Privacy Policy

The Word on the Beat

Last updated: 6th January 2026

1. Introduction

Welcome to The Word on the Beat. We want you to enjoy the game and feel confident about how your personal information is handled.

This Privacy Policy explains how Arlock Solutions, based in the United Kingdom ("we", "us", "our"), collects, uses, stores, and shares personal information when you use our game and website.

If anything here isn't clear, you can contact us at any time using the contact form on our website.

2. Who We Are (Data Controller)

For the purposes of UK GDPR and EU GDPR, Arlock Solutions is the data controller responsible for your personal data.

You can contact us regarding privacy or data protection matters using the contact form on our website.

3. Who Can Use the Game

You must be 13 or older to create an account.

If you are under 18, any payments or subscriptions must be made by a parent or legal guardian.

We do not knowingly allow users under 13 to register.

4. Information We Collect

Account Information

  • Email address
  • Display name
  • Date of birth (used for age verification)

Gameplay Information

  • Games you have played
  • Game preferences and settings
  • User-generated content (such as custom games), where applicable

Usage & Technical Information

  • Pages and features used
  • Session duration
  • IP address
  • Browser type, operating system, and device information
  • Cookies and similar technologies

Payment Information

Payments are processed securely by Stripe. We do not store full card details.

We may store:

  • Stripe customer ID
  • Subscription ID
  • Invoice references or copies

5. How We Use Your Information

We use your information to:

  • Provide and operate the game
  • Create and manage user accounts
  • Track game progress
  • Process subscriptions and payments
  • Improve features, performance, and gameplay
  • Keep the game safe, fair, and family-friendly
  • Detect and prevent fraud or abuse
  • Communicate important service-related updates
  • Comply with legal and regulatory obligations

6. Legal Bases for Processing

We process personal data under the following lawful bases:

  • Contract - to provide the game and premium features
  • Legitimate interests - to improve the game, ensure security, and prevent abuse
  • Legal obligation - for accounting, tax, and regulatory compliance
  • Consent - for cookies, analytics, and advertising where required

7. Cookies, Analytics & Advertising

We use cookies and similar technologies for:

  • Essential site functionality (such as login and security)
  • Analytics (e.g. Google Analytics)
  • Advertising and promotion (e.g. Google Ads)

Non-essential cookies are only used where you have given your consent. You can manage your preferences using our cookie banner or account settings.

For more detail, please see our Cookie Policy.

8. Third-Party Services

We use trusted third-party services, including:

  • Stripe Payments Europe Ltd - payment processing
  • Supabase - database and image hosting
  • Google Analytics - usage analytics
  • Google Ads - advertising

Stripe may act as both:

  • A data processor, and
  • An independent data controller for fraud prevention and legal compliance.

9. International Data Transfers

Some third-party providers may process data outside the UK or EU. Where this occurs, appropriate safeguards are used, such as adequacy regulations or Standard Contractual Clauses.

10. Data Retention

  • Account and gameplay data: while your account is active
  • Usage logs and IP addresses: while your account is active
  • Payment and invoice records: up to 7 years
  • Support communications: while your account is active
  • Deleted accounts: deleted immediately, unless retention is required by law

11. Your Rights

You may have the right to:

  • Access your data
  • Correct inaccuracies
  • Request deletion
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent

To exercise your rights, contact us via the contact form.

You also have the right to complain to a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO).

12. Security

We use appropriate technical and organisational measures to protect personal data, but no system is completely secure.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted with an updated "Last updated" date.

14. Contact Us

Please contact us using the contact form on our website if you have questions about this Privacy Policy.