Privacy Policy — Sweeplight

1. Who is responsible for your data

NosferTech ("we", "us", "our") is the data controller for data processed in connection with the mobile game Sweeplight (the "Game"). Contact: privacy@nosfertech.com

2. What we collect and why

Sweeplight is played without an account. We do not ask for your name, email address or phone number, and the Game has no chat or user profiles. The Game uses the following data:

Game progress and settings (levels, stars, streak, feats, Logbook, audio settings, whether you own the Patron's Lantern) — stored on your device. We do not receive them. If Android's backup is on for your device, Android also copies your progress, settings and purchase record to your own Google backup (your Google account) and restores them if you set up a new device. That copy is kept by Google under your account, not by us; you can switch it off or delete it in your Android and Google backup settings.
Usage analytics through Google Firebase Analytics: gameplay events (for example level started, completed or failed, daily challenge played, rewarded ad watched, purchase made), an app-instance identifier, the Android advertising ID, and a coarse location derived from your IP address. Purpose: to understand how the Game is played and improve it.
Crash reports and diagnostics through Google Firebase Crashlytics: crash stack trace, app state and device metadata at the time of the crash, and a Crashlytics installation identifier. Purpose: to find and fix bugs.
Remote configuration through Google Firebase Remote Config: country, language, time zone, OS version and an installation identifier, used to deliver game settings (for example difficulty thresholds).
Advertising through Google AdMob (see section 3): IP address, ad interactions, diagnostic information and device identifiers such as the Android advertising ID and app set ID.
Purchases through Google Play Billing (see section 4): the Game receives only the confirmation that the purchase is valid. Your payment details are handled by Google and never reach the Game or us.

Legal bases (EEA/UK): performance of the service you request (progress, purchases); your consent for personalised advertising and the related ad storage, collected through the consent form; our legitimate interest in keeping the Game stable and improving it (crash reports, analytics, remote configuration). Firebase Analytics and Crashlytics rest on our legitimate interest, and the Game switches them on only where Google's consent form (UMP) does not apply to you. In the EEA and the UK, where the form is shown, both stay switched off even after you have answered it, whether you accept or decline, because the Game does not use your answers to turn them on. We therefore collect no analytics or crash reports from those regions.

3. Advertising (rewarded ads only) and your consent

Sweeplight shows third-party advertising through Google AdMob, only as optional rewarded ads: you choose to watch an ad to receive an in-game aid (an extra life, extra bombs, the drone, an extra undo or another try at the daily challenge). The Game does not show banner, interstitial or app-open ads.

Where consent is required (such as in the EEA, the UK or Switzerland), the Game shows Google's consent form (User Messaging Platform) when it starts, before any ad is requested. Ads are requested only if the consent status allows it. Your choice is also passed to Firebase Analytics as consent signals. You can change or withdraw your consent at any time with Privacy options in the main menu or in the in-game menu (shown when the consent form applies to you). If you decline, rewarded ads may be limited or unavailable; the rest of the Game keeps working.

You can also reset or delete your Android advertising ID in your device settings. How Google uses data for ads: policies.google.com/technologies/partner-sites.

4. In-app purchases

Sweeplight offers one optional in-app purchase, the Patron's Lantern: a one-time, non-consumable purchase processed by Google Play Billing. It lets you use the same in-game aids without watching ads, with the same limits. You can restore it with Restore purchases. Whether you own it is stored on your device. Google Play processes the payment under its own terms and privacy policy; Firebase Analytics records that a purchase event happened (product and price), never your payment details.

5. Sharing your result

If you tap Share after a game, the Game creates an image of your result on your device and opens Android's share sheet. Nothing is sent to us; the app you choose receives the image under its own terms.

6. Service providers

Google Ireland Limited / Google LLC — Firebase Analytics, Crashlytics and Remote Config; AdMob and the User Messaging Platform (advertising and consent); Google Play Billing (payments). See policies.google.com/privacy.

We do not sell your personal data for money. Under some US state laws, sharing device identifiers with an ad network for personalised advertising may count as "sharing" or "selling"; you can opt out by declining personalised ads in the consent form or by deleting your advertising ID.

7. Children

Sweeplight is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect personal data from children. If you believe a child has used the Game and data was collected, contact us and we will help delete it.

8. Retention and deletion

Data on your device stays there until you uninstall the Game or clear its data. Analytics and crash data are kept by Firebase only for limited periods: analytics event data for at most 14 months, and crash reports for 90 days. To request deletion of data linked to your installation, see our Data Deletion page or email privacy@nosfertech.com.

9. Your rights

Depending on where you live (for example the EEA/UK under the GDPR, or California under the CCPA/CPRA), you may have the right to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent at any time without affecting earlier processing. Write to privacy@nosfertech.com. In the EEA you may also complain to your data protection authority; in Spain, the Agencia Española de Protección de Datos (aepd.es).

10. Security and international transfers

Data sent by the Game's services is encrypted in transit (TLS). Our providers may process data outside your country, including in the United States; such transfers rely on safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

11. Changes to this policy

We will update this policy when the Game's data practices change and will change the "Last updated" date above.

12. Governing law and contact

This policy is governed by Spanish law and the GDPR, without prejudice to the mandatory rights of your country of residence. Contact: privacy@nosfertech.com