Last Updated: July 17, 2026
This Data Processing page explains how Lexinum ("we," "us," "our") collects, processes, stores, and protects your personal data. It supplements our Privacy Policy and is intended to help you understand our data processing activities in detail, particularly in relation to the General Data Protection Regulation (GDPR) and other applicable data protection laws.
Lexinum is a multi-language word and number games application operated by bindortyuzyirmibir. For the purposes of GDPR, we act as the Data Controller for the personal data we collect through the Lexinum app and website.
This page covers personal data processed through:
| Category | Data Elements | Source |
|---|---|---|
| Account Data | Email address, display name, authentication provider ID, account creation date | Provided by user during registration or sign-in |
| Profile Data | Profile picture, language preference, theme preference | Provided by user or derived from device settings |
| Gameplay Data | Game results, guesses, scores, timestamps, game mode, dictionary language | Generated during app usage |
| Multiplayer Data | Match records, opponent user IDs, move history, match outcomes | Generated during multiplayer gameplay |
| Social Data | Friend connections, friend requests, lobby participation | Generated through social features |
| Device & Technical Data | Device model, OS version, app version, IP address, crash logs, performance metrics | Collected automatically |
| Purchase Data | Subscription status, entitlement tier, transaction identifiers (no payment card data) | Apple App Store / Google Play Store |
| Communication Data | Support requests, account deletion requests, data access requests | Provided by user via email or in-app forms |
| Processing Purpose | Data Categories Involved | Legal Basis (GDPR) |
|---|---|---|
| Account creation and authentication | Account Data, Device Data | Performance of a contract (Art. 6(1)(b)) |
| Providing game services (solo & multiplayer) | Gameplay Data, Multiplayer Data, Profile Data | Performance of a contract (Art. 6(1)(b)) |
| Leaderboard and ranking display | Gameplay Data, Profile Data | Legitimate interest (Art. 6(1)(f)) |
| Social features (friends, lobby) | Social Data, Profile Data | Consent (Art. 6(1)(a)) |
| Subscription management and premium features | Purchase Data, Account Data | Performance of a contract (Art. 6(1)(b)) |
| App improvement and analytics | Device Data, Gameplay Data (aggregated/anonymized) | Legitimate interest (Art. 6(1)(f)) |
| Crash reporting and debugging | Device Data, Crash Logs | Legitimate interest (Art. 6(1)(f)) |
| Push notifications | Device Data, Account Data | Consent (Art. 6(1)(a)) |
| Customer support | Communication Data, Account Data | Legitimate interest (Art. 6(1)(f)) |
| Compliance with legal obligations | All categories as required | Legal obligation (Art. 6(1)(c)) |
We use the following third-party services to process data on our behalf. Each sub-processor has been vetted for GDPR compliance and maintains appropriate security certifications.
| Sub-processor | Service Provided | Data Processed | Location |
|---|---|---|---|
| Google Firebase | Authentication, Firestore database, Cloud Functions, Cloud Messaging, Analytics | Account Data, Gameplay Data, Multiplayer Data, Social Data, Device Data | EU / US (data stored in European region where available) |
| Apple App Store | In-app purchase processing, subscription management | Purchase Data (transaction identifiers only) | Global |
| Google Play Store | In-app purchase processing, subscription management | Purchase Data (transaction identifiers only) | Global |
Important: We do not sell, rent, or share your personal data with third parties for their own marketing purposes. Sub-processors listed above process data solely to provide services on our behalf under binding data processing agreements.
| Data Category | Retention Period | Deletion Trigger |
|---|---|---|
| Account Data | Account lifetime + 30 days | Account deletion request |
| Profile Data | Account lifetime + 30 days | Account deletion request |
| Gameplay Data | Account lifetime + 30 days | Account deletion request |
| Multiplayer Data | Account lifetime + 90 days | Account deletion request |
| Social Data | Account lifetime + 30 days | Account deletion request or unfriend action |
| Purchase Data | Duration required by tax/app store regulations | Legal retention obligation expires |
| Device & Technical Data | 1 year (aggregated/anonymized after 90 days) | Automated after retention period |
| Communication Data | 3 years from last correspondence | Automated after retention period |
| Backup Copies | Up to 90 days after deletion from active systems | Automated backup rotation |
Under GDPR and similar data protection laws, you have the following rights:
You can request confirmation of whether we process your personal data and obtain a copy of that data. To request your data, email [email protected] or use the data export feature in the app (Settings → Privacy & Data → Export My Data).
You can correct inaccurate or incomplete personal data through the app settings (profile, display name) or by contacting us.
You can request deletion of your personal data when it is no longer necessary for the purposes collected, when you withdraw consent, or when processing is unlawful. See our Data Deletion Request page for instructions.
You can request that we restrict processing of your data in certain circumstances (e.g., while we verify the accuracy of contested data).
You can receive your personal data in a structured, commonly used, machine-readable format (JSON) and have it transmitted directly to another controller where technically feasible.
You can object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal. You can manage consent preferences in the app (Settings → Privacy & Data).
If you believe our processing infringes GDPR, you have the right to lodge a complaint with a supervisory authority in your EU member state of residence, place of work, or place of the alleged infringement.
We implement appropriate technical and organizational measures to protect your personal data:
Lexinum is operated from Turkey. Personal data is primarily processed and stored on Google Cloud infrastructure. Firebase data is stored in regions selected for proximity to users. Where data is transferred outside the European Economic Area (EEA), we rely on:
Lexinum does not use your personal data for automated decision-making that produces legal effects or similarly significant effects. Game rankings and leaderboards are based solely on gameplay scores, not personal characteristics.
Lexinum is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly process personal data of children without verifiable parental consent. If you believe we have inadvertently collected a child's data, please contact us immediately.
bindortyuzyirmibir
For all data protection inquiries:
We aim to respond to all data protection inquiries within 30 days, or within the timeframe required by applicable law.