Forbidden!

Privacy Policy

Last updated: 2026-08-16

Forbidden! is a party word game. Most of it runs entirely on your device. When you play Online with friends, and when the app crashes, a limited amount of information leaves your device. This page explains exactly what, and why.

We don't sell your data, and we don't use it to track you across other companies' apps or websites.

What stays on your device

Your settings are saved on your device using Apple's standard storage and are never sent to us:

• Round length, number of passes, and whether the forbidden-word penalty is on
• Sound and haptics
• App language, card language, and light/dark appearance
• Team and player names you type in Team mode
• Whether you have seen the tutorial and the card-language tip
• Which word-pack version you have downloaded

Deleting the app deletes all of it.

Online play — only if you use it

Online play is optional. If you never open it, nothing in this section happens.

When you create or join a room, this is shared with our backend and with the other players in your room:

• The display name you type. You can use a nickname — it doesn't have to be your real name.
• A random player ID, created on your device the first time you open Online.
• The room code, who is in the room, and which team they are on.
• Game state: the current card and its forbidden words, whose turn it is, scores, and turn timing.
• The language the host is playing cards in.

About that player ID: it is a random ID generated on your device and stored there. It is not an account. There is no sign-up, no password, no email address, and no user record on our servers. It exists only so players in the same room can be told apart.

Rooms are temporary and are usually deleted within about a day of going idle. If you want a room deleted sooner, email us with the room code.

Crash reports and app configuration

We use two Google Firebase services:

• Crashlytics — when the app crashes, it sends a crash report: what the app was doing when it stopped, your device model, iOS version, app version, and an anonymous per-install identifier. It is not connected to your name or your online player ID, and it is not used for advertising.
• Remote Config — the app checks with Google for settings that let us turn features on or off without shipping an update. This sends an anonymous per-install identifier.

Neither is used to track you.

Advertising

Forbidden! includes advertising: occasional full-screen ads between rounds, provided by Google AdMob. To show and measure them, AdMob receives a device identifier, approximate location (from your IP address), and information about how you interacted with the ad.

Because Forbidden! is rated 4+ and played by children, we ask Google to treat our traffic as child-directed. That means the ads you see are not personalised: they are not based on a profile of you or your interests, and we do not ask for permission to track you across other apps and websites, because we do not do it.

Kid Mode never shows ads. That is built into the app, not a setting that could be switched.

Google's privacy policy covers what it does with this data: policies.google.com/privacy

What we never collect

• Your contacts, photos, microphone, or camera
• Your precise location
• Your email address, phone number, or home address
• Health, fitness, or financial data
• Your payment details — tips go through Apple, and we never see your card
• Your browsing or search history

Children

Forbidden! is rated 4+ and made for families. We don't ask children for personal information. The only place anyone can type personal information is the online display name, and we suggest using a nickname there.

If you believe a child has entered personal information through Online play, email us and we will delete it.

Your choices

• Don't use Online play, and nothing leaves your device for it.
• Use a nickname instead of your real name.
• Delete the app to remove everything stored on your device.
• Email us to have a room deleted.

Services we use

• Google Firebase (Crashlytics, Remote Config) — firebase.google.com/support/privacy
• Supabase — our own backend for online play
• Apple — the App Store and, if you leave a tip, Apple's payment system

Changes to this policy

If this policy changes, we will update the "Last updated" date above and post the changes on this page.

Contact

Questions about this privacy policy: yasin.kbas12@gmail.com