Privacy Policy

This policy explains what information is processed when you play WormAke (web: wormake.io and the Android app), why, and how you can control it.

WormAke is developed and operated by WormAke (“we”). Contact: support@wormake.io. Players in Türkiye can also read the KVKK notice (in Turkish).

1. Information we process

When you play as a guest:

• Device identifier: on first launch the game creates a random identifier and stores it on your device. It does not contain your name, phone number or any hardware ID of your device. Your progress is linked to it.
• Nickname: the name you enter in the game.
• Game data: level and experience points, best score, kill counts, play time, coin balance and coin transactions, skins and cosmetic items you own or earned, daily reward and quest status, VIP / Gold period.
• Session history: when the game was open (start and end time) and each game you played (start and end time, score, best rank), with the app type and version (web or Android). Used for support, fair play and abuse prevention. IP addresses are not stored in it.
• Connection and performance measurements (diagnostics): while you play, every half minute: frame rate, number of stuttering frames, latency (ping), intervals between data from the server and general device characteristics (phone model, operating system version, processor cores and memory, screen size and refresh rate), the game's memory use, the device's thermal state and battery temperature. These measurements are stored linked to your account. Used only to find and fix stutter and connection problems; not used for ads or marketing and not shared with anyone. IP addresses are not stored.
• Social data: your friend code, friend requests, your friends and blocked players.
• Player reports: when you report a player (offensive name / image or cheating): the reported player, the reason and the time; reports made about you.
• Private room chat: messages you write in private rooms (text, time sent, room), reports you make and reports about you, and any chat ban.
• Your designs: designs you save in the skin designer, images you upload there and their review status.
• Live game input: your snake’s steering commands and position. These are processed in real time to run the game and are not stored.

If you make an in-app purchase (only in the Android app, through Google Play; signing in with Google is required to buy): the product you bought, the Google Play order number, the purchase token, and the purchase date and status. We never receive your card or payment details; Google Play takes and processes the payment.

Advertising: ads are shown through Google AdMob in the Android app and through Google’s game ads (AdSense) or AdinPlay in the web version. You can watch an ad to earn a reward (for example coins), and an ad may occasionally appear between games. VIP and Gold members see no ads. When an ad is shown, the ad network collects directly from your device: the advertising ID (Android Advertising ID, or cookies and similar identifiers on the web), IP address and the approximate location derived from it (city / region level; not GPS or precise location), device, browser and app information (model, operating system, language), ad interactions (impressions, clicks, views) and diagnostic and crash information of the ad SDK. This information goes to the ad network and does not reach our servers; we only record that a rewarded ad was watched and how many (for the daily limit).

If you sign in with Google, we also receive from Google: your Google account ID, email address, name and the address of your profile picture. We use these only to identify you, create your account, keep your progress across devices and find your account when handling support requests or rule violations; only the game's administrator can see your email address, and it is not used to send advertising or marketing messages. We never receive your password. Your email address is not shown to other players. Your profile picture is shown only to players on your friends list and to people you send a friend request to, so they can recognise you; if you have no in-game name, these people see your Google name.

What we do not collect: precise (GPS) location — the app has no location permission; only the ad network may derive an approximate location from your IP address as described above —, contacts, your photo library (only an image you choose yourself in the designer is uploaded), microphone or camera. Apart from the ads described above, the game uses no analytics or tracking tools; cookies in the web version belong only to the ad networks and depend on your consent. We do not track you across other apps or websites ourselves. If you use an ad blocker you can still play, but rewarded ads and their rewards are unavailable. There is no voice chat; text chat exists only in private rooms (see above).

2. Why we process it

• To provide the game: placing you in a room, running the game in real time, storing your progress, coins and skins.
• Accounts and sign-in: linking your progress to your account when you sign in with Google.
• Purchases: verifying with Google Play that a payment was really made, adding the product to your account, preventing the same purchase from being used twice and fraud, and handling support and refund requests.
• Social features: friends, private room invitations, private room chat, leaderboards.
• Security and fair play: preventing cheating, abuse and offensive nicknames, images or chat messages, reviewing chat reports, and banning players when necessary.
• Advertising: showing ads so the game can stay free, giving you the reward for a rewarded ad you watched, and applying the daily ad limit.
• Communication: answering your support requests.

For players in the EU/EEA, the legal basis is the performance of our agreement with you (providing the game) and our legitimate interest in keeping the game secure and fair. Personalised advertising is based on your consent. We do not sell your information, and we do not share information we hold (such as your name, email or game data) with ad networks.

Personalised ads and your consent: in the European Economic Area, the UK and Switzerland (and wherever else the law requires it) the app first asks for your consent to personalised ads through Google’s consent form; if you decline, only non-personalised ads are shown. A consent notice for ad cookies is also shown on the web. In these regions an “Ad privacy choices” button appears in the game’s Settings, where you can change your choice at any time. On Android you can delete or reset your advertising ID under Settings > Privacy > Ads. You can read how Google uses advertising data here. We mark ad requests so that users under the legal age of consent are not shown personalised ads.

3. What other players can see

• In the game and on leaderboards: your nickname, level and scores, and your snake’s look.
• Your friends: your nickname, level, friend code and whether you are online. Your friends can watch your game live while you play; the number of friends watching is shown to you in the game.
• Messages you write in private room chat are visible, with your nickname, to the players in that room. Our administrators see a reported message and the messages before it in order to review it.
• An image you upload in the designer becomes visible to other players only after it has been reviewed and approved; until then only you and the reviewing administrators can see it.

4. Where information is stored and who receives it

• Servers: the game servers and database are hosted by Hetzner Online GmbH in a data centre in Nuremberg, Germany. Hetzner stores the data only on our behalf.
• Google: when you sign in with Google, the sign-in is handled by Google and Google’s own privacy policy applies. Your profile picture is loaded directly from Google’s servers.
• Google Play: if you installed the app from Google Play, Google processes its own data as the app store. For in-app purchases Google Play is the seller and receives the payment. To verify a purchase we send Google the purchase token; to link the purchase to your account we give Google a one-way hash derived from your player ID, not your name or email address.
• AdinPlay (Venatus Media Ltd.): may be used instead of Google ads in the web version; processes ad data under its own privacy policy.
• Google AdMob / AdSense (Google Ireland Ltd. / Google LLC): serves ads in the Android app and on the web and processes the device and ad information described above under its own privacy policy. This information may be transferred outside the EU (to the USA).
• Legal requirements: where a court order or legal obligation requires it, only the requested information may be disclosed to the competent authorities.

All connections are encrypted (HTTPS / WSS).

5. How long we keep it

• Account and game data: until you delete your account.
• Purchase records: until you delete your account. Google Play keeps its own records (invoices, orders) under its own rules.
• Daily and weekly leaderboard records: 16 days.
• Session history: 90 days. Totals (play time, games played, best score) stay with your account.
• Connection and performance measurements: 30 days (deleted immediately if you delete your account).
• Player reports: may be kept after review to prevent repeated abuse; reports you made are deleted when you delete your account.
• Server logs (error and operational logs): briefly, a few weeks.
• Private room chat messages and reports: 30 days (also deleted within this period if you delete your account). Chat ban records: for the duration of the ban.
• If you were banned for breaking the rules, the record of that ban is kept after account deletion to prevent repeated abuse.

6. Deleting your account and data

In the game, open the “Account” screen, choose “Delete account” and confirm. You can also delete it on the web without the app: wormake.io/delete-account. Deletion takes place 14 days after your request; during that time you can sign in to the game with Google and tap “Cancel deletion” (signing in alone does not stop it). Deletion permanently removes the information received from Google, your progress, coins, skins, designs and uploaded images, your friend list and your purchase records. It cannot be undone. Purchased coins and any remaining VIP / Gold period are also deleted and are not refunded.

If you play as a guest, your information is linked only to the random identifier on your device. To have it deleted, write to support@wormake.io.

7. Your rights

Depending on the laws of your country (such as the GDPR in the EU or KVKK in Türkiye) you may have the right to access your information, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format. Write to support@wormake.io; we reply within 30 days at the latest. You also have the right to complain to the data protection authority in your country.

8. Children

WormAke is not directed at children under 13 and we do not knowingly collect personal information from children under 13. If the law in your country sets a higher age, play only with the permission of a parent or guardian if you are below that age. If you believe a child’s information has reached us, contact us and we will delete it.

9. Changes

We may update this policy as new features are added to the game. The current version is always on this page; we also announce significant changes in the game.

Last updated: October 2026 · Terms of Use · Türkçe