Privacy Policy

Effective date: 12 September 2026 · Last updated: 10 October 2026

This policy explains what the Spellnest game and website (“Spellnest”, the “Service”) do with information, and what they do not. The Service is operated by Aevest Studio, an independent developer based in Malaysia (“we”, “us”). Contact: hello@aevest.net. This policy covers the Spellnest website and the Spellnest app for Android.

This policy is written from the way the Service is actually built. There is no account system, no purchases, no analytics software of our own and no data brokers; our host counts page views for us, with no cookie and no identifier (section 5). On the website, the free game shows advertisements supplied by Google: section 3 says exactly what that means and what Google receives. The Android app shows none.

1. Information kept on your device

Spellnest uses your browser’s local storage, or in the Android app its own storage on your phone, to keep:

• your progress, for example levels cleared, chapters finished, the days you have played and your streak, your word bank, your clues and letters, a puzzle you left unfinished, and the money words you have collected with the date each one is next due for review;
• your settings: sound, music, vibration, theme, text size, and whether results sharing is on;
• small conveniences, such as which tips and menu notes you have already seen, and which cards you have already looked at;
• a random device token: a new one is made each day on your device, and it is used only to stop the same device counting twice on the shared board that day. Changing it daily reduces linking between days, but does not guarantee anonymity.

None of this is sent to us except the daily token, which goes only with the records in section 2. Start over in Options deletes your progress and that token; your settings stay. Clearing the site’s data in your browser or device settings deletes everything permanently, and it cannot be recovered.

2. Information sent to us: the shared board

Spellnest has one online game feature, the shared board. It is controlled by Share anonymous results in Options. The switch is on when you first play, and you can turn it off at any time. While it is off the game makes no board requests: no results, and not even a request for the week’s community total, which simply stops being shown. Loading the website still sends ordinary requests to our hosting provider.

While it is on, two small records may be sent:

• when you finish a daily puzzle: the day’s device token, the date, how long the puzzle took, and how many words it contained. Our server keeps only which of ten time ranges your time falls in, never the exact time;
• at most once a day, after you finish any puzzle: the day’s device token, the date, and how many money words you found, which is added to a community total shown on the menu.

We use these for one purpose: to tell you roughly where your daily time sits among everyone who played that day, and to run the weekly community goal. There is no name attached, nothing is shown to other players that could identify you, and the records expire automatically.

When a record is sent, your IP address is stored for about an hour, on its own, as the name of a counter that limits how many requests one address may make. It is not written into a result record or displayed to other players, and the counter expires automatically. Our hosting provider also processes ordinary request information such as IP address, browser type and time of request to deliver and protect the Service. Hosting logs are separate from the board records and their expiry periods below.

3. Advertisements

In the Android app there are none. The app carries the same game, with no advertising code inside it, so nothing in this section happens there and the app sends nothing to Google or to any advertiser. The rest of this section is about the website.

On the website, the free game shows advertisements through Google AdSense, using Google’s Ad Placement API for games. There are two places, and no others:

• a short full screen advertisement when you leave a finished chapter puzzle, at most four in a day and never less than ten minutes apart;
• an advertisement you choose to watch, offered only when you are stuck in a chapter puzzle with no letters left, in exchange for one letter.

There are never advertisements in the daily puzzle, on the menu, in the scam rounds, in the stories or in a review round.

Google is a third-party vendor that serves those advertisements. To do it, Google receives your IP address, the address of the page, and ordinary request information such as browser type and time of request, and it may set or read cookies and similar identifiers on your device. Google uses this to select and measure advertisements and to limit how often you see the same one. We do not receive this information and we cannot see it.

How Google uses information from sites that use its services is explained at policies.google.com/technologies/partner-sites.

Your choice. If you are in the European Economic Area, the United Kingdom or Switzerland, a window from Google asks before any personalised advertising happens, and you may refuse; advertisements still appear, chosen without that information. In some parts of the United States the same window offers an opt out. The window is shown once and remembered by your browser; to see it again, clear this site’s data in your browser settings. You can also turn off personalised advertising for your Google account at myadcenter.google.com, or use the industry opt out pages at optout.aboutads.info and youronlinechoices.eu.

We ask Google not to show advertising categories that would sit badly in a game about money words, but Google chooses the advertisements and we do not see them in advance. If one is wrong for this game, please tell us.

4. What we never do

• We do not sell or rent information to anyone.
• We embed no analytics or tracking software of our own, and the only third-party code in the game is Google’s advertising script described in section 3. Our host adds a page-count script of its own, described in section 5.
• We do not build profiles of players ourselves, and nothing you type, spell or collect is sent to an advertiser.
• We do not ask for an account, a login, an email address or a payment method.

5. Service providers

Spellnest is hosted on Cloudflare, which serves the game files and runs the small board service described in section 2. Cloudflare processes requests as our hosting provider. The fonts and artwork are self-hosted. The one other service the game loads is Google’s advertising script, described in section 3; see Google’s privacy policy. Cloudflare also adds a small page-count script at its edge (beacon.min.js): it sets no cookie, keeps no identifier for you, and tells us only totals, such as how many pages were opened, from which countries, in which browsers, and which sites linked to us. See Cloudflare’s privacy policy for its processing practices.

6. Children

Spellnest is made for teenagers and adults and is not directed to children under 13. It does not ask for a name, contact details or an account. Technical information is processed as described above. If you believe a child has provided personal information, please contact us so we can investigate and take appropriate action, including deletion where we can identify the information.

7. Your choices and your rights

• Stop board requests: turn off Share anonymous results in Options. It takes effect immediately. Website hosting requests still occur.
• Delete your progress: use Start over in Options, which also throws away the day’s device token. To delete everything, settings included, clear the site’s data in your browser settings. In the Android app, clearing the app’s storage or uninstalling it deletes everything.
• Change your advertising choices: see section 3. Refusing personalised advertising does not stop the game working; the advertisements are simply chosen without that information.
• Delete what the board holds: the records carry no name, account or contact details, and their token changes every day. This limits our ability to locate an individual’s records; it is not a guarantee of anonymity. Contact us about deletion and we will help where we can identify the records. Turning off Share anonymous results stops further board requests, and board records expire on the timetable in section 9.

Depending on where you live, you may have rights to access, correct, delete or restrict the processing of personal information, and to complain to a data protection authority. Write to us and we will help.

8. Where information is processed

Our host runs a global network, so a request may be handled by a server in a country other than yours. The board records described in section 2 carry no name and no contact details.

9. How long we keep things

Device storage stays until you clear it. The board stores the following records with automatic expiry:

• records filed under a day’s device token: 3 days;
• the daily chart of how long puzzles took, which holds counts only: 7 days;
• the weekly community total and its target, which hold counts only: about 60 days after the week’s last update;
• the request counter named after an IP address: about an hour after your last request.

10. Changes

If this policy changes, the date at the top changes with it, and the current version always lives at this address. Meaningful changes will also be mentioned in the game.

11. Contact

Aevest Studio, hello@aevest.net. We answer questions about this policy from real people, not a form.