Privacy policy

In short

• You don’t need an account, and the game never asks for your name, email address, contacts, photos or precise location.
• Your scores, settings, glyphies and unlocked items are stored only on your device. We never receive them.
• We use no analytics and no tracking of our own, and the game never asks for permission to track you on iPhone.
• Ads are optional: you only see one when you tap WATCH AD. They come from Google AdMob, which receives device and usage data to show the ad. In the EEA, the UK and Switzerland, Google asks for your consent first, and you can change your choice at any time.
• Purchases are paid through the App Store or Google Play. We never see your payment details. RevenueCat processes purchase records for us so purchases can be checked and restored.
• You can ask us at any time what we hold about you, or have it deleted: apps@webvorming.nl.

2. Data stored on your device

The game keeps a save file in its private storage on your device. It contains:

• your best scores and your progress in the daily challenge;
• your settings (such as sound, music, haptics and reduced motion);
• your glyphy balance, the glyphs and palettes you own and use, and the last day you claimed the ad bonus;
• the store transaction IDs of purchases the game has already granted, so a purchase is never paid out twice.

The save is never sent to us or to anyone else, and the game works fully offline. If your device backs up app data (for example to iCloud or Google), the save may be part of that backup under Apple’s or Google’s terms. Uninstalling the game deletes the save from your device.

3. Advertising (Google AdMob)

The game only has rewarded ads that you choose to watch: to continue a run, or for the daily glyphy bonus in the shop. There are no banners or forced ads, and no ads in daily-challenge runs. You never have to watch an ad to play.

Ads are provided by Google AdMob (Google Ireland Limited for users in the EEA, the UK and Switzerland; Google LLC elsewhere). Google acts as an independent controller for the data its ad services collect.

When the game talks to Google

• Consent check. When the game starts, it asks Google’s User Messaging Platform whether a consent message applies where you are, and reads the choice you made before. This sends technical data such as your IP address and device information.
• Consent form. In the EEA, the UK and Switzerland, Google’s consent form appears the first time you tap WATCH AD. Apart from the consent check, nothing ad-related happens until you have made a choice.
• Loading and showing ads. After your first tap on WATCH AD, the game starts Google’s ad software. On later launches it loads ads ahead of time, so an ad is ready when you ask for one.

What Google may collect

• your IP address, from which an approximate location (such as country or city) can be derived;
• device and app information: device model, operating system and version, language, app version, and the ad unit requested;
• on Android, the advertising ID (which you can reset or delete in your device settings);
• on iPhone, Google cannot read the advertising identifier (IDFA), because the game never asks for permission to track you;
• interactions with ads (whether an ad was shown, watched to the end, or tapped) and diagnostic data such as load times and errors.

Google uses this data to show and measure ads, to limit how often you see the same ad, and to prevent fraud and abuse. It personalises ads only where you allow it. We only ask for ads rated for teens and older, and the game is not marked as directed at children.

Personalised ads and your choices

• EEA, UK and Switzerland: personalised ads only happen with your consent through Google’s form. The same goes for storing or reading information on your device for ads. If you decline, Google may still show non-personalised or limited ads. These use contextual information and only the data needed to serve and measure the ad and to prevent fraud.
• Changing your choice: open Settings › PRIVACY OPTIONS in the game to see or change your choice at any time. The option appears wherever a consent choice applies. Withdrawing consent doesn’t affect processing that already happened.
• On iPhone, ads are not based on tracking you across other companies’ apps and websites.
• On Android, you can turn off ads personalisation or delete your advertising ID in your device’s Google settings.

Legal basis

• Your consent (GDPR Art. 6(1)(a)) for personalised ads, and for storing or reading information on your device where consent is required.
• Our legitimate interest (Art. 6(1)(f)) in checking whether consent is needed, in offering free optional rewards funded by ads, and in preventing ad fraud.

More about Google’s practices: Google Privacy Policy and How Google uses information from sites or apps that use its services.

4. Purchases (App Store, Google Play and RevenueCat)

You can buy glyphy bundles and a supporter pack. Payments are handled entirely by Apple (App Store) or Google (Google Play) under their own terms and privacy policies. We never receive your name, email address or payment details.

We use RevenueCat, Inc. (United States) as our processor, under a data processing agreement. RevenueCat checks that a purchase is genuine, lets us grant it, and lets you restore the supporter pack on a new device. When you buy or restore, RevenueCat receives:

• a random, anonymous app user ID created by the game (not linked to your name or store account);
• the purchase receipt and transaction details: product, price, currency, store, country or storefront, date and transaction ID;
• technical data: IP address, device model, operating system and app version.

Legal basis

• Performing our contract with you (GDPR Art. 6(1)(b)): delivering and restoring what you bought.
• Our legitimate interest (Art. 6(1)(f)) in preventing purchase fraud.
• Legal obligations (Art. 6(1)(c)) for records we must keep for tax purposes.

More: RevenueCat Privacy Policy, Apple Privacy Policy.

5. App stores

You download d0dge from the App Store or Google Play, which process data about you under their own privacy policies. You may have agreed in your device settings to share analytics with app developers. If so, Apple or Google may give us aggregated statistics and crash reports about the game (such as installs, device types and crashes). These don’t identify you, and we use them only to fix problems and improve the game.

6. When you contact us

If you email us, we use your email address and the contents of your message to answer you and to handle your request. The legal basis is our legitimate interest in answering you, or a legal obligation when you exercise your rights. We delete the correspondence when it’s no longer needed, at the latest two years after the matter is closed.

7. What we don’t do

• No account or sign-in. The game doesn’t collect your name, email address, phone number, contacts, photos or precise location.
• No analytics, crash-reporting or tracking software of our own in the game.
• No request on iPhone for permission to track you across apps and websites.
• No online leaderboards or social features.
• No selling of your data, and no sharing beyond the parties named in this policy.
• No automated decision-making that has legal or similarly significant effects on you.

8. Overview and retention

9. Transfers outside the EEA

Google and RevenueCat may process data in the United States and other countries outside the European Economic Area. Such transfers are protected in one of two ways: by the EU–US Data Privacy Framework for certified companies, or by the European Commission’s Standard Contractual Clauses with extra safeguards where needed. You can ask us for more information about these safeguards.

10. Security

• The save file stays in the game’s private storage, protected by your device’s operating system.
• Data sent to Google and RevenueCat travels over encrypted connections (HTTPS).
• Only we can access the RevenueCat dashboard, and it is protected by strong authentication.
• The game doesn’t collect your name or contact details, so the data we can access can’t easily be linked to you.

11. Children

d0dge is meant for players aged 13 and older and is not directed at children under 13. We don’t knowingly collect personal data from children under 13.

In the EEA, you may need to be older to agree to personalised ads yourself (16 in the Netherlands). If you are younger than that, ask a parent or guardian before agreeing to personalised ads, or simply decline them. The game and its optional ads work either way.

If you believe a child has provided data through the game, contact us and we will help remove it.

12. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and get a copy;
• rectify data that is wrong;
• erase your data (“right to be forgotten”);
• restrict processing, and object to processing based on our legitimate interest;
• data portability: receive data you gave us in a machine-readable format;
• withdraw consent at any time, in the game under Settings › PRIVACY OPTIONS, without affecting earlier processing;
• lodge a complaint with a supervisory authority: in the Netherlands the Autoriteit Persoonsgegevens, or the authority where you live or work.

To use these rights, email apps@webvorming.nl.

• We answer within one month. For complex requests this can be extended by two months, and we’ll tell you if so.
• The game doesn’t tell us who you are, so we may ask for details that let us find your data, such as the date, store and product of a purchase.
• Requests are free, and these rights apply to all players, wherever you live.

For data that Google holds as its own controller, you can also go to Google directly through your Google Account or Google’s privacy policy.

13. Deleting your data

• Game data: uninstall the game. This deletes the save and your ad consent choice from your device. If you want those gone completely, also remove any device backups of the game.
• Purchase records: email us and we will delete your records at RevenueCat, except what we must keep by law. If you restore purchases afterwards, a new anonymous record is created.
• Advertising data: withdraw consent in Settings › PRIVACY OPTIONS. On Android, reset or delete your advertising ID. For data Google holds, use Google’s own controls.

There is no account to delete, because the game doesn’t use accounts.

14. Changes to this policy

We update this policy when the game or the law changes; the date at the top shows the latest version. If a change significantly affects how your data is used, we will announce it before it takes effect, in the game or in the app’s release notes. Where needed, we will ask for your consent again.

15. Contact

We have not appointed a data protection officer, as the law doesn’t require one for our activities. Send privacy questions to the address above.