YOUR GAME. YOUR INFORMATION.

Privacy notice

Yapper is operated by Sumdora Ltd. For privacy questions or requests, contact admin@sumdora.ai.

Website, Android and iOS app privacy notice · 14 October 2026. This notice describes the Yapper store-release configuration and website. The apps use advertising and optional purchases as described below. Separate builds explicitly labelled Test Store or QA may use test advertisements or simulated purchases; those labels do not mean that no personal information is processed.

Information in your game

You don’t need a Yapper account to play. The app saves player and team names, game settings, scores, preferences and interrupted-game recovery information on your device. It also keeps local counters for events such as completed games and ad impressions.

The current app does not send player names, team names, answers or game records to a Yapper-operated server. There is no in-app chat, social account connection or content-upload feature.

When configured to download updated game content, the app sends its platform and app version to Yapper's content service. The service receives connection information needed to handle the request. The app validates and saves downloaded content on your device. This does not upload player names, team names, answers or game records.

Local information remains until it is changed or removed. Starting a new game does not erase every saved setting or counter. Clearing app storage can remove local data. Uninstalling and reinstalling may be affected by your device’s backup and restoration settings. The app does not apply separate encryption to this local game storage.

Advertising and consent

The Android and iOS store-release builds use Google AdMob to deliver advertisements and Google’s User Messaging Platform to check advertising eligibility. Ad requests use non-personalised settings, a general-audience (G) ad-content limit and Google’s under-age-of-consent treatment for all players. These settings do not mean that no personal information is processed.

Google’s services may process IP addresses, device and app identifiers, consent signals, ad interactions and diagnostic or fraud-prevention information. An IP address may indicate an approximate location. Yapper does not have a feature that requests or reads your device’s precise location.

The app checks Google’s advertising eligibility before requesting ads and does not request ads if that check fails. Because the release applies under-age-of-consent treatment to all players, Google’s consent and privacy-options forms may not be offered. Settings → Privacy choices reports when no form is available. Non-personalised advertising can still involve the information described above.

Read how Google uses information from partner apps and Google’s privacy policy.

Ad-free purchases

An active Yapper+ subscription or permanent Remove Ads purchase prevents Yapper from displaying ads. Removing ads does not remove processing needed to verify your purchase or operate the app. Cancelling subscription renewal leaves benefits active until the paid period ends; a separate permanent Remove Ads purchase continues afterwards. You can manage or cancel subscriptions through your Google Play or Apple account subscription settings.

This website and the mini-round

The mini-round runs in your browser. Its words, timer and score are held in the current page’s memory and reset when the page reloads. It does not ask for a name or email address and does not send scores to Yapper.

We have not added advertising, a mailing-list form or audience analytics to this website. Website hosting and access services may process connection information, such as an IP address and technical request details, to deliver and secure the site. This website uses OpenAI Sites and Cloudflare hosting infrastructure. We use this technical information for our legitimate interest in delivering and securing the website.

If you email us or use the contact form, we receive your name, email address, topic, message, submission reference and any information you choose to include. Resend delivers enquiries to admin@sumdora.ai and processes message contents and delivery metadata. The website does not store form contents in a database. Temporary hashed IP counters and submission timing help prevent abuse. We use enquiry information for our legitimate interests in providing support and investigating problems, and to meet legal obligations when handling statutory privacy requests. We do not add support contacts to a marketing list. Please do not send passwords, full payment-card details or information that is not needed for your enquiry.

Support retention and international processing

We keep support correspondence for as long as needed to resolve your enquiry, handle related follow-up and meet applicable legal or dispute-handling requirements. Relevant factors include whether an issue remains open and whether the information is needed to establish what happened. You can ask us to delete information we no longer need. Temporary form request counters expire after one hour and may disappear earlier when a server instance restarts.

Resend stores message content and delivery records in the United States. Its Ireland sending region controls email routing rather than data-storage location. Resend states that standard-plan email and log data is retained for 30 days, with backups persisting for seven days. Its transfer safeguards include contractual clauses and the UK Addendum. Copies in our support mailbox follow the retention criteria above. See Resend’s data protection and retention information.

Hosting and email services may also process information internationally. Contact us for details relevant to your enquiry. Provider information: Cloudflare and OpenAI.

Contact-form provider: Resend privacy policy.

Yapper+ and purchases

The Android and iOS store-release builds use Google Play checkout on Android, Apple App Store checkout on iOS, and RevenueCat to load products, verify purchases, check subscription and permanent-purchase access, and restore access. Separate builds labelled RevenueCat Test Store offer simulated purchases with no real charge. This website does not sell subscriptions or process payments.

RevenueCat processes a customer identifier, app and device information, product identifiers, purchase or simulated-purchase records and subscription status to operate and analyse purchases and restore access. A generated customer identifier is not a promise that no personal information is processed. Google Play or Apple handles checkout, payment details and billing; Yapper does not receive your full payment-card details. Prices and currencies are supplied by the store. Simulated Test Store prices do not determine live store prices.

On Android, promotional codes can grant access without a paid purchase. Redeeming a code does not itself start a paid subscription or subscription renewal. The iOS app does not offer custom promotional-code redemption; paid digital content and subscriptions use Apple App Store purchases.

When you redeem a promotional code on Android, the app sends the entered code, customer identifier, platform and request identifier, and may send app language and region. Yapper uses these details to check eligibility and limits, grant the intended benefits and recover interrupted requests. It sends the customer identifier and benefit details to RevenueCat to grant or verify access. Yapper retains redemption records containing protected customer and request identifiers, campaign, platform, outcome, benefits and relevant times. The app retains pending-request and recovery information in secure device storage. These records are separate from local game information; removing app storage does not itself delete server or provider records. A generated identifier does not make these records anonymous. Use the privacy-request contact above for questions about records we control.

Removing local app storage does not automatically delete RevenueCat or app-store records. It can also reset the locally stored customer identity. For requests about information held by Sumdora or its service providers, choose Privacy request in our contact form. We may need information sufficient to identify the relevant record and will explain any records that must be retained or requests that need to go directly to an app-store provider. We do not promise deletion of records controlled independently by Google or Apple.

Provider information: RevenueCat privacy policy.

Intended audience

Yapper is a reading-based, in-person party word game with content suitable for ages 4 and above. We expect teenagers aged 13 and above and adults to be its main audience, but 13 is not a minimum age for playing and younger children may also play with others. Younger players may need help reading the words. The app does not ask for a birth date or age, and does not determine an individual player’s age. The protective advertising settings described above apply to all players.

If you believe a child has provided personal information to us, contact admin@sumdora.ai so we can investigate and handle the relevant information.

Your choices and privacy requests

You can change names and settings in the app and use your device’s controls to manage local storage. Provider privacy choices are available through the app as described above.

Choose Privacy request in the contact form or email admin@sumdora.ai to ask about personal information we hold, request access, correction, restriction or deletion, or object to processing based on legitimate interests. Portability rights may also apply. Rights depend on your location and the information involved. We may need enough information to verify and handle your request, but will not ask for your password.

For UK data protection concerns, you can also contact the Information Commissioner’s Office.

Changes to this notice

We update this notice when the services used by Yapper or their handling of information change. The date at the top identifies the current notice.