Widget Pro Privacy Policy

1. Data Controller and Scope

1.1. This Privacy Policy explains how Widget Pro processes personal data when you use our website and app.

1.2. Widget Pro acts as the data controller for the processing activities described in this policy, except where a third party acts as an independent controller for its own services.

2. Categories of Data We Process

2.1. We do not require your real-world name, email address, or phone number for normal use of the app. If you choose a public nickname, you should avoid including information that directly identifies you.

2.2. Microsoft login and community profile: if you sign in via Microsoft, we store a technical account identifier (user_id), a public nickname you choose, and security records needed to maintain your Widget Pro session. We do not store sensitive personal data from your Microsoft account.

2.3. Leaderboards and challenges: when you participate in a ranked game, we may store your public nickname, game result, ranking, challenge identifier, gameplay validation data, and timestamps. Your Microsoft identifier and email address are not displayed publicly.

2.4. In-app purchases: purchases may be completed through Microsoft Store or PayPal. Payment card and other sensitive payment details are processed by those payment providers and are not stored by Widget Pro.

2.5. Website analytics: we use Google Analytics on the website to understand traffic and usage patterns.

2.6. App analytics and diagnostics: we use Microsoft AppCenter Analytics, AppCenter Crash Diagnostics, and our own aggregated app statistics that do not contain personal user data.

3. Purposes and Legal Bases (GDPR Article 6)

3.1. We process technical, authentication, purchase-status, analytics, and diagnostics data to provide app features, maintain security and reliability, process entitlements, fix bugs, and improve user experience. Legal basis: legitimate interests (GDPR Article 6(1)(f)).

3.2. Where required by local law, we request consent before using non-essential technologies (for example certain analytics or advertising technologies). Legal basis: consent (GDPR Article 6(1)(a)). You may withdraw consent at any time.

3.3. Where processing is necessary to provide requested paid features or account functionality, the legal basis may also be performance of a contract (GDPR Article 6(1)(b)).

4. Data Sharing and Processors

4.1. We do not sell personal data and we do not share data with third parties for our own direct marketing.

4.2. Relevant data may be processed by service providers strictly for their service purpose, including Microsoft (login, AppCenter, Store payments), PayPal (payments), and Google Analytics (website analytics), under their applicable terms and privacy notices.

5. Monetization

All or partial advertising on this Website or App is managed by Playwire LLC. If Playwire publisher advertising services are used, Playwire LLC may collect and use certain aggregated and anonymized data for advertising purposes. To learn more about the types of data collected, how data is used and your choices as a user, please visit https://www.playwire.com/privacy-policy.

6. International Data Transfers and US Storage

6.1. Support, analytics, diagnostics, authentication, and purchase-related technical records may be stored and processed on infrastructure located in the United States (USA).

6.2. Some service providers may process data outside the European Economic Area (EEA). Where this happens, we rely on appropriate safeguards required by GDPR, such as adequacy decisions or Standard Contractual Clauses.

7. Data Retention

7.1. We keep data only as long as necessary for the purposes described in this policy, then delete or anonymize it unless a longer retention period is legally required.

7.2. Authentication identifiers, public profile details, leaderboard records, and purchase-status records are retained for as long as needed to provide account, competition, and entitlement functionality, and for a reasonable period thereafter for fraud prevention, dispute handling, and legal compliance.

8. Data Security

8.1. We apply appropriate technical and organizational measures to protect data against unauthorized access, alteration, disclosure, or destruction.

9. Your GDPR Rights

9.1. Subject to applicable law, you have the right to access, rectify, erase, restrict processing, object to processing, and data portability.

9.2. If processing is based on consent, you can withdraw consent at any time without affecting processing carried out before withdrawal.

9.3. You also have the right to lodge a complaint with your local supervisory authority in the EU/EEA.

10. Changes to This Policy

10.1. We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date above and, where appropriate, by additional notice.

11. Contact Information

11.1. For questions or requests related to this Privacy Policy or your data protection rights, please use our Contact Us page.