Privacy Policy for WikiSurf

Effective Date: November 13, 2026

This Privacy Policy explains how WikiSurf ("we", "us", or "our"), developed by Onur Arda Öz, collects, uses, and shares your information when you use our iOS and Android applications and this website. WikiSurf is an online game and requires an internet connection.

1. Information We Collect

• Account information: When you use a supported sign-in provider (Apple or Google on iOS, Google on Android), our authentication service receives your provider account identifier, email address and verification information. Depending on the provider and permissions, it may also receive profile metadata such as a display name or profile picture URL. WikiSurf uses the username and in-game avatar you choose for your game profile, rather than publishing your Google profile automatically. If you choose to hide your email when using Sign in with Apple, Apple provides us a private relay address instead. We never receive your Apple or Google password.
• Profile and multiplayer information: the username and character or avatar you choose, your friends list, game invitations, your online or in-match status, and the results of matches you play.
• Gameplay data: your progress, completed levels, scores, routes, and game settings.
• Purchase information: your purchase and subscription status and history, managed through RevenueCat. Where enabled, RevenueCat also receives ad impression, placement, interaction and revenue events associated with its customer identifier. Payments are processed by Apple on iOS and Google Play on Android; we do not receive your card or payment details.
• Device and usage data: app interactions and events, device model, operating system and app version, approximate region derived from your IP address, anonymous identifiers (such as a Firebase installation ID), and a push notification token if you allow notifications.
• Diagnostics: crash reports and performance data collected through Firebase Crashlytics.
• Advertising data: if ads are shown, Google AdMob may collect your device advertising identifier and ad interaction data.

We do not ask for your real name or request access to your phone contacts, photo library, health data, or precise location. You choose a username. Data processed by advertising and other providers is described separately below.

Google sign-in data

WikiSurf uses Google sign-in to authenticate you, associate your game account with your identity, restore your account and synchronize progress and social features. The intended Google permissions are basic identity and profile access (openid, email and profile). We do not request access to Gmail messages, Google Drive files, your Google contacts, calendar or other private Google content.

Supabase Auth processes the sign-in response and stores the account identity and any supplied profile metadata. WikiSurf and its providers use an internal customer or account identifier for game records, security, purchases and measurement. We do not sell Google account information or use your Google email, name or profile picture to personalize advertisements. Google account information is not used to train AI models.

We handle information obtained through Google services in accordance with the Google API Services User Data Policy, including its Limited Use requirements. You can revoke Google access in your Google Account connections settings. Revoking access does not by itself delete your WikiSurf account; use the deletion options below.

2. How We Use Your Information

• To create and manage your account and to provide the game, including multiplayer and friends features.
• To save and sync your progress.
• To process purchases and restore them.
• To understand how the game is used, improve it, and fix crashes and bugs.
• To send notifications you have allowed, such as game invitations.
• To show ads, where ads are offered.
• To keep the service secure and to prevent abuse and fraud.

3. Service Providers

We use the following third-party services, which process data on our behalf or under their own privacy policies: Supabase (account, database, and multiplayer backend), Google Firebase (Analytics, Crashlytics, and Cloud Messaging), RevenueCat (purchase status and ad monetization measurement), Google AdMob and configured mediation partners, including AppLovin and Unity Ads (advertising), Apple and Google (sign-in, purchases and distribution), and Cloudflare (website hosting, delivery and security). Our Supabase backend is currently hosted in the United States. Other service providers may process data in additional countries. Their independent privacy notices are available from Supabase, Google, RevenueCat, AppLovin, Unity, Cloudflare and Apple.

4. How We Share Information

We do not sell your personal information. Other players can see your username, avatar, and online status when you use multiplayer or friends features. We share information with the service providers listed above only as needed to operate the game, and we may disclose information when required by law.

5. Advertising and Tracking

On iOS, ads may be personalized and your activity may be used for tracking only if you allow it in the App Tracking Transparency prompt. If you decline, we do not use the iOS tracking permission you declined. Advertising choices may also depend on the consent options available in your region. You can change this at any time in Settings > Privacy & Security > Tracking.

On Android, advertising identifiers and ad personalization can be managed in your device’s advertising settings; names and availability vary by OS version. Where required, the app provides advertising consent and privacy choices. You may decline push notifications and continue using the game.

6. Data Retention and Deletion

We keep your information while your account is active. You can delete your account and its associated data from the account section in the app. Our account deletion page explains the in-app and email options. Deletion of your active game account is permanent and cannot be undone. Necessary purchase, legal, security or provider backup records may be retained under applicable requirements and provider retention processes. If you cannot access the app, you can also request deletion by emailing [email protected] from the email address linked to your account. After deletion we remove or anonymize your data, except for records we must keep for legal or accounting reasons, such as purchase records.

7. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us using the details below.

8. Children

WikiSurf is not directed to children under 13 (or under 16 in the European Economic Area), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Security

We use reasonable technical measures to protect your information, including encrypted connections. No method of transmission or storage is completely secure.

10. Third-Party Content & Web Browsing

WikiSurf presents public Wikipedia content in an interactive game format. Browsing activities within the embedded view interact directly with Wikipedia servers under Wikipedia's standard network protocols.

11. Disclaimer & Trademark Notice

WikiSurf is an independent game and is not affiliated with, endorsed by, or associated with Wikipedia or the Wikimedia Foundation. Wikipedia article text is provided by its contributors under the applicable Creative Commons Attribution-ShareAlike terms. Images and other media may have different licenses, identified on their source pages.

Website visits and shared links

Cloudflare processes network information such as IP addresses and request metadata to deliver and secure this static website. The site saves your optional appearance preference in local browser storage. The pages do not create game accounts, look up private friend information, or send friend requests themselves. Public invitation URLs contain a shareable friend code. Opening the app passes that destination to WikiSurf; game actions still require sign-in and user confirmation.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected] or via wikisurf.app.