Last updated: September 11, 2026
marsRocketWords ("we", "us", "our") is an online word transformation game available at https://rocketwords.matthewaroberts.com. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.
For privacy-related inquiries, contact us at: privacy@marsrocketwords.game
When you register, we collect:
When you play, we store:
When you purchase points via PayPal:
We do not receive or store your credit card number, bank account details, or any other payment instrument. All payment processing is handled by PayPal.
| Purpose | Legal Basis (GDPR) |
|---|---|
| Running your account and the game | Contract performance |
| Processing point purchases | Contract performance |
| Displaying leaderboards (username + stats) | Legitimate interest |
| Preventing fraud and abuse (rate limiting) | Legitimate interest |
| Improving the game (error logs) | Legitimate interest |
| Complying with legal obligations | Legal obligation |
We do not use your data for advertising, sell it to third parties, or use it for any automated decision-making that produces legal effects.
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
marsRocketWords_sessionId |
Necessary | Keeps you logged in. Links your browser to your server-side session (user ID, CSRF token, game state). | 1 hour of inactivity, or until logout |
| PayPal SDK cookies | Functional | Set by the PayPal JavaScript SDK when you visit the Store. Used by PayPal for fraud prevention and checkout flow. Only loaded with your consent. | Set by PayPal — see PayPal's Privacy Policy |
We do not use advertising cookies, tracking pixels, or analytics services (such as Google Analytics).
You can manage your cookie preferences at any time using the Cookie Settings link in the footer.
We use PayPal to process point purchases. When you complete a purchase, your payment information is submitted directly to PayPal. We receive only a transaction ID and status confirmation. PayPal's privacy practices are governed by the PayPal Privacy Statement.
Our servers are hosted by IONOS. IONOS may process server logs containing IP addresses as part of standard hosting operations. IONOS is bound by EU data protection laws.
We do not use advertising networks, social login providers, analytics platforms, or any other third-party data processors beyond those listed above.
| Data Type | Retention Period |
|---|---|
| Account data (username, email, name, password hash) | Until you delete your account |
| Game history and move records | Until you delete your account |
| Purchase records | 7 years (legal/accounting requirement) |
| Server / error logs | 30 days, then automatically deleted |
| Rate-limit data (IP-based) | 1 minute (sliding window, stored in temporary files) |
Depending on where you live, you have specific rights over your personal data.
Access, rectification, erasure ("right to be forgotten"), restriction, portability, and objection to processing. Right to lodge a complaint with your national Data Protection Authority.
Same rights as EU GDPR. Contact the ICO at ico.org.uk if you wish to complain.
Right to know what data we collect, right to delete, right to opt out of sale (we do not sell personal data). We do not discriminate against users who exercise these rights.
Right to access and correct personal information held about you. Right to withdraw consent (where consent is the basis for processing).
Right to access, correction, deletion, portability, and information about sharing. Right to revoke consent.
Regardless of location, you can request deletion of your account and associated personal data by contacting us.
To exercise any of these rights, email us at privacy@marsrocketwords.game. We will respond within 30 days. We may need to verify your identity before processing your request.
marsRocketWords is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has created an account, please contact us and we will promptly delete the account and associated data.
Users in the EU under the age of 16 (or the applicable age of digital consent in their country) should obtain parental consent before registering.
We take reasonable technical and organisational measures to protect your data, including:
No system is 100% secure. In the event of a data breach that affects your rights, we will notify affected users and relevant authorities as required by law.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. For significant changes, we will notify users via a notice on the site. Continued use of marsRocketWords after a policy update constitutes acceptance of the updated policy.