Prismtail Privacy Policy

This policy explains what data the Prismtail game handles on Android, on iPhone and in the web version, and why. It follows Brazil's General Data Protection Law (Law No. 13,709/2018 — LGPD) and, for players in the European Economic Area or the United Kingdom, the GDPR.

1. Summary

• Prismtail has no account and no login and never asks for your name, email or phone.
• Your progress (level, coins, upgrades, skins, language and sound) stays on your device only.
• The game shows Google AdMob ads. Where the law requires it (European Economic Area and UK), you choose first whether you accept personalized ads. On iPhone, iOS asks whether the app may track you; declining changes nothing in the game.
• This version has no in-app purchases: everything in the game is earned by playing or by watching optional ads.
• To learn whether the game is fun, we send usage events to Google Analytics for Firebase, when it is turned on in the published version. They carry no name, email or phone number, but they are tied to an app identifier: they are pseudonymous data (section 5).

2. Who is responsible

Prismtail is published by Uncle Pipe Studio, the studio name of Felipe Rocha Rêgo (an individual), who is the controller of the data described here. For any privacy matter about the game, contact contact@unclepipe.studio.

3. Data kept on the device

The game saves a single local record (on Android and iPhone, in the app's preferences; on the web, in the browser's local storage, localStorage) with: current level, coins, upgrades, skins, unlocked purchases (empty while the game sells nothing), defeats in a row on the level, language, sound, music and vibration options, and the time of the last full-screen ad (to keep the minimum gap between ads).

This record never leaves the device, is not sent to us, and is deleted when you uninstall the app (or clear the site's data, on the web).

4. Ads (Google AdMob)

Google's AdMob picks and shows the ads. According to Google's disclosure, the AdMob SDK automatically collects and shares with Google:

• IP address, which allows estimating an approximate location;
• app and ad interactions;
• diagnostics and performance data (crash logs included on iPhone);
• device identifiers: advertising ID and app set ID on Android; IDFA on iPhone, only with your permission.

Purposes declared by Google: advertising, analytics and fraud prevention.

Consent (UMP)

In the European Economic Area and the UK, Google's consent form shows before any ad, and the game only requests ads once Google says it may. To change your choice later, use Settings → Ad privacy choices in the game.

Outside the European Economic Area and the UK

In other regions, Brazil included, ads may be personalized. On Android, you can limit this by resetting or deleting the advertising ID in the Android settings; on iPhone, your tracking choice applies (below).

Tracking on iPhone (ATT)

iOS asks once whether Prismtail may track you. If you decline, the advertising identifier is not used.

Learn more in Google's Privacy Policy and in how Google uses information from sites and apps that use its services.

5. Usage statistics (Google Analytics for Firebase)

When the published version includes Firebase, the game sends pseudonymous usage events: they carry no name, email or phone number, but they are tied to an app identifier. Under the LGPD, pseudonymous data is still personal data, and this policy treats it as such. The events are: app open; level start, win and loss (with level number, attempt, duration and upgrades); rewarded and between-level ads shown; and session length.

According to Google's disclosure, Firebase ties these events to an app-instance identifier (not tied to a user ID or to the IDFA by default), records the approximate location from the masked IP address, and may read the Android advertising ID. We use this data only to understand the game's funnel (for example, the level where people stop) and to balance the levels. It is not used for advertising.

Learn more in Privacy and Security in Firebase.

6. Account and in-app purchases

Prismtail has no sign-up, account or login. The current version has no in-app purchases, and the purchase service (RevenueCat) stays off: the app does not start it.

If a future version offers purchases, they will be made through the App Store (Apple) or Google Play. RevenueCat will confirm purchases with the store and keep the purchase history tied to a random identifier created on the device, with no name or email, to unlock what you bought and for sales statistics. We will receive no name, email or payment details. Before that, this policy will be updated with a new effective date.

7. What we use data for

• Keeping your progress and options on your own device;
• Showing ads (rewarded, when you choose to watch, and between levels), which keep the game free;
• Respecting your consent and tracking choices;
• Understanding how the game is played and balancing the difficulty of the levels;
• Fraud prevention in ads, by Google.

8. Sharing

We do not sell data. The data above only goes to the providers named here — Google AdMob and Google Firebase — each under its own privacy policy. These providers may process data on servers outside Brazil. We may also share data when required by law or by a competent authority.

9. Legal basis (LGPD)

• Consent (art. 7, I): personalized ads where the consent form shows (European Economic Area and UK), and tracking on iPhone, which only happens if you allow it;
• Legitimate interest (art. 7, IX): showing the ads that keep the game free (outside the European Economic Area and the UK they may be personalized, and you can limit this by resetting or deleting the advertising ID in the Android settings), preventing fraud, and measuring usage with pseudonymous data (no name, email or phone number, tied to an app identifier) to improve the game;
• Compliance with a legal obligation (art. 7, II): when applicable.

10. Retention and deletion

Data on the device stays until you uninstall the app or clear the site's data. Data received by Google is kept for the periods set in Google's policies.

As there is no account, the providers' data is tied to device identifiers, and you can yourself:

• delete all local data by uninstalling the app;
• reset or delete the advertising identifier in the system settings;
• decline tracking on iPhone;
• change your ad choice in Settings → Ad privacy choices, where the consent form applies.

To request deletion of data, write to contact@unclepipe.studio with the subject "Data deletion — Prismtail". As we keep no name or email of players, we may ask for information to locate the data with the providers.

11. Security

Data sent to AdMob and Firebase is encrypted in transit. No personal data from the game is kept on our own servers: your progress stays on your device, and the rest stays with the providers named here.

12. Children

Prismtail is meant for people aged 13 and over. It is not directed to children under 13 and does not knowingly collect data from children. If you believe a child sent us data, contact us at the address below so we can remove it.

13. Your rights

Under the LGPD (art. 18) and, where applicable, the GDPR, you may request:

• confirmation that data is processed, and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary data;
• portability and information about who the data is shared with;
• withdrawal of consent.

To exercise your rights, write to contact@unclepipe.studio. You may also contact Brazil's National Data Protection Authority (ANPD) at gov.br/anpd, or the data protection authority of your country.

14. Changes

If this policy changes, the new version will be published at this address with a new effective date.

15. Contact

Questions about privacy in Prismtail? Write to contact@unclepipe.studio.