Privacy Policy

Information Collection and Use

The Application does not ask for your name, email address, or any other contact details, and it has no accounts. The Service Provider does not run its own servers for the Application and does not use analytics or crash-reporting services in it.

Information connected to the Application is handled in the following ways:

• Your scores, embers, trails, missions, and settings are stored only on your device. See "On Your Device" below.
• Google processes device and advertising information when ads are requested or shown. See "Advertising" below.
• If you email the Service Provider, your email address and the contents of your message are used to answer you.

The Application has no in-app purchases, does not send notifications, and has no sharing features.

The Application requests only these Android permissions:

• Internet and network state, so it can load ads.
• Advertising ID, so Google's ads SDK can use your device's advertising ID where you allow it.
• Vibration, for optional haptic feedback, which you can turn off in Settings.

The Application does not request access to your location, camera, microphone, contacts, photos, or files.

Advertising

The Application is free to play and shows ads through Google AdMob:

• Rewarded videos you can choose to watch for in-game benefits: relighting your lantern once per night after it goes out, doubling the embers earned at the end of a night, doubling the nightly gift, or getting 25 embers from the Trails screen, up to 5 times a day.
• Occasional full-screen ads between nights. They never appear during a night, not before you have finished 3 nights in a session, at most once every 3 finished nights, and never within 3 minutes of another ad.

The Application does not show banner ads. It asks Google to limit ads to content suitable for teens.

When ads are requested or shown, the Google Mobile Ads SDK may collect and process information such as:

• Your device's advertising ID.
• Your IP address, which can indicate your approximate location.
• Device and operating system details, such as model, language, and screen size.
• Information about the Application and about how you interact with ads, such as views and taps.

Google uses this information to deliver and measure ads, limit how often the same ad appears, and detect fraud and abuse. Where you allow it, Google also uses it to show personalised ads. Google acts under its own privacy policy, linked in "Third Party Access" below.

Your Ad Choices

Where the law requires it, for example in the European Economic Area, the United Kingdom, and Switzerland, the Application uses Google's User Messaging Platform to ask for your consent before ads are requested. When those privacy options apply to you, a "Privacy choices" button in the Application's Settings lets you review or change your choices at any time.

You can also reset or delete your advertising ID, or opt out of personalised ads, in your Android device settings. You can manage how Google personalises ads in My Ad Center.

Data On Your Device

The Application saves the following in its private storage on your device:

• Your best score, embers, and the number of nights you have played.
• The trails you own and the one you have equipped.
• Your current missions and mission levels.
• Lifetime totals of fireflies caught, golden fireflies caught, and colors cleared.
• Your nightly gift streak and the date you last collected it.
• How many rewarded videos you have watched for embers today, and counters that pace how often full-screen ads appear.
• Which tips have been shown, whether the tutorial is done, and your settings for sound, vibration, and color shapes.

This data is not sent to the Service Provider and is excluded from Android device backups. It is deleted when you clear the Application's data or uninstall it.

Legal Bases

Where the GDPR or UK GDPR applies, information is processed on these legal bases:

• Your consent, for personalised advertising and for storing or accessing information on your device for advertising where consent is required.
• Legitimate interests in keeping the Application free, measuring ads, and preventing fraud, for non-personalised advertising.
• Legitimate interests in helping you, for answering messages you send.

Your Rights

Depending on where you live, you may have the right to:

• Access, correct, or delete your personal data.
• Restrict or object to how it is used.
• Receive a copy of your data.
• Withdraw consent at any time.
• Complain to your local data protection authority.

The Service Provider does not keep gameplay or advertising data on its own servers. So you can act on most of these rights directly: clear the Application's data, change your "Privacy choices", or use your device's advertising ID settings. For anything else, including help with information Google processes, contact the Service Provider at contact@zipistudios.com.

Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have these rights:

• To know what personal information is collected.
• To delete or correct it.
• To opt out of the sale or sharing of personal information.
• Not to be discriminated against for using these rights.

The Service Provider does not sell personal information for money. Information collected by the ad SDK for personalised advertising may count as "sharing" under California law. You can opt out by turning off ad personalisation or deleting your advertising ID in your device settings, or by contacting contact@zipistudios.com.

Third Party Access

The Application relies on third-party services that handle data under their own privacy policies:

• Google Privacy Policy, which covers Google AdMob and Google's User Messaging Platform.
• How Google uses information from sites or apps that use its services.
• Google Play Terms of Service.

The Service Provider may disclose information it holds, such as support emails:

• As required by law, such as to comply with a subpoena, or similar legal process.
• When it believes in good faith that disclosure is necessary to protect its rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
• With trusted service providers who work on its behalf, do not have an independent use of the information, and have agreed to follow this privacy policy.

International Data Transfers

Google may process information in countries other than your own, including the United States. Where the law requires safeguards for these transfers, they rely on recognised mechanisms. These include adequacy decisions and Standard Contractual Clauses approved by the European Commission. Data protection laws in other countries may differ from those where you live.

Opt-Out Rights

You can stop the Application from processing information at any time by uninstalling it. Uninstalling removes the data stored on your device. It does not delete information Google has already received, which Google keeps under its own policies.

Data Retention Policy

• Data on your device: kept until you clear the Application's data or uninstall it.
• Support emails: kept for as long as needed to help you, and for no more than 24 months after the conversation ends, unless the law requires longer.
• Advertising information held by Google: kept according to Google's own retention policies.

Children

The Application is not directed at children under 13 and is not part of Google Play's Families program. The Service Provider does not knowingly collect personal information from children. If you are below the age at which you can consent to data processing in your country, please use the Application only with a parent or guardian's permission.

If you are a parent or guardian and believe your child has sent the Service Provider personal information, please contact contact@zipistudios.com. It will be deleted.

Security

Data saved by the Application stays in its private storage, which Android's app sandbox protects from other apps. Google's SDKs use encrypted connections to communicate with Google's services. No method of storage or transmission is completely secure, but the Service Provider keeps the information it handles to a minimum.

Data Breach Notification

If a data breach occurs that affects your personal data, the Service Provider will notify you as the law requires. Where required, that notice will explain what happened and what is being done about it.

Changes

This privacy policy may be updated from time to time, for example when the Application's features or services change. Updates are posted on this page with a new "Last updated" date. Where the law requires it, the Service Provider will ask for your consent to material changes before they take effect.

This privacy policy is effective as of 2026-09-15.

Your Consent

Where processing is based on consent, you give it through the consent form and the "Privacy choices" option. You may withdraw consent at any time, and doing so does not affect processing that happened before you withdrew it.

Contact Us

If you have any questions about privacy while using the Application, or about these practices, please contact ZiPiStudios at contact@zipistudios.com.