About this notice
This notice covers the MOSSWARD game and playmossward.com, operated by Khanh BQ. Use the support form on this website for privacy questions or requests. This version was updated on 1 October 2026.
Your offline garden
Campaign progress, settings, hint balances and local play history are saved on your device. Playing the offline campaign does not require an online identity. Deleting the app may remove its local data; make a backup first if you want to keep it. We also save your optional advertising age band on the device: under 13, 13–17, 18 or older, or unspecified. We do not ask for a birthdate or exact age, and do not send this choice to the MOSSWARD server. You can change it in Settings. Players under 18 or with no age choice can continue playing without ad requests.
When you go online
The Arena service stores an account identifier, a generated public alias, credential hashes, recovery confirmation, verified results, ratings, room membership and match records. It processes submitted moves to verify a valid solution. Your public alias and eligible scores can appear on leaderboards; your recovery code and access token are not published.
Website and support
The website serves its fonts and artwork directly. The support form collects your email, category and message so we can investigate and reply. The website uses essential session and security cookies. Our hosting provider and Cloudflare process IP addresses, request times and technical network information for delivery, security and abuse prevention. Do not send secrets or sensitive information in a support request.
Advertising and analytics
Ads can be requested only after you select the age band 18 or older. The game uses Google AdMob for optional rewarded ads (3 hints when a reward is earned) and occasional full-screen ads between campaign levels, subject to play and frequency limits. Ads are requested in non-personalized mode, and publisher first-party ID is disabled. This does not stop all data collection. Google’s Mobile Ads SDK may collect and share your IP address (which can indicate an approximate location), device/app identifiers, ad views and app/ad interactions, and crash/performance diagnostics to deliver and measure ads, prevent fraud and improve service performance. We do not add a separate app analytics service. This website has no ads or third-party analytics.
Keeping and deleting data
Online account information is kept while the identity is active. Use Delete account in the Arena to remove that identity and its linked online results. Local campaign data stays on your device until you reset it or delete the app. Support requests are removed after 90 days. Inactive match records are retained for up to 30 days and daily results for up to 90 days. A match involving a deleted account may retain an anonymised outcome for the other player. Site access and application logs are retained for 7 days. Access-restricted daily database backups are retained for up to 7 days, so deleted account data may remain in restricted backups until those backups expire. Ask through support about access, correction or deletion.
Security and service providers
The service uses encrypted HTTPS connections and stores credential hashes rather than raw server access secrets. Hosting providers process service data to operate the website and game backend. No system can promise absolute security; keep your recovery code private.
Children and changes
MOSSWARD is intended for players aged 13 and older and is not directed to children under 13. Please do not submit a child’s personal information through the support form. If you believe such information was submitted, contact support so it can be reviewed and removed where appropriate. Material changes to data use will be reflected in this notice and, where required, presented in the app.
Your advertising choices
Before requesting ads, the app uses Google’s User Messaging Platform to check consent status and show a privacy message where required. Where available, reopen the ad privacy control in Settings to review or change your choices. Non-personalized ads can still use identifiers or storage for frequency limits and reporting, and can require consent. When consent status does not permit ad requests, the app does not request ads; campaign play remains available. Google handles ad data under its own privacy and retention policies. Deleting a MOSSWARD online account does not itself delete data held separately by Google. See Google’s privacy policy and controls below.