PRIVACY POLICY

1. CONTROLLER AND CONTACT

The data controller is Javier Lasso, who operates under the trading name Thoughtful Software.

Privacy contact: development@thoughtfulsoftware.dev

Business and contact address: Paseo de la Castellana 194, 28046 Madrid, Spain.

2. DATA AND PURPOSES

To save and sync progress, provide rankings and manage purchase entitlements, we process installation and platform identifiers, public name, progress and results. The legal basis is providing the requested service. Leaderboard names and results are public.

We analyse sessions, decisions and results with their dates and player identifier to find errors and improve the game. This data is pseudonymous, not anonymous. The basis is our legitimate interest in improving its operation.

The website logs IP addresses, dates, requested pages and browser details based on our legitimate interest in protecting the service. It remembers your chosen language until you change it or clear the site's data. It has no advertising or analytics tracking.

We process messages to provide support: to perform the service or, for other enquiries, based on our legitimate interest in replying. Without the necessary data, we cannot provide the relevant feature or answer your enquiry.

3. PROVIDERS AND TRANSFERS

Hostinger provides hosting and email; the server is in France. Apple and Google manage their stores, purchases, player services and cloud saves. We do not receive your banking details or sell personal data.

These providers may process data outside the European Economic Area. Hostinger provides for standard contractual clauses where needed; see its agreement and subprocessors at Hostinger or contact us about safeguards. Platform policies are at Apple and Google.

4. RETENTION

We retain progress and rankings while you use the service or until you request deletion. Messages are kept until the enquiry is resolved and, if necessary, for applicable legal liability periods. Technical logs are normally retained for about two weeks.

Individual session, event and notice receipt history expires after 400 days; we check at server startup and every five minutes. The cumulative analytics profile is deleted after 400 days of inactivity or on a deletion request. We retain general totals without identifiers, individual dates or event details, which cannot be used to look up a person’s history. App diagnostics expire after 30 days.

Deletion does not immediately remove all backups: operational copies are replaced periodically and external copies are pruned when older than 60 days. Historical recovery copies are reviewed when handling deletion. Information needed for legal obligations or claims may be retained.

5. RIGHTS AND DELETION

Open Profile > Options and tap “Delete data”. In the confirmation dialog, hold the delete button for 10 seconds. This removes your local save, cloud save, pseudonymous telemetry and leaderboard entries. If you cannot open the app, email us.

You can request access, rectification, erasure, restriction, objection and, where applicable, portability by email or at the address above. You can object to analytics based on legitimate interests on grounds relating to your particular situation and complain to the AEPD or your competent authority. Contact us about children's data.

6. IN-APP ADVERTISING

Ad-supported versions use Google AdMob for ads at breaks and optional rewarded videos. The SDK may process IP addresses and approximate location inferred from them, device or app identifiers, ad interactions and diagnostics to deliver and measure ads and prevent fraud. We request non-personalized ads; this does not mean that no data is processed. Google policy: Google.

We request consent where required. You can review or withdraw it under “Ad privacy” in game settings. Refusing does not prevent play. To credit rewards and prevent duplicates, our server verifies Google’s signed confirmation and retains the transaction associated with your account; Google receives random identifiers for this check, not your player name. Verification is based on delivering the requested reward and preventing fraud. The retention rules and rights above apply.

Before the first ad, we ask for a birth date to calculate the age band. The date is discarded; only the band is saved on this device and can be changed in Ad privacy. Under-13s and unknown ages receive child-directed treatment; ages 13–15 receive under-age-of-consent protection. We send the protection flags to the SDK, not the age answer to our server.