and requests concerning personal data should preferably be sent to support@khagheriantar.am.

When contacting us about a Game or account, please provide enough information to identify the relevant account and understand the request, such as the Game, Player ID, User ID, account identifier, platform or device, country of residence, and description of the issue.

Please do not send passwords, authentication codes, complete payment-card details, or unnecessary sensitive information. We may request additional information where reasonably necessary to verify identity, account ownership, or authority to act for another person.

Application stores, social networks, authentication providers, payment providers, advertising partners, and other third-party platforms may independently determine how and why they process personal data. Where they do so, their own privacy policies apply.

"Personal Data" means information relating to an identified or identifiable natural person. Depending on applicable law, this may include direct identifiers and information that can identify or distinguish a person when combined with other information, such as an IP address, device identifier, Player ID, or account identifier.

The data we collect depends on the Game, Website, feature, device, platform, country, and way in which you use the Services.

3.1 Account and Profile Data

We may process Player ID, User ID, account or installation identifiers, username, nickname, profile name or image, email address where used, authentication and recovery information, linked-platform account information, language, country, region, time zone, age or age range, settings, and information needed to verify account ownership.

We do not normally require a full legal name for ordinary gameplay unless needed for a specific feature, support request, promotion, legal obligation, or other identified purpose.

3.2 Device, Technical, and Diagnostic Data

We may automatically collect device type, model, operating system, Game or browser version, application, platform, installation or advertising identifiers, IP address, approximate location, language, time zone, network and connection information, push-notification token, screen settings, crash reports, errors, loading times, latency, compatibility, and performance information.

IP addresses may be used for network operation, security, fraud prevention, legal compliance, and approximate location. Depending on the purpose, they may be retained briefly, truncated, pseudonymized, or included in security records.

Precise location, such as GPS location, is processed only where a feature requires it, permission is requested and granted, and processing is legally permitted. You may normally withdraw permission through device settings.

3.3 Gameplay and Usage Data

We may collect Game progress, levels, achievements, scores, rankings, session dates and duration, actions and features used, gameplay choices, tutorials, events, offers, rewards, Virtual Currency, Virtual Items, energy, lives, boosters, advertisement interactions, social and community interactions, synchronization events, and information used to identify bugs, balancing issues, fraud, cheating, abuse, or unintended use.

3.4 Purchase and Transaction Data

When you make a purchase through an application store or payment provider, we may receive the item purchased, date, amount, currency, transaction or receipt identifier, platform, country, subscription or entitlement status, and refund, cancellation, reversal, or chargeback information.

Third-party platforms normally process payment credentials. Except where expressly stated otherwise, we do not receive or store complete payment-card numbers, bank-account credentials, or full payment-instrument details.

3.5 Communications, Support, and User Content

We may process emails, support requests and responses, complaints, appeals, reports, feedback, bug reports, survey responses, usernames, profile information, team or clan names, messages, chat communications, images, files, screenshots, information about reported users or content, and related account, gameplay, transaction, technical, and security data.

Content submitted through public or shared features may be visible to other users or the public. Do not submit information through those features that you wish to keep private.

3.6 Advertising, Analytics, and Attribution Data

Where permitted by law and your settings, we and authorized partners may process advertising, device, application, installation and campaign identifiers; IP address and approximate location; installation source; advertisement views, clicks and rewarded-ad completion; Game events, engagement and conversions; purchase or installation attribution; consent signals; and aggregated or pseudonymous analytics.

3.7 Security, Fraud-Prevention, and Audit Data

We may process login and authentication events, failed login attempts, account-access history, application and system logs, permission and security-setting changes, security alerts, suspected compromise, cheating, exploitation, fraud, payment abuse, device and network information, and investigation or incident records.

Automated monitoring may identify unusual or potentially unauthorized activity for review by authorized personnel.

3.8 Cookies and Similar Technologies

The Websites and web-based Services may use cookies, SDKs, pixels, local storage, and similar technologies to collect browser and device information, IP address, pages and features used, session information, referring sources, analytics, advertising, and consent preferences.

A Cookie Notice or consent interface may provide additional details. Where required, non-essential technologies are used only after consent.

3.9 Sources of Personal Data

We collect data:

• directly from you when you create or use an account, contact us, submit content, or participate in a feature;
• automatically from Games, Websites, devices, browsers, and interactions with the Services;
• from application stores, payment providers, operating systems, authentication providers, and social networks;
• from analytics, advertising, attribution, hosting, support, security, and other service providers;
• from other users who report content, conduct, or an account;
• from affiliated companies supporting the Services; and
• from public sources in limited cases involving fraud, abuse, security, or legal claims.

Information received from a third party depends on the integration, permissions, account settings, platform rules, and that party's privacy policy.

Where you connect a third-party account, we do not receive the password for that account. You may be able to disconnect the integration through the relevant Game, device, or platform settings, although doing so may affect authentication, synchronization, purchase restoration, or social features.

3.10 Sensitive, Anonymized, and Aggregated Data

We do not intentionally request sensitive or special-category data from ordinary users unless necessary for a specific lawful purpose and appropriate safeguards are applied. Do not submit health data, government identification numbers, full financial credentials, biometric data, or other sensitive information through general communication features unless specifically requested through an appropriate method.

We may create aggregated or irreversibly anonymized information. Once information can no longer reasonably identify a person, it is not treated as Personal Data and may be used for analytics, research, reporting, security, Game balancing, development, and improvement.

3.11 7 Wonders of Words and Google Sign-In

The following details apply specifically to 7 Wonders of Words and supplement the general descriptions above. If a specific disclosure in this section differs from a general description elsewhere in this Policy, this section controls for the Game.

Data processed in the GameDepending on the platform and features used, the Game processes: (a) Firebase User ID, game-generated installation ID and guest ID, Telegram User ID, Yandex Player ID, linked authentication-provider information, and display names from Telegram, Google or Yandex; (b) the complete signed Telegram Mini App initialization payload sent to our backend for launch validation and account identification; (c) the game save, including levels, completed puzzles, revealed words and cells, additional words, attempts, hints, combos, tutorials, achievements, events, rankings, currency, resources, boosters, rewards, offers and purchase entitlements; (d) session times, elapsed time, level, gameplay actions, rewards, virtual-currency spending, purchases, advertising interactions, language and A/B-test assignments, some of which are associated with an account ID; (e) purchase product, order and transaction identifiers, dates, status, tokens or signed purchase data, receipts and consumption status; (f) app version, errors, crashes, hangs, diagnostic logs, web traces, IP address and ordinary network request metadata; (g) advertising, attribution, consent and ad-revenue data; (h) reminder category, scheduled time and language for Telegram reminders; and (i) support email, account/platform identifiers, game version, message and any attachments voluntarily supplied.

Google sign-in and Google user data

When you choose Google sign-in, the Game requests only the basic OpenID Connect scopes openid, email and profile. These provide a stable Google account identifier and, where authorized, your email address and basic profile information such as your display name. The Game does not request access to Gmail, contacts, Google Drive, Calendar, YouTube, Google Photos or other Google content, and we do not receive your Google password.

We use Google user data only to authenticate you, create or link your Game account, maintain your sign-in session, synchronize your Game progress, prevent account fraud and provide account support. We do not sell Google user data, use it for personalized advertising, or use it to train generalized artificial-intelligence or machine-learning models. We do not use Google APIs to create or facilitate AI-generated non-consensual intimate imagery.

Google identity data is sent to Google and the Firebase Authentication or other authentication service configured for the Game, and to our Game backend as needed to validate sign-in, link your account and synchronize your save. It is not disclosed to advertising partners for their independent use. Authentication tokens are used only to maintain and validate your sign-in session; we do not retain Google access tokens for unrelated Google API access. Tokens and linked Google identity data are revoked, invalidated or deleted when you unlink Google or request account deletion, subject to the provider’s technical deletion process and the periods in Section 10.

You may request deletion or unlinking by emailing support@khagheriantar.am with “7 Wonders of Words privacy request” in the subject line. Deletion of Google identity data from our active systems is completed within 30 days; encrypted backup copies are deleted or overwritten within 90 days. Google and other platform providers may retain data under their own policies.

Platforms and integrations used by the Game

Depending on platform and feature, the Game uses: Android — Firebase, Google Play or Play Games, Google User Messaging Platform, AppsFlyer, Unity LevelPlay and its configured advertising partners, and Sentry; iOS — Firebase Analytics and Sentry (account, purchase and advertising implementations may differ by version); Telegram — Firebase, Telegram Apps Analytics, Adsgram, Telegram payments and Sentry; Yandex — Firebase Authentication and cloud saves, Yandex Games services, Yandex Metrica and Sentry. Providers receive data needed to deliver authentication, cloud saves, analytics, advertising, attribution, payments, consent management or diagnostics. Payment credentials are handled by the platform; the Game does not collect full card numbers or bank-account credentials.

The Telegram version sends the complete signed Telegram Mini App initialization data to our backend for validation and account identification. Adsgram may receive Telegram launch or profile context and, where available, accelerometer, gyroscope or orientation readings. The Telegram analytics SDK includes a fingerprinting-related component that initializes identifiers and behavioral collectors. We configure the Game not to transmit a full device-fingerprint profile during ordinary gameplay; if that configuration changes, we will update this Policy and provide any required notice or consent before the change.

Google user data is not used for advertising personalization or transferred to advertising partners for their own purposes.

We process personal data only for defined purposes and where we have an appropriate lawful basis. The applicable basis depends on the country, data, purpose, and circumstances.

4.1 Providing and Operating the Services

We use account, device, technical, gameplay, transaction, and communication data to create, authenticate, maintain, recover, and protect accounts; provide Games and features; save and restore progress; provide events, rewards, Virtual Currency and Virtual Items; deliver purchases and subscriptions; operate social and communication features; provide support; and send important operational or security messages.

Where applicable, this processing is necessary to enter into or perform a contract. If required data is not provided, the relevant feature or Service may be unavailable.

4.2 Purchases, Support, and Account Management

We use transaction, entitlement, subscription, refund, and chargeback information to verify and deliver purchases, maintain subscriptions, restore content, resolve errors, prevent payment abuse, maintain records, and comply with financial and legal obligations.

We use account, contact, gameplay, technical, transaction, and communication data to verify ownership, recover access, investigate lost progress or missing content, answer requests, resolve technical issues, and maintain support quality.

Depending on the activity, we rely on contract performance, legal obligations, legitimate interests in preventing fraud and supporting users, or legal claims.

4.3 Analytics, Development, and Personalization

We use technical, diagnostic, gameplay, and usage data to understand use of the Services, measure performance, identify crashes, improve Games and features, balance difficulty and in-game economies, test functionality, develop content, conduct research, and prepare reports.

We may use account, gameplay, and interaction data to remember preferences, adapt tutorials or progression, and recommend Games, features, events, or offers.

Where permitted, we rely on legitimate interests in maintaining and improving the Services. Where consent is required for cookies, SDKs, identifiers, or particular personalization, we rely on consent.

4.4 Security, Fraud Prevention, and Enforcement

We use account, device, network, authentication, gameplay, transaction, communication, audit, and security data to protect users and accounts; detect unauthorized access; prevent fraud, payment abuse, cheating, bots, exploits and manipulation; investigate incidents; identify vulnerabilities; enforce the Terms of Use; protect platform data; and defend legal rights.

Automated monitoring, anomaly detection, anti-fraud, anti-cheat, and alerting tools may flag activity for review. We generally rely on legitimate interests in security and protection, and on legal obligations where applicable.

4.5 User Content, Moderation, and Safety

We use User Content, reports, complaints, communications, gameplay data, and technical records to operate social and community features, display content, review reports, detect harmful or unlawful conduct, moderate content, investigate abuse, apply enforcement measures, process appeals, and comply with lawful requests or platform rules.

Depending on the activity, we rely on contract performance, legitimate interests in safe and fair Services, legal obligations, or legal claims.

4.6 Advertising, Marketing, and Notifications

Where the Services include advertising, we and authorized partners may use device, advertising, installation, campaign, approximate-location, consent, interaction, gameplay, and conversion data to display contextual or personalized advertisements, provide rewarded ads, limit frequency, measure campaigns, attribute installations and actions, and prevent advertising fraud.

Where required, we rely on consent for personalized advertising, advertising identifiers, or non-essential tracking. Where permitted, we may rely on legitimate interests for contextual advertising, basic measurement, security, and fraud prevention.

We may use contact information, push tokens, account information, and preferences to send updates, event information, offers, reminders, surveys, or promotional communications. You may unsubscribe or change settings. We may continue to send necessary account, security, purchase, support, or legal messages.

4.7 Events, Legal Compliance, and Corporate Matters

For events, promotions, contests, surveys, and testing activities, we may process information needed to administer participation, verify eligibility, communicate, distribute rewards, prevent abuse, comply with rules, and analyze results. Additional terms or notices may apply.

We may also process data to comply with laws, court orders and lawful requests; maintain tax, accounting and corporate records; investigate unlawful activity; protect rights and safety; enforce agreements; respond to emergencies; and establish or defend legal claims.

Personal data may be processed for internal administration, audits, risk management, financing, investment, restructuring, mergers, acquisitions, sales or transfers of Games or assets, and related due diligence.

4.8 Consent and Legitimate Interests

Where processing relies on consent, you may withdraw it through the relevant interface, Game, Website, device, platform, or by contacting us. Withdrawal does not affect prior lawful processing or processing based on another lawful basis.

Where we rely on legitimate interests, those interests may include operating, securing, supporting, and improving the Services; managing accounts; preventing fraud, cheating and abuse; understanding use; communicating with users; protecting legal rights; and administering our business. Where required, we consider necessity, reasonable expectations, possible impact, and safeguards.

We may use SDKs, cookies, pixels, local storage, device and application identifiers, advertising identifiers, attribution links, analytics tools, crash-reporting tools, and consent-management technologies.

Analytics and diagnostic tools help us measure installations, sessions, progression, retention, feature use, crashes, errors, latency, compatibility, and performance. They may process pseudonymous identifiers, device and application information, IP address, approximate location, gameplay events, purchase events, diagnostic data, and campaign information.

Some Services may display contextual, personalized, rewarded, cross-promotional, or other advertisements. Contextual ads may use the Game, country, language, device type, and operating system. Personalized ads may also use advertising identifiers, approximate location, advertisement interactions, installation information, gameplay engagement, and partner data. Personalized advertising is used only where permitted and subject to required consent or opt-out rights.

For rewarded ads, we and the provider may process information needed to display the ad, confirm completion, prevent fraudulent claims, attribute the event, deliver the reward, measure performance, and resolve disputes.

Attribution providers may help determine how users discover and install Games and whether campaigns result in installations, purchases, or other actions. We and our partners may process device, campaign, IP-address, network, session, and interaction information to detect invalid traffic, automated clicks, manipulated attribution, fraudulent installations, and repeated reward claims.

The Websites may use strictly necessary, functional, analytics, performance, and advertising cookies. Where required, non-essential technologies are used only after consent. Preferences may be managed through a cookie banner, browser, device, platform, Game, or consent settings.

Your device or platform may allow you to reset an advertising identifier, restrict tracking, manage permissions, limit personalized advertising, or disconnect accounts. Changing settings may not prevent all processing or remove all ads. Technical, security, fraud-prevention, diagnostic, or basic measurement processing may remain necessary.

Authorized partners may act as our processors, separate controllers, or joint controllers depending on the activity. Their own privacy policies apply where they determine their own purposes and means.

Where consent is required, we may record the choice, date and time, relevant Game or Website, application version, jurisdiction or consent framework, and other information necessary to demonstrate and implement the preference. Withdrawal of consent does not affect processing carried out lawfully before withdrawal.

Opting out of personalized advertising does not necessarily reduce the number of advertisements. It may instead result in contextual or non-personalized advertisements.

The Services may be made available through application stores, social networks, authentication providers, payment providers, advertising platforms, and other third-party services, including the Apple App Store and Google Play.

Purchases are generally processed by the relevant store or payment provider. We may receive transaction, receipt, entitlement, subscription, refund, reversal, and chargeback information needed to deliver content, maintain subscriptions, restore purchases, provide support, prevent fraud, reconcile records, and comply with law.

We normally do not receive full payment-card or bank-account credentials. Questions concerning billing, platform refunds, or subscription cancellation should normally be directed to the relevant platform.

If you use a third-party platform to authenticate or connect an account, we may receive a platform identifier, authentication confirmation, profile information, email or relay email, country, language, age range, or other information needed to connect, synchronize, or recover the account. We do not receive the third-party platform password.

We may receive or generate identifiers, event data, attribution data, transaction information, authentication information, and other data through platform SDKs, APIs, and integrations. We process it only for authorized purposes such as providing the Services, supporting purchases, measuring campaigns, preventing fraud, maintaining security, complying with platform requirements, and resolving issues.

A third-party platform may act as our processor, a separate controller, or another regulated party. Where it independently determines its processing, its own privacy policy applies.

Your access to an account may depend on the continued availability of the relevant third-party platform. Changes to that platform, suspension of a linked account, or withdrawal of permissions may affect access, synchronization, purchases, or other connected functionality.

The Services may allow users to submit usernames, profiles, messages, chat communications, team or clan names, images, feedback, reports, and other content.

We process User Content and related account, technical, timing, recipient, and contextual information to operate communication and community features, display or transmit content, provide support, and maintain security. Depending on the feature, content may be visible to intended recipients, other users, team members, moderators, providers, or the public.

We may manually or automatically monitor, review, filter, restrict, edit, refuse, remove, or disable User Content where we reasonably believe it violates the Terms of Use, law, another person's rights, security requirements, or platform rules, or is fraudulent, abusive, harmful, misleading, seriously offensive, or operationally risky.

Automated tools may flag content, behavior, transactions, or accounts for restriction or human review. We do not guarantee that all User Content will be monitored or lawful, accurate, appropriate, or available.

When a report or complaint is submitted, we may process the identities of the users involved, the content or conduct, supporting evidence, relevant chat, gameplay, account, transaction and technical records, and the investigation and outcome. We use this information to investigate, protect users, identify repeated abuse, take action, process appeals, and comply with law.

Support and feedback records may include contact and account information, messages, screenshots, files, transactions, technical data, agent notes, and the outcome. Do not send passwords, authentication codes, or complete payment-card information.

User Content may be retained while available through the Services and for limited backup, investigation, security, legal, dispute, or operational periods. It may be disclosed to intended recipients, providers, affiliated companies, platforms, advisers, authorities, affected persons, or parties to a corporate transaction where lawful and necessary.

7 Wonders of Words is intended for people aged 12 or older. We do not knowingly permit children under 12 to create an account or use the Game, and we do not knowingly collect personal data from them.

If you believe a child under 12 has provided personal data, contact support@khagheriantar.am. We will take reasonable steps to restrict processing and delete the data.

We share personal data only where reasonably necessary for the purposes described in this Privacy Policy, where permitted or required by law, and subject to appropriate safeguards.

We may share data with affiliated companies to operate, support, develop, secure and administer the Services; provide support; manage accounts and purchases; perform analytics and reporting; investigate incidents; and manage legal, finance, compliance, and corporate functions.

We may use providers for cloud hosting, storage, authentication, support, analytics, diagnostics, advertising, attribution, consent management, communications, security, anti-fraud, anti-cheat, payment support, moderation, development, testing, surveys, promotions, backup, and recovery. Providers acting on our behalf are subject to contractual confidentiality, security, and data-protection obligations.

We may share data with application stores, payment providers, operating systems, authentication services, social networks, advertising networks, analytics and attribution providers where needed for downloads, authentication, purchases, platform functionality, advertising, campaign measurement, fraud prevention, support, or platform compliance.

Certain advertising disclosures may be considered a "sale", "sharing", or targeted-advertising activity under some laws even where no money is paid. Where applicable, we provide required notice and consent or opt-out mechanisms.

Where you use public or shared features, usernames, profiles, team membership, scores, rankings, achievements, User Content, and similar information may be visible to recipients, other users, Website visitors, or the public.

We may disclose relevant data to advisers, regulators, law-enforcement authorities, courts, tax authorities, or other competent bodies for advice, compliance, legal process, investigations, security, protection of rights, or legal claims.

Data may also be disclosed or transferred in connection with financing, investment, merger, acquisition, restructuring, insolvency, sale, or transfer of a Game, business, company, operation, or asset.

Khagheri Antar is an international game development group and uses affiliated companies, personnel, platforms, providers, and infrastructure in different countries. Data may therefore be transferred to, stored in, or accessed from another country.

Where required, we use recognized safeguards, which may include adequacy decisions, standard contractual clauses, contractual or intra-group arrangements, vendor and transfer assessments, supplementary security measures, or another lawful mechanism. Remote access may be subject to role-based access, least privilege, multi-factor authentication, secure connections, logging, monitoring, confidentiality obligations, device controls, and restrictions on local storage.

A third-party platform acting as a separate controller is responsible for its own international transfers.

Where personal data is disclosed to professional advisers, authorities, or transaction participants, we seek to limit the disclosure to information reasonably necessary for the relevant purpose. Where legally permitted and practicable, we may assess whether a governmental request is valid, specific, proportionate, and issued by a competent authority.

Where applicable law gives you this right, you may request general information about the safeguards used for an international transfer. We may withhold or redact information where disclosure would affect security, confidentiality, legal privilege, or the rights of another person.

We retain personal data only for as long as reasonably necessary to provide the Services, comply with law, maintain security, prevent fraud and abuse, resolve disputes, and establish or defend legal claims.

Retention depends on the data, purpose, account status, legal and platform requirements, limitation periods, investigations, and whether data can be anonymized.

Typical periods and criteria include:

• Account and profile data: while the account is active and for a limited period after closure or inactivity where needed for recovery, security, enforcement, transactions, disputes, or law.

• Gameplay and usage data: while needed to maintain progress, operate and improve the Services, investigate bugs or abuse, and support users.

• Aggregated analytics: generally up to 36 months, or longer where irreversibly anonymized; for 7 Wonders of Words, the specific period in this Section 10 applies.

• Purchase and transaction records: as required for delivery, subscriptions, refunds, fraud prevention, accounting, tax, audits, legal obligations, and claims.

• Support and communications: for the matter and an additional period needed for consistency, investigations, complaints, security, and claims.

• User Content: while available and for limited backup, investigation, legal, or operational periods.

• Moderation and enforcement records: as needed to identify repeated violations, prevent evasion, process appeals, comply with law or platform rules, and defend claims.

• Security and audit logs: typically 6 to 12 months, except that the specific shorter period in this Section 10 applies to 7 Wonders of Words unless an incident, investigation or legal obligation requires preservation.

• Advertising, attribution, consent, and marketing records: as needed to measure campaigns, prevent fraud, resolve disputes, implement preferences, and demonstrate compliance.

7 Wonders of Words specific retention periods

For 7 Wonders of Words, the following periods apply and take precedence over the general retention criteria above. If you request deletion, data in active systems is removed within 30 days. Encrypted backup copies are deleted or overwritten within 90 days and are not restored except for disaster recovery, after which deletion is reapplied.

Account identifiers, Google identity data, profile and gameplay save: while your account is active; we may delete accounts with no gameplay activity for 24 months. Deletion requests are completed within 30 days in active systems and 90 days in backups.

Tournament display name and score: for the event and up to 90 days after it ends, then removed or de-identified.

Analytics and A/B-test events: up to 14 months from collection, then deleted or aggregated so they no longer identify you.

Advertising and attribution identifiers and events: up to 13 months from collection, subject to shorter platform/provider settings and consent choices.

Server and security request logs: up to 30 days, except records preserved for a specific incident, investigation or legal claim.

Crash reports, Sentry events, diagnostic logs and performance traces: up to 90 days, except records needed longer to resolve a specific security or reliability incident.

Purchase and transaction records: up to 7 years after the transaction, or longer only where applicable tax, accounting or legal requirements require it.

Support correspondence: up to 3 years after the support request is closed, except records needed for a dispute or legal claim.

Telegram reminder scheduling data: until the reminder is sent or cancelled; related operational logs are kept for up to 30 days. Data stored only on your device remains until you clear app data, remove the relevant browser storage or uninstall the Game.

Where deletion is available, you may request account deletion through the Game or by contacting us. We may verify identity and account ownership, restrict access, begin deletion or anonymization, notify processors where required, and retain limited transaction, security, fraud-prevention, suppression, moderation, or legal records.

Deletion may not occur immediately in every system. Data may remain temporarily in backups, disaster-recovery systems, security archives, or logs until overwritten through the normal cycle. It remains protected and is not restored except for recovery, security, or legal compliance.

Deletion of a Khagheri Antar Game account does not automatically delete information held independently by a platform or other controller.

We may suspend deletion where data is relevant to a legal claim, inquiry, court order, investigation, incident, fraud matter, dispute, or preservation obligation. We may also irreversibly anonymize data and retain it for analytics, research, security, reporting, balancing, development, and improvement.

Consent records and opt-out preferences may be retained for as long as reasonably necessary to implement your choices, demonstrate compliance, and prevent future communications or processing contrary to those choices. A record that you opted out may therefore remain after other data is deleted.

Inactive accounts may be deleted or anonymized after an extended period, taking into account purchases, subscriptions, account recovery, platform requirements, security, and whether reasonable notice can be provided. For 7 Wonders of Words, the specific inactivity period above applies.

We use technical, organizational, and administrative measures designed to protect personal data against unauthorized or unlawful access, use, disclosure, alteration, loss, destruction, or misuse.

Measures may include role-based and need-to-know access; least privilege; unique accounts and access reviews; password and multi-factor authentication controls; encryption in transit and where appropriate at rest; managed devices, endpoint protection, patching, and secure configuration; firewalls, network segmentation, monitoring, backups and recovery; secure development, code review, testing and environment separation; vulnerability identification and remediation; authentication, application, API and security logging; automated alerting and manual review; incident containment, investigation, remediation and notification where required; vendor controls; confidentiality, training, offboarding, and prompt access revocation.

We seek to minimize collection, use pseudonymous identifiers where appropriate, avoid storing full payment credentials, limit raw IP retention, restrict production access, and delete or anonymize data when no longer required.

No system, transmission, device, platform, or security control can be guaranteed completely secure. Security may also be affected by compromised devices or email accounts, credential sharing, phishing, malicious software, third-party failures, infrastructure failures, and unknown vulnerabilities.

Use strong passwords where applicable, protect your device and email, keep credentials confidential, enable available security controls, avoid unofficial services, install updates, and notify us promptly if you suspect unauthorized access. Do not publicly disclose a suspected vulnerability or access data or systems beyond what is reasonably necessary to identify and report it.

If a security incident qualifies for notification under applicable law, we will notify affected individuals and competent authorities in the manner and within the period required by that law. The information provided may depend on the nature, scope, risk, and ongoing investigation of the incident.

Depending on your country and applicable law, you may have some or all of the rights below. Rights may be subject to conditions, exceptions, verification, and the rights of others.

You may have the right to ask whether we process data about you, access it, receive information about processing, correct inaccurate data, and complete incomplete data.

You may request deletion where data is no longer necessary, consent is withdrawn and no other basis applies, processing is unlawful, a valid objection applies, or deletion is required by law. Deletion may permanently remove the account, Game progress, achievements, rankings, Virtual Currency, Virtual Items, subscriptions, User Content, and recovery ability. We may retain limited data for legal, accounting, tax, security, fraud-prevention, enforcement, suppression, dispute, investigation, backup, or claims purposes.

You may request restriction in circumstances recognized by law, such as while accuracy or an objection is assessed.

Where processing is based on legitimate interests, you may have the right to object for reasons relating to your situation. We may continue where compelling lawful grounds apply or processing is necessary for legal claims.

You may object at any time to direct marketing and may unsubscribe through the communication, settings, consent interface, or by contacting us. Limited suppression data may be retained to respect the choice.

Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect prior lawful processing or processing based on another basis, and may make a feature unavailable.

Where provided by law, you may request certain data you provided in a structured, commonly used, machine-readable format and, where feasible, transfer to another controller.

We may use automated systems for analytics, security, fraud prevention, anti-cheat, moderation, personalization, advertising, attribution, and detection of unusual activity. We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects unless permitted by law and safeguards apply. Where applicable, you may request information, human review, or reconsideration.

Depending on the Service and jurisdiction, you may be able to refuse or withdraw consent for personalized advertising or non-essential analytics; limit tracking through device, browser, operating-system, store, or platform settings; reset or restrict an advertising identifier; manage cookies and permissions; opt out of targeted advertising or regulated sale or sharing; disconnect accounts; and control marketing or push notifications.

Some processing may remain necessary for security, fraud prevention, account operation, requested features, diagnostics, legal compliance, or basic measurement.

Submit requests to support@khagheriantar.am or through any privacy, deletion, or consent mechanism available in the Game. Include enough information to identify the account and request, such as Player ID, account identifier, associated email where applicable, platform, country, and the right requested.

We may verify identity, account ownership, authority to act for another person, and whether disclosure creates a risk. Authorized representatives and parents or guardians may submit requests where permitted, subject to verification.

We respond without undue delay and within the period required by law. Where permitted, the period may be extended because of complexity, volume, verification, separate systems, or involvement of providers or controllers.

Requests are generally free. Where permitted, we may charge a reasonable fee or refuse a manifestly unfounded, excessive, repetitive, abusive, or unauthorized request.

We may refuse, limit, or redact a response to protect another person's privacy, security and anti-fraud systems, trade secrets, legal privilege, investigations, legal-retention obligations, or rights of others.

You may contact us with a complaint and may also have the right to complain to a competent data-protection authority. Where required, we will not unlawfully discriminate against you for exercising a privacy right, although exercising a right may affect a feature where the relevant data is necessary.

Where your request relates to data independently controlled by an application store, payment provider, social network, advertising partner, authentication provider, or other platform, we may direct you to that controller or process only the part of the request relating to data under our control.

If applicable law provides a right to appeal our response to a privacy request, instructions for submitting the appeal will be included in the response or made available through the relevant regional notice.

The Services may contain or connect with external websites, applications, platforms, advertisements, payment interfaces, social features, videos, support tools, and other services.

When a third party independently determines its processing, its privacy policy and terms apply. We do not control whether it retains data, transfers it internationally, combines it with other information, uses it for advertising, changes its practices, or experiences a security incident.

A provider may act as our processor for some activities and as a separate controller for others. Providers acting on our behalf are subject to contractual and security requirements. Review a third party's identity, privacy policy, settings, age requirements, purchase conditions, and requested information before using its service.

We may update this Privacy Policy to reflect changes in the Services, data practices, technologies, providers, organization, laws, platform requirements, or security practices. We will publish the revised version and update the "Last updated" date. For material changes, we may provide notice through a Game, Website, account notification, email, platform, store description, or consent interface.

Where a new activity requires consent, we will request it before beginning that activity. We will not treat continued use as consent where law requires an express action.

Previous versions may be retained for legal, audit, and record-keeping purposes. An update does not change the lawfulness of processing carried out before it became effective. Previously collected data may continue to be processed where the original purpose remains applicable, the new purpose is compatible, another lawful basis applies, or retention is required or permitted by law.

Where a material change concerns children, personalized advertising, sensitive data, or another higher-risk activity, we may provide an age-appropriate notice, request renewed consent or parental authorization, restrict the affected feature, or take another safeguard required by law.

Privacy contact:

KHAGHERI ANTAR LLC YEREVAN

Company registration details: Reg. # 271.110.1224280

Registered address: Yerevan, 0014 N. Adonts str. 6/1, 3th floor 54

Privacy and Data Protection Email: support@khagheriantar.am

A complaint should identify the relevant Game, Website, account, processing activity, data, date or period, reason for concern, and requested outcome where possible.

We may verify identity and authority, review relevant systems and records, consult providers or affiliated companies, assess legal requirements, take corrective action, and maintain records of the complaint and response.

Information we can provide may be limited where disclosure would affect another person's privacy, security systems, an investigation, confidential business information, legal privilege, or protected information.

Requests concerning gameplay, missing progress, purchases, subscriptions, refunds, Virtual Currency, Virtual Items, or technical errors should normally be submitted through customer support. Privacy aspects may be referred to privacy personnel.

If you believe an account has been accessed without authorization, personal data may have been exposed, or you identified a vulnerability, contact us promptly. Do not access, retain, copy, alter, disclose, or publicly publish data or systems beyond what is reasonably necessary to identify and report the issue.

Privacy laws may grant additional rights or require additional notices depending on location. Where applicable, this may include rights relating to access, correction, deletion, portability, objection, restriction, consent, targeted advertising, regulated sale or sharing, sensitive data, automated decisions, appeals, or complaints.

Where a regional law requires more specific notice, opt-out functionality, representative details, or another mechanism, we may provide it through the Game, Website, consent interface, regional supplement, store disclosure, account notice, or another appropriate method.

Nothing in this Privacy Policy limits a right or remedy that cannot lawfully be waived or restricted.

Where the English-language version and a translation differ, the English-language version will prevail to the extent permitted by applicable law. A translation may nevertheless be controlling where local law requires information to be provided in the local language.

This Privacy Policy should be read together with the Terms of Use, any applicable Cookie Notice, Game-specific notice, consent interface, and regional supplement made available for the relevant Service.