WC Games: Whac-A-Poo

Privacy & Fair Play · Nomenas Digital LLC
Version 3 · 3 November 2026

Your game, your choice

You can play without a public nickname or Google account. Your settings, local scores, avatar and achievement progress stay on your phone. Choosing to share a score opens Android’s sharing interface; you select the destination.

World leaderboard

At the start of an ordinary solo round, the app requests a validation ticket using a random installation identifier and secret, even if you have not chosen a public nickname. This supports validating that round if you later choose to join the leaderboard. An unnamed ticket alone does not publish a score. Choosing Keep local in the publishing agreement prevents public nickname and score publication; it does not disable this ticket request for ordinary solo rounds. You can also play offline.

When you create or edit a World profile, saving your nickname sends the proposed nickname and built-in avatar to the service to check and reserve that name. The app confirms the World profile only after the service accepts it. If an existing profile needs verification, you can choose PLAY LOCAL in the pre-round profile screen instead: that round does not request a World validation ticket or submit its result to World. This choice does not delete an existing public profile; use the deletion option below for that.

Opening World requests ranking information with the random player identifier so the app can show your position. Profile reservation, ranking requests, reports, score validation and deletion use HTTPS.

If you choose to join the world leaderboard, the app also sends your nickname, selected built-in avatar, score, gameplay counters and timing needed to validate a run. Your nickname, avatar, best score and rank are public. Your player identifier is also included in leaderboard responses so the app can identify, hide and report a player. Do not put your real name or contact details in a nickname.

The service stores a hash of the installation’s authentication secret and hashes of run tickets. These support score validation, retry handling and abuse prevention. Secret values are not included in public leaderboard results. A network connection exposes connection information such as your IP address to the hosting provider. The game service uses an in-memory IP rate limiter and does not write request bodies, authorization headers or request URLs to its application logs.

We use leaderboard data to provide rankings and prevent abuse. We use player reports to review inappropriate nicknames and conduct. We do not sell leaderboard data. Our hosting and backup providers process data to operate the service. The service is hosted in the Czech Republic; the operator is Nomenas Digital LLC. Requests you send by email are also processed by our email provider.

Local Bluetooth multiplayer

Bluetooth duel connects two nearby phones that you pair in Android settings. On Android 12 and later, the app asks for Nearby devices permission when you choose Bluetooth play. It reads the names and identifiers of already-paired devices locally so you can select your opponent. It does not scan for location or use internet matchmaking.

The paired phones exchange match settings, readiness, player actions, game state and results over a secure Bluetooth connection. The game does not send these Bluetooth match results to the World leaderboard or our game service. Solo duel practice also stays on the phone. Using the separate World feature still makes the requests described above.

Optional daily reminders

Daily reminders are off by default. If you enable them, the app stores your chosen local time and reminder preferences on the phone and asks for Android notification permission where required. Android schedules a local reminder with a built-in joke or fact, at most once per day; delivery time can vary with battery-saving settings. This feature uses no remote push service and does not send your reminder schedule or notification interactions to our service. Turn reminders off in the game settings or Android notification settings.

Retention

• Only the strongest 10,000 human best-score records are retained in the public ranking, at most one per player. Named profiles remain until deletion or moderation; dropping out of the top 10,000 does not itself erase a profile.
• Run tickets expire after 30 minutes. Completed retry records are retained for up to 24 hours and removed during service cleanup, with additional per-player and global storage limits. Unnamed identities without runs, reports or scores are eligible for cleanup after seven days.
• Reports contain the reporter and target identifiers, a predefined reason and time. They are deduplicated, capped at 10,000 and eligible for cleanup after 90 days. Cleanup runs as the service handles requests; an idle service may retain eligible records until its next cleanup.
• Local data remains until removed through Android app storage controls or uninstall. Removing app data also removes the device credentials used to manage that leaderboard identity.
• Encrypted operational backups can contain earlier data after deletion from the live database. Local automatic snapshots keep two rotating generations. Encrypted off-site archives follow a rotation of 14 daily, 8 weekly and 12 monthly archives; a particular archive may be retained in more than one rotation category. Separate manual deployment and recovery copies currently require manual removal and have no automatic expiry. These copies are restricted to recovery access, not ordinary publication. Contact us about removal from those copies. A restore must be checked against deletion requests before recovered data is made public again.
• Normal WC Games HTTP access logging is disabled. Technical error and service-operation records follow the server's rotation and capacity rules. Nginx retains up to 14 non-empty error-log rotations; the system journal uses capacity limits rather than a fixed number of days. These operational logs are not intended to record player identifiers, request bodies or authentication secrets.

Google services and advertising

From version 0.7.13, the game can display occasional full-screen Unity Ads between completed solo rounds, when returning from the result to the main menu. There are no banners, ads during gameplay, startup or resume, or ads in Bluetooth duel and Duel practice. At most one display opportunity is reserved per session; a new session requires at least 30 minutes in the background. Ads do not change scores or give gameplay rewards. Earlier releases through 0.7.12 keep advertising disabled.

Basic, non-personalized advertising is the default. The app sends restrictive consent, opt-out and non-behavioral signals to Unity; users of unknown age receive the protective non-behavioral treatment for mixed audiences. This still involves technical data processing, rather than no data collection. There is no automatic advertising consent or age prompt on startup.

Unity Technologies and its advertising partners provide advertising. Unity may collect and share device and app information, network information including IP-derived approximate location, personal/device identifiers, ad views and interactions, diagnostics and purchase-history/ad-attribution events as described in its SDK disclosures. We do not offer in-app purchases or send purchase receipts to Unity. These data support ad delivery and measurement, analytics, app functionality, security and fraud prevention. Developer Data/Acquire Optimization is not enabled. The app does not request Advertising ID, Topics or Attribution permissions; other SDK identifiers can still be processed. Data is encrypted in transit.

Settings > Privacy & Fair Play > Advertising privacy offers an optional, initially unchecked “I'm 18 or older: personalized ads” preference. Enabling it permits Unity and its advertising partners to store/access device data and use device information, approximate location and ad activity to tailor and measure ads. The choice is stored on this phone for up to 180 days and can be switched off there at any time. Expired or invalid choices return to basic advertising without prompting; previously loaded ads are invalidated after a choice change. World leaderboard agreement and profile deletion are separate from advertising choices and Unity-held data.

Use the privacy icon on a Unity ad and Unity’s Game Player and App User Privacy Policy for advertising partners, retention, international transfers, access, objection, deletion and other privacy choices. You can also contact office@nomenasdigital.com about this integration. Google Play Games remains disabled: no Google sign-in or achievement upload is started. Local achievements work without a Google account. Google Mobile Ads is not included.

Unity advertising privacy, partners and data requests · Unity SDK data disclosures

Fair Play Rules

By choosing Agree & join in the app, you agree to these rules before publishing a nickname or score:

• Use a friendly nickname. No harassment, threats, hate, slurs, sexual content, personal/contact information or impersonation.
• Submit scores earned by normal play. Do not manipulate the service, upload fabricated results or misuse reports.
• We may reject or remove inappropriate nicknames and scores and restrict a player from publishing further content. Automated checks are a first layer; reports are reviewed in context.

On the World leaderboard, tap a human player’s row to Report a nickname or Hide player on this phone. Hiding takes effect locally and can be undone. BOT rows are clearly marked fictional house rivals, not real players. To appeal a moderation action or report an issue outside the app, contact office@nomenasdigital.com.

Delete your world profile or request data removal

Without the app: email office@nomenasdigital.com with the subject “WC Games data deletion”, your nickname and, if available, the player ID shown in the app’s Privacy screen. We may need additional information to verify ownership before changing or disclosing data. Never send your installation secret, run ticket or Google password. A nickname alone is not proof of ownership.

You can also ask about access, correction, deletion, objections and other privacy rights available under applicable law, or contact your local data protection authority. We will explain any necessary verification and any data that must be retained for a legitimate reason. We do not delete or manage your separate Google account or its Google-held data.