Spell Trail Privacy Policy

1 Scope

Double Spark Games (“we”, “us”) provides Spell Trail, also known as Spelltrail. This policy explains how information is handled in the Android and iOS game, on doublesparkgames.com, and when you contact us by email.

Core game progress is stored on your device. Depending on the app version and available features, the game also uses Google Firebase for app identity, cloud backup, analytics and crash reporting; Google AdMob for rewarded ads and privacy choices; Meta App Events for advertising measurement; and Google Play or Apple App Store for purchases. Online features communicate with these providers. The descriptions below apply when the corresponding feature is present and enabled in your version.

2 Local game data

The game stores progress, inventory and currency balances, settings, and records of delivered rewards and processed purchases on your device. These records let you continue playing, retain settings, receive entitlements and avoid duplicate delivery.

Versions with cloud backup can synchronize a copy of game progress, inventory, balances and reward or purchase-delivery records to our Firebase project while online. The copy is associated with a pseudonymous Firebase app identity. Cloud backup status and available recovery choices appear in the game's cloud-save screen. Cloud copies can remain after app deletion or local storage is cleared.

Firebase Authentication can create or restore an anonymous app identity without asking you to register an email address. Where Google or Apple sign-in is offered, it starts only when you choose it; the platform and Firebase process the authentication identifiers and credentials needed to sign in or link that identity. We do not receive your Google or Apple password.

If you enable device or system backups, your operating system and backup provider may back up app data under your settings. These copies are managed by the relevant platform and your backup settings.

3 Advertising and privacy choices

The game integrates Google AdMob and its User Messaging Platform (UMP) to offer rewarded ads that you choose to watch and to manage applicable privacy choices. Once UMP allows ad requests, advertising services may initialize and preload an ad before you choose to watch it.

Google’s advertising and consent services may process your IP address and approximate location inferred from it; device or app identifiers; ad impressions, clicks, video views and other product interactions; and crash, performance and diagnostic data. Identifiers may include the Android advertising ID, App Set ID, and the iOS advertising identifier (IDFA) when permission allows. The game does not currently use location permission to access precise GPS location.

This information supports ad delivery and measurement, advertising-related analytics, service maintenance, troubleshooting, fraud prevention, and providing and recording applicable privacy choices. Where permitted by law, platform permissions and your choices, relevant information may also be used for personalized ads or advertising tracking across apps and websites. App Set ID is used for permitted analytics and fraud prevention purposes, rather than ad personalization.

Where applicable, you can choose or withdraw consent in the consent interface or use the advertising privacy entry under Settings and Help on the game’s My page. This entry appears when Google’s consent service requires it. iOS tracking permission and Android advertising identifier settings also affect available identifiers and ad processing. Declining personalization or tracking does not necessarily stop all ad requests or necessary diagnostic and fraud prevention processing.

3A Meta advertising measurement

Where enabled and permitted by your privacy choices, Meta App Events helps measure installs, app sessions and advertising conversions for Spell Trail. Events include completed tutorials and levels, initiated checkouts, verified and delivered purchases, delivered entitlements, and rewards received after watching an ad. Parameters can include the level, product identifier, purchase amount and currency, ad placement, delivery method and a one-way hashed event reference used to reduce duplicate reporting.

The Meta SDK also processes technical information under its own rules, such as IP address, app and device information, operating system, and identifiers permitted by your settings. These may include advertising identifiers and attribution information available from a Facebook app on the device. Meta may associate information with other information it holds for advertising measurement, optimization and personalization as permitted by applicable choices and its policies. Our app-generated event parameters do not intentionally include nicknames, words you type, email addresses, Firebase user IDs, raw store transaction references, purchase tokens or receipts. This parameter list is not a complete inventory of information processed by the SDK.

For users covered by the European consent interface, Meta measurement requires the applicable consent for Meta and the relevant purposes. Permission to request Google ads alone does not grant Meta permission. Use the in-game advertising privacy entry to review or withdraw the relevant choice where available. Withdrawal stops new Meta events from the game and clears its unsent event queue; it does not erase information already delivered to Meta. Advertising identifiers also depend on Android settings and, on iOS, the separate tracking permission. The game does not require Facebook login for this measurement feature.

3B Firebase analytics and diagnostics

Firebase services support app operation, cloud backup, usage analysis and fault investigation. Depending on the service, information can include app-instance or authentication identifiers; device, operating-system, app-version and build information; page and gameplay event categories; product and purchase-value information; and crash traces, performance information and diagnostic context. App-generated business events avoid sending the words you enter or raw save contents as analytics parameters. Crash reports and provider-generated diagnostics are processed according to the provider's service rules.

We use these services to understand how game features work, diagnose failures, maintain reliability and support save recovery. Advertising privacy choices do not themselves delete an app identity, cloud backup, or diagnostic and analytics records already collected. Contact us for requests concerning information in our Firebase project. Provider information is linked below.

4 In-app purchases

Apple App Store or Google Play processes purchases. Through store services, the game receives product identifiers, transaction references, purchase status and information needed to verify transactions. It uses these to confirm purchases, deliver entitlements, prevent duplicate delivery, and finish transactions or acknowledge or consume purchases with the store. Store services communicate with the relevant platform.

We do not receive your payment card number or payment password. Apple or Google handles payment details, store account information and purchase history retained by the platform under its own policies. The game keeps necessary purchase processing records locally; entitlement and reward-delivery records may be included in cloud backup. Eligible purchase amount, currency and product information can also be sent through the measurement and analytics services described above. Restoring an old purchase does not intentionally create a new Meta revenue event. We do not operate a payment-card processing service.

5 Our website and support

When you visit our website, hosting and network providers may process your IP address, browser information and request logs to deliver pages, maintain reliability and prevent abuse. The website currently does not use advertising or third-party analytics services. Advertising in the game is covered by section 3.

If you email us, we and our email provider process your email address, message and any attachments you choose to send to respond, provide support or handle privacy requests. Send only information needed to resolve your request. Do not send payment passwords or full payment card details.

6 Recipients and processing locations

Google processes information through Firebase, advertising, consent and platform services. Meta processes advertising-measurement information through the relevant Meta Platforms entity for your region. Apple and Google process purchase and authentication information. Website hosting, network and email providers process information needed to supply their services. A full game save is used for backup and recovery rather than supplied as an advertising event payload.

Websites, stores and other services opened from ads have their own privacy policies. Apple, Google, Meta and other providers may process information outside your country or region. Their processing locations, retention rules and international transfer measures are described in their own policies and governed by applicable law.

We may disclose necessary information we hold when required by law, in response to lawful requests, or to protect users and service security. Depending on the activity and applicable law, processing grounds include providing the game, purchase or support services you request; legitimate interests in service security; legal obligations; and consent where required.

7 Retention and deletion

Local game data remains on your device until the game replaces it, you clear app data or you delete the app. Manage copies in system backups through the relevant backup settings; restoring a backup may restore local data. Deleting a save may cause loss of progress or previously delivered consumable entitlements. Clearing local storage does not automatically delete cloud copies or account records. Ask us to delete cloud-backup or app-identity information within our control using the contact below; we will explain the information needed to locate and verify the request.

The game's own unsent Meta event queue expires within 48 hours; this does not set Meta's server retention period. Cloud, analytics, crash and support records are retained for their stated service purposes and applicable obligations, or addressed through a verified deletion request. We retain support messages and related records only as needed to respond, resolve issues and meet applicable obligations. On a deletion request, we address data within our control. Information needed for legal obligations or unresolved disputes may be retained, and we will explain relevant limits. Advertising, store, hosting and email providers retain data under their own rules. We cannot directly delete records that they independently control.

8 Your choices and rights

You can adjust choices through applicable ad consent interfaces and the in-game advertising privacy entry; manage this app’s tracking permission in iOS settings; and reset or delete the advertising ID in Android settings, where available. Options vary by operating system version. Google’s ad settings also let you manage ad personalization associated with your Google account.

To remove local saves, clear app storage in Android settings or delete the app on iOS. The iOS Offload App option may retain app data; use Delete App and review system backups if you want to remove data.

Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of information, restrict or object to processing, or withdraw consent. You may also complain to a competent data protection authority. Contact us at the email address below. We will respond within the period required by applicable law and request only information needed to confirm your request. Withdrawal does not affect processing that was lawful before withdrawal. For information independently controlled by Apple, Google or Meta, use their privacy and account management channels. More instructions are available on our Data Deletion page.

9 Children

Spell Trail is not directed to children under 13. We do not actively ask children to provide names or contact details. If you are a parent or guardian and believe a child has provided personal information to us through the game, or have concerns about related processing, contact us. We will investigate and take steps such as deletion or restriction within our control as required by applicable law.

10 Security

We minimize the information we receive and use the storage and permission mechanisms provided by the platform. The Google Mobile Ads SDK transmits its network data over encrypted connections. Security of local data also depends on your device, operating system, backups and settings. No storage or transmission method guarantees absolute security.

11 Updates and contact

We will update this policy and its last updated date when our services or processing practices change, and provide additional notice or seek consent when required by law. For questions about this policy or personal information, contact Double Spark Games.

Provider privacy information:

• Google Privacy Policy
• How Google uses information from partner sites and apps
• Apple Privacy Policy
• Firebase privacy and data processing
• Meta Privacy Policy and privacy controls