Wolim GamesPrivacy Policy
Last updated 13 November 2026
This policy covers the games published by Wolim Games (currently Lodestorm) on Android, iOS, desktop and the web, and the website games.wolim.io.
Summary
- Games against the computer and with friends on one device stay on your device.
- If you choose Try it, the game creates a guest account for you on our server: a random identifier with no name or email. Guests can't play online.
- Online play needs a Google sign-in. We then store your email address and name from Google, and your display name, friends, games and in-game chat. A guest account you had on that device joins your account.
- No ads, no tracking across apps or sites, and we never sell your data.
- You can delete your account at any time, and we delete your data within 30 days.
Who we are
- Controller
- Niklas Wintrén, a private individual
- Country
- Sweden
- Contact
- nik@wolim.io
Wolim Games is run by Niklas Wintrén as a private individual. He decides how and why your data is processed, so he is its controller under the EU General Data Protection Regulation (GDPR). In this policy "we" means him. Write to the contact address above with any privacy question or request.
What we collect
Guest account
Nothing is created until you choose Try it or sign in. Try it creates a guest account on our server: a random identifier, plus a session kept on your device so the game knows it is you. It holds no name, email or other contact details.
When you sign in with Google
Signing in on a device that has a guest account moves the guest's data into your account and deletes the guest. We keep a record that the guest identifier became your account. Google tells us your account identifier, email address, name and the link to your profile picture. We don't receive your password. We don't show your email address or Google name to other players.
When you play online
- Profile: the display name and colour you choose, your friend code, your rating, how many rated games you have played, and when you joined.
- Friends: the players you have added as friends.
- Games: each online game's setup, moves, result, turn timers and nudges, and who played in which seat.
- Chat: messages you send in a game.
- Notifications: if you allow them, a push token for your device and its platform, so we can tell you when it is your turn.
- Server logs: our database provider records requests, including your IP address, for security and troubleshooting.
On your device only
Your settings, games against the computer or on one device, puzzle progress and the app's debug log stay on your device. The debug log only leaves it if you choose Share log and send it to someone, for example us. It holds the app version, your device model and operating system, and recent app events.
What we don't collect
We don't collect your location, contacts, photos, payment details or advertising identifiers, and we don't use cookies. The games and this website contain no ads and no third-party trackers.
Why we use it
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Your account and online play: games, friends, chat, ratings | Guest identifier, sign-in details, profile, friends, games, chat | Contract: we need it to give you the game you asked for (Art. 6(1)(b)) |
| Telling you it is your turn | Push token | Your consent, given when you allow notifications. Withdraw it in your device settings at any time (Art. 6(1)(a)) |
| Keeping the service secure and working | Server logs | Legitimate interest in preventing abuse and fixing faults (Art. 6(1)(f)) |
| Answering you | What you send us | Legitimate interest in answering requests, or a legal obligation when you exercise your rights |
We don't use your data for advertising or profiling, and no decision about you is made by automated means alone. Your rating is calculated from your game results and shown to other players.
Who sees it
Other players see your display name, colour and rating. Players in a game with you also see your moves and the chat messages you send in that game. Your friend code is shown to whoever you share it with.
Service providers process data for us under data processing agreements, only on our instructions:
- Supabase: database, sign-in and server functions. Our data is stored in the EU (Frankfurt, Germany).
- Google: Google Sign-In, and Firebase Cloud Messaging to deliver notifications to Android devices.
- GitHub: hosts this website and the web version of our games. GitHub records visitors' IP addresses for security.
We don't sell or rent personal data and don't share it with anyone else, unless the law requires us to.
Transfers outside the EU
Our game data stays in the EU. Google and GitHub may process data in the United States. Those transfers rely on the EU–US Data Privacy Framework, under which these companies are certified, or on the European Commission's standard contractual clauses.
How long we keep it
- Account, profile, friends, games and chat: while you have an account. When you delete it, we delete them within 30 days.
- Inactive accounts: if you don't sign in for 24 months, we delete your account and its data.
- Record of a guest joining your account: until you delete your account.
- Push tokens: until your device stops accepting notifications or you delete your account.
- Server logs: a few days, and at most 90 days.
- Emails you send us: as long as we need them to handle your request, and at most 12 months after it is closed.
Games you played with others stay in their history after you leave. Your seat is unlinked from you and no longer shows your name.
Your rights
Under the GDPR you may ask us to:
- give you a copy of your data, also in a machine-readable form (access and portability);
- correct it (you can change your display name and colour in the app yourself);
- delete it;
- restrict or object to how we use it;
- withdraw consent you have given, without affecting what we did before.
Write to nik@wolim.io from the email address you sign in with, or, as a guest, include your friend code (shown in the game). We answer within one month. You may also complain to a data protection authority. In Sweden that is Integritetsskyddsmyndigheten (IMY, imy.se). You may also use the authority where you live.
Delete your account
Email nik@wolim.io with the subject "Delete my account", from the email address you sign in with. Include your friend code if you can; as a guest, the friend code is how we find your account. We confirm by email and delete your account within 30 days. This deletes your profile, friends, chat messages, push tokens and the games you created. Your seat in other players' games is unlinked from you.
To remove only what is on your device, uninstall the app, or clear this site's data in your browser for the web version.
Children
Online play and signing in are for people aged 16 and over. Younger players can play against the computer and on one device. Their guest account holds only a random identifier. If we learn that someone under 16 plays online or has signed in, we delete their account. If you think a child has given us data, tell us.
Security
All traffic between the games and our servers is encrypted (HTTPS). Database access rules limit each player to the data the game needs to show them. Only Niklas can access the data, and only when he needs to.
Analytics
We plan to add usage analytics, such as which game modes are played, to improve the games. Nothing of the kind is collected today. Before we start, we will update this policy, keep the data in the EU, and ask for your consent first.
Changes
If we change this policy, we publish the new version here with a new date. If a change affects how we use data you have already given us, we tell you in the game before it applies.