Privacy Policy
Last updated: 2026-10-10
Who we are
The Wiki Game is made by Yoav Franko. It is available as an iPhone app, an Android app and a website at thewikigame.yfranko.com. This policy explains what information the game collects, why, and the choices you have.
Your game account
When you first open the game, our server creates a game account for you automatically, with a random guest name. You do not need to give a name, an email address or a password to play.
Our server stores what the game needs to work: your guest name (or the username you choose), points, level, Journey and daily challenge results, daily streak, your collection of articles, friends and challenges, and basic technical details such as the app version, the operating system version, the phone model, a country code and the IP address used to sign up and last connect (used for leaderboards by country and to prevent abuse).
Your guest name or username, country and scores appear on public leaderboards. Guest names are random and do not identify you.
Some things stay only on your device, such as your keys, your settings and your language.
Team races
When you play a team race, the name you enter for the race and your results (clicks and time) are shown to the other players in that race. The race, with these names and results, is deleted automatically 6 hours after it was last used. Team races earn no points and are not part of the public leaderboards.
Saving your progress with Google or Apple (optional)
In Settings you can choose to save your progress with a Google account or with Sign in with Apple, so you can continue on another device or in the browser. If you do, the sign-in is handled by Google or Apple through Google Firebase Authentication, and we receive and store your Google or Apple account ID and the email address it shares with us (Apple may give a private relay address instead of your real one). We use them only to sign you back in to your game account and to show you which account is linked. We never receive your Google or Apple password.
Firebase Authentication creates a short-lived sign-in record that the app deletes immediately, so Firebase Authentication keeps no record of you. You can remove a linked Google or Apple account at any time in Settings.
Purchases
Purchases are made through the App Store or Google Play, and we use RevenueCat to check what you bought. We do not receive your payment details.
Analytics and advertising
We use Google Analytics for Firebase to understand how the game is used, for example which screens are opened and how many games are won.
The apps show ads from Google AdMob (the website shows no ads). AdMob may use your device's advertising ID, your IP address and approximate location to show and measure ads. In the European Economic Area, the United Kingdom and Switzerland, the app asks for your consent through Google's consent form before ads can be personalized. On iPhone, the app asks for permission before your advertising identifier may be used for tracking, and you can decline. You can also reset or limit your advertising ID in your device settings. See how Google uses information from apps that use its services: policies.google.com/technologies/partner-sites.
The website and cookies
The website uses one essential cookie that keeps your game session, so you stay signed in to your game account. It is HttpOnly and is used for nothing else.
The website also uses Google Analytics. For visitors in the European Union, the EEA, the United Kingdom and Switzerland, analytics runs without storing cookies. The site is served through Cloudflare, which protects it and counts visits without cookies.
Wikipedia
The game shows articles from Wikipedia, which your device loads from Wikipedia directly. The Wikimedia Foundation's privacy policy applies to those requests. The Wiki Game is not affiliated with or endorsed by the Wikimedia Foundation.
Service providers
Besides Google (Firebase, Analytics, AdMob, Google Play), Apple (App Store, Sign in with Apple), RevenueCat, Cloudflare and Wikipedia, our server runs on Heroku and stores game accounts in MongoDB Atlas. These providers process data only to run the service for us. We do not sell your information.
Where your information is stored
Our server runs on Heroku in the United States, and game accounts are stored in MongoDB Atlas. If you play from outside the United States, your information is transferred there. Our providers protect such transfers with standard safeguards, such as the European Commission's Standard Contractual Clauses.
How long we keep your information
We keep your game account and its data for as long as the account exists, so you can come back to your progress at any time. When you delete your account, it is removed from our database immediately. Technical server logs are kept only for a short time.
Legal bases (European Economic Area and United Kingdom)
We use your information to provide the game you asked for: your account, progress, leaderboards and, if you choose, signing in with Google or Apple (performance of a contract). We use technical details and analytics to keep the game secure, prevent cheating and abuse, and improve it (our legitimate interests). Personalized ads and, where required, analytics cookies on the website are based on your consent, which you can withdraw at any time.
Your rights
You can access, correct, export or delete your information, object to or restrict how we use it, and withdraw your consent at any time. You can delete your account yourself in Settings; for anything else, email [email protected] and we will reply within 30 days. If you live in the European Economic Area or the United Kingdom, you can also complain to your local data protection authority.
Deleting your account
In the apps and on the website, Settings, Delete account deletes your game account and its data from our server: your progress, your daily results and leaderboard entries, your name on best paths, your place in other players' friend lists, and any linked Google or Apple account. On iPhone, if you saved with Apple, the game's access to your Apple account is also revoked. You can also ask us to delete your account by email; see thewikigame.yfranko.com/delete-account.
Children
The game is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.
Security
Connections to our server are encrypted, and website sessions use a secure cookie that scripts cannot read. No method of storage or transmission is completely secure, but we work to protect your information.
Changes and contact
We may update this policy; the date below shows the latest version. Questions or requests: [email protected].