Privacy Policy

Last updated: 18 September 2026

This Privacy Policy explains how Polyglotle (“Site”, “Service”, “we”, “us”) — operated by an individual trading as Adaptica (“Operator”) — collects, uses, and protects information about you. It should be read together with our Terms and Conditions.

We are established in South Africa. Depending on where you access the Site from, the Protection of Personal Information Act (POPIA) and/or the EU General Data Protection Regulation (GDPR) may apply to our processing of your information; this policy is written to address both.

1. Information we collect

Account and profile information. When you sign in with Google or Facebook, we receive basic profile information from that provider (such as your name, email address, and avatar) to create and identify your Polyglotle account. We do not receive or store your password for these providers.

Gameplay information. We store the games you play, your guesses, results, streaks, saved preferences (such as preferred languages, word length, and timer settings), and related statistics, so that your progress persists across sessions and devices.

Region and pricing information. We infer your country from your network connection (via a header supplied by our network provider, Cloudflare) to show you the correct subscription pricing and currency. If you later subscribe, we keep your original pricing region on file so that travelling doesn't change the price shown to you.

Payment information. Subscription payments are handled by our payment processor, Paystack. We do not receive or store your card number, CVV, card expiry date, issuing bank, or any payment-authorization code or signature — that information is held only by Paystack. We store the limited identifiers needed to operate your subscription and correlate it with Paystack's own records: provider transaction, customer, and subscription identifiers, plan details, billing interval, invoice status, and the amounts, currency, and dates involved. If a payment ever needs to be investigated (for example, a dispute), Paystack's own transaction records — searchable and exportable on their platform — are the reference for anything about the payment instrument itself; we don't keep our own copy of that information.

We also receive payment webhook notifications from Paystack to keep subscription status up to date. The raw content of each notification is retained for 90 days and then deleted; a lightweight record of the notification (its type, and when it was received and processed) is kept afterward so we can confirm a notification was received, without keeping its full content indefinitely.

Content you submit. If you submit a problem report or other feedback, we store what you submit (including any free-text description) to investigate and act on it.

Diagnostic and error information. We use a technical monitoring tool (Sentry) to help us find and fix problems with the Site. This tool automatically captures: diagnostic information when the Site encounters an unexpected error (such as a stack trace and the page or endpoint involved); performance information about how requests move through the Site (such as timing and the endpoint called); technical application log messages; and device/browser type. We configure this tool not to send it your account identifiers or your IP address, and this information is only ever sent from our live, production Site — not from our internal testing or development environments.

Cookies. We use a first-party session cookie to keep you signed in between visits. We do not currently use third-party advertising or analytics cookies; if that changes, this policy will be updated before any such cookies are set.

We do not collect payment card numbers, government identity numbers, or (as of this writing) precise location data — only the country-level signal described above.

2. How we use your information

We use the information above to:

create and maintain your account and let you sign in;
run the game, save your progress, streaks, and preferences;
determine and honour subscription pricing for your region;
process, activate, renew, and manage Premium subscriptions;
respond to problem reports and improve the Service;
detect and prevent fraud, abuse, and payment disputes;
comply with legal and tax obligations related to payments.

3. Who we share information with

We share information with the following categories of third-party service providers, only as needed for them to provide their service to us:

Google / Facebook — to authenticate your sign-in.
Paystack — to process subscription payments and manage billing.
Cloudflare — to deliver the Site and infer your region for pricing.
Sentry — to detect and diagnose technical errors in the Site, as described in Section 1. Sentry stores this data in its EU data region.
Our hosting/infrastructure providers — to run and store the application and its database.

We do not sell your personal information. We do not share your information with third parties for their own marketing purposes.

We may disclose information where required by law, to enforce our Terms, or to protect the rights, property, or safety of the Operator, our users, or others.

4. International transfers

Because we use providers such as Google, Facebook, Paystack, Cloudflare, and Sentry, your information may be processed in countries other than the one you live in, including outside South Africa or the European Economic Area. Where this occurs, we rely on the safeguards those providers make available (such as standard contractual clauses or equivalent mechanisms) to protect your information. Where a provider lets us choose a storage region, we choose the option that keeps your information as close to the European Economic Area as practical — for example, we have configured Sentry to store diagnostic data in its EU region rather than its US region.

5. Data retention

We keep account and gameplay data for as long as your account is active.

Financial and subscription records needed for financial and tax record-keeping — transaction and subscription references, plan details, amounts, currency, dates, and your email address — are retained for 7 years from when they are created, and continue to be retained for that period even if you delete your account, since we are required or permitted to keep them for that purpose. Raw payment webhook notifications are retained for 90 days and then deleted, as described in Section 1.

These 90-day and 7-year periods are configurable defaults we have reviewed and adopted as appropriate for our obligations; we may adjust them from time to time in line with legal or accounting requirements, and will update this notice if we do.

When you delete your account (see Section 6), we delete or anonymise your personal data, except where we are required or permitted to retain certain records (for example, the financial records described above) for the period noted.

6. Your rights

Subject to applicable law (POPIA and/or GDPR, depending on where you are), you have the right to:

access the personal information we hold about you;
correct inaccurate information (via your account preferences, where applicable);
request deletion of your personal information;
object to or request that we restrict certain processing;
lodge a complaint with your local data protection authority (in South Africa, the Information Regulator; in the EU, your national supervisory authority).

You can exercise the deletion right yourself at any time from your account settings, or by emailing [email protected]. Account deletion is permanent. For any other request, contact us at the same address and we will respond within a reasonable time.

7. Children's privacy

The Site is not directed at, and we do not knowingly collect information from, anyone under 16 years old (see our Terms and Conditions). If you believe a child under 16 has created an account or provided us with personal information, please contact us at [email protected] so we can delete it.

8. Security

We take reasonable technical and organisational measures to protect your information, including not storing raw card or payment-instrument details ourselves and verifying the authenticity of payment notifications before acting on them. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify active users (for example, via an in-app notice) before the changes take effect.

10. Contact

Questions about this Privacy Policy, or requests relating to your personal information, can be sent to [email protected].