Privacy Policy for Prismatile
1. The short version
- The game is free and paid for by ads. We do not sell in-app purchases, and we do not ask for your name, email, phone number, contacts or photos. There are no accounts.
- To show ads, measure the game and fix crashes, the game uses partner tools that receive device and gameplay data, including advertising identifiers where you allow it.
- Ads and gameplay adapt to how you play. See section 5.
- You choose: the first time you open the game, you are asked about ad personalization (and, on iPhone, about tracking). Saying no still gives you the full game. Analytics and crash reporting start only after you have answered.
- The game is intended for players aged 13 and up. On iPhone, this version of the game does not yet read Apple's age range, so no age band is received from Apple (section 6).
2. What we collect
We collect no data you type in. The game and its partners collect:
| Data | Examples | Collected by | Why |
|---|---|---|---|
| Device and app identifiers | Firebase app-instance ID, Firebase installation ID, IDFV, advertising ID (IDFA, only if you allow tracking) | Firebase, Google AdMob, AppsFlyer | Count players, show and measure ads, prevent ad fraud, learn which ad or store listing brought an install. Only Google AdMob and AppsFlyer use the advertising ID, and AppsFlyer also has its own AppsFlyer ID |
| Gameplay and usage | Sessions, games started and finished, score, level reached, lines cleared, time played, experiment group, consent and age-band summary | Firebase Analytics (our events); AppsFlyer (app opens and sessions only) | Understand and improve the game, measure retention, run tests of game settings; attribute installs |
| Ad data | Which ads were shown, ad format, the revenue an impression earned, clicks | Google AdMob, Firebase, AppsFlyer (the revenue of each ad shown, its format and placement) | Show ads, count ad revenue, measure which install sources pay back |
| Device information | Model, OS version, language, time zone, screen, app version, network type | Google (AdMob, Firebase) | Make the game and ads work on your device; diagnostics |
| Remote settings request | Country, language, time zone, OS and platform version, Firebase app ID, app package name, SDK version, Firebase installation ID | Firebase Remote Config | Deliver the game's remote settings, including a switch that can turn ads off |
| Approximate location | Country or region inferred from IP address. We never request precise (GPS) location. | Firebase, Google AdMob | Choose the right ads and legal rules for your country; regional statistics |
| Crash and performance data | Stack traces, app state at the crash, device state | Firebase Crashlytics | Find and fix crashes |
| Consent choices | Your answers to the consent and tracking prompts | Google UMP (the app's own consent screen), Apple ATT | Respect your choices |
When each partner starts. Firebase Analytics and Crashlytics start only after you have answered the consent prompts and allowed it. Firebase Remote Config also runs when you decline analytics, so that a switch that turns ads off can reach every player; it receives only the "Remote settings request" data above. If you decline after agreeing earlier, the game turns Analytics and Crashlytics off and clears the Analytics data stored on your device (including its app-instance ID).
AppsFlyer (install attribution) starts only after you have answered every consent prompt, and only if you agreed to data use in the consent form (where that form applies). It reads the advertising ID only if you allow tracking; if you do not, it still starts, without that ID. If you later withdraw consent, AppsFlyer stops for the rest of that session and is not started again on later launches until you consent again.
Your best score and highest level are stored on your device only.
Local-only data (never sent off the device). The following records live only on your device and are not collected, transmitted or shared: your settings (sound, music and haptics choices), your daily-challenge record (days played, streak and calendar outcomes), your adventure progress (stages beaten and stars), and your saved game (best score and highest level). Deleting the app deletes all of them. Gameplay events in the table above may say that a daily or adventure stage was played, but the stored records themselves never leave the device.
3. How we use it
- To run the game: remote settings (Firebase Remote Config), crash fixing (Crashlytics).
- To show ads: banner ads during play, full-screen ads only after a game ends, and an optional rewarded ad you can choose to watch at game over to continue (the reward is shown before you choose). Google AdMob uses the data in section 2 to pick and measure ads.
- To measure and improve: retention, playtime and ad revenue reports. We may test different game settings on groups of players. Every player in a test gets a fair game (section 5).
- To learn where players come from: AppsFlyer tells us which ad campaign or store listing an install came from, and receives the revenue each ad earned so we can see which sources pay back. It does not receive our gameplay events. On iPhone, Apple's privacy-preserving SKAdNetwork reports go to the ad networks and a copy to AppsFlyer; the game itself never sets a conversion value.
- Only after you answer: analytics, crash reporting and install attribution start only after the consent prompts, and only if you allow them.
- Legal bases (EEA/UK): consent for personalized ads, tracking and advertising identifiers; legitimate interests for crash reporting, security, fraud prevention and basic aggregated analytics; legal obligation where the law requires it.
4. Who receives data
We do not sell your personal data for money. Some laws, such as California's, treat sharing data with ad partners for cross-context behavioral advertising as a "sale" or "share". Our ad partner and our measurement partner do receive data, so we treat it as one and let you opt out (section 8).
| Partner | Role | Their policy |
|---|---|---|
| Google AdMob (Google Mobile Ads SDK; no third-party mediation) | Shows ads and measures them | https://policies.google.com/privacy · https://policies.google.com/technologies/partner-sites |
| Google (Firebase Analytics, Remote Config, Crashlytics; UMP consent form) | Analytics, remote settings, crash reports, consent | https://policies.google.com/privacy · https://firebase.google.com/support/privacy |
| AppsFlyer (install attribution) | Attributes installs to ad campaigns, measures ad revenue per install source | https://www.appsflyer.com/legal/services-privacy-policy/ |
| Apple (App Store) | Distribution, tracking permission (ATT) | Apple's own policies |
We also disclose data if the law requires it, or to protect players and the game from fraud.
5. Personalization: what adapts to you
We want you to know exactly what changes based on your data.
| What adapts | Based on | Your control |
|---|---|---|
| Ads (which ads you see) | Advertising ID, device data, approximate location, ad interactions, where you consented | Decline personalization in the consent form; on iPhone, deny tracking |
| Start boards | Your highest level reached on this device. Higher levels can start with a few blocks already placed or goal blocks to clear. The first game is always an empty board. | Decided on your device; nothing is sent to decide it |
| Difficulty and ad timing (may be used) | Gameplay data such as games played, average game length, level and progress, device type and experiment group. Sets which solvable set of pieces you are dealt and how often ads may appear, within fixed rules | We may switch this off by region. It is never used for players we know to be under 18 |
Fixed rules that no personalization changes:
- You are never dealt pieces that cannot be placed when a placeable set exists.
- Your score is never secretly changed. Any bonus is shown on screen.
- Full-screen ads never appear when the app opens or while you are mid-game.
6. Children and teens
The game is intended for players aged 13 and up and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has used the game, contact us and we will delete what we can link to that device.
Age information. The game does not ask for your age or birthdate. On iPhone, this version of the game does not yet read Apple's age range, so no age band is received from Apple. The game applies the following rules only when it has received an age band: for a player under 13, it starts no ads, analytics, crash reporting or remote settings (the game itself still works); for a player aged 13 to 17, it does not show the iPhone tracking prompt, requests non-personalized ads only, does not start AppsFlyer, and does not adapt gameplay based on predicted value. Because no age band is received from Apple in this version, these rules are not triggered by an age band on iPhone.
7. How long we keep data
| Data | Retention |
|---|---|
| Firebase Analytics event data | Event-level data: 2 months. Data tied to a device's analytics identifiers: 14 months, reset each time that device plays again. Aggregated reports are kept longer. |
| Analytics events exported to our Google Cloud project (BigQuery) | Kept in our own Google Cloud project for analysis for 14 months, then deleted automatically. |
| Crashlytics crash reports | Kept for the period set by Google for Firebase Crashlytics; see its policies linked in section 4 |
| Google AdMob | Kept for the period set by Google; see its policies linked in section 4 |
| AppsFlyer attribution and ad-revenue data | Kept for the period set by AppsFlyer; see its policy linked in section 4 |
| On-device score and level | Until you delete the app |
| On-device settings, daily and adventure records | Until you delete the app (local only, section 2) |
8. Your choices and rights
- Everyone: decline personalization at first launch. Your iPhone settings control tracking and the advertising identifier at any time: Settings › Privacy & Security › Tracking. These settings do not change the analytics choice you made in the consent prompts. Deleting the app stops all collection by the game and removes all on-device data, including your stored consent answers. You can also email us (below).
- EEA, UK and Switzerland (GDPR / UK GDPR): rights of access, rectification, erasure, restriction, portability and objection, plus the right to withdraw consent at any time and to complain to your data protection authority.
- California and other US states with privacy laws (CCPA/CPRA and similar): right to know, delete and correct, and to opt out of the "sale" or "sharing" of personal data for targeted ads. Opt out by declining personalization in the consent form or turning off tracking as above. We do not discriminate against players who use these rights.
- Brazil (LGPD), Philippines (Data Privacy Act), Indonesia (PDP Law), Vietnam (Decree 13/2023): you have similar rights to access, correct and delete data, and to withdraw consent.
- How to ask: email [email protected] with the subject "Privacy request". There are no accounts, and the game does not show you any identifier, so we usually cannot link the data our partners hold for an anonymous device to you as a person. Tell us what you want and we will do what we can. To stop all collection by the game and remove its data from your device, delete the app; to limit ad tracking without deleting it, turn off tracking as above. We answer within 30 days (or the period your law sets).
9. Security and international transfers
Data is encrypted in transit (HTTPS). Partners may process data in the United States and other countries. Where the law requires it, transfers rely on safeguards such as the EU Standard Contractual Clauses in our partners' terms.
10. Changes
We will update this page and its date when our practices change, and ask for consent again if a change requires it.
11. Contact
reinforce42, [email protected].