Mobile Games Privacy Policy

This Privacy Policy explains how Seneku Design ("we", "us", "our") handles information in connection with our mobile games for Android and iOS. It is written to meet the requirements of the EU and UK General Data Protection Regulation (GDPR), Google Play, Google AdMob and the Apple App Store.

Which apps this policy covers

This policy applies to the following Seneku Design mobile games and any future mobile title that links to this page:

Coilbloom — com.seneku.coilbloom (Android, iOS)
Curio Shelf — com.seneku.curioshelf (Android, iOS)
One-Line Factory — com.seneku.onelinefactory (Android, iOS)
Pocket Alchemist — com.seneku.pocketalchemist (Android, iOS)

Our PC game Vectorhythm and this website are covered by a separate privacy policy.

The short version

We do not operate accounts, profiles or player logins. You never give us your name or email to play.
Your saves, settings and progress are stored on your own device.
We do not currently include analytics or crash-reporting SDKs, and we do not build player profiles.
Our games show advertising supplied by Google AdMob. Google — not us — collects device and advertising identifiers to serve those ads. This is the main way personal data is processed in our games.
When you first open the game we ask your age. Players under 16 get no personalised advertising and no tracking, automatically — everywhere, not just where the law demands it.
In the EEA and the UK you are asked for consent before any personalised advertising, and you can change your answer at any time from inside the game.
We do not sell or share your personal information for money.

Who is responsible for your data

Seneku Design is the trading name of an independent one-person game studio based in Sweden. It is not a registered company — it is operated by a sole trader, and that individual is the data controller for the limited processing described in this policy. For questions, requests or complaints, contact us at senekudesign@gmail.com.

If you need the controller's full identity in order to exercise a legal right or bring a complaint to a data protection authority, email us and we will provide it.

Google acts as an independent controller for the advertising data it collects through the AdMob SDK, and Google and Apple act as controllers for purchase and payment data handled by their stores. That means those companies decide how they use that data, under their own privacy policies, which are linked below.

Data stored on your device

Our games save the following locally, on your device only:

Game progress and saves — levels, currency, unlocks and statistics.
Settings — audio, language, accessibility and control preferences.
Purchase entitlements — a record that, for example, "Remove Ads" is active.
Your advertising consent choices, stored by Google's consent SDK.
The outcome of the age question — a single yes/no value recording whether child treatment applies. Your date of birth and age are not stored.

None of this is transmitted to us. It is removed when you uninstall the game, though your device or platform backup (Google Drive backup or iCloud) may retain a copy under Google's or Apple's own terms.

Advertising (Google AdMob)

Our games are free and are funded by advertising. We use Google AdMob to show banner, interstitial and rewarded ads. To select, deliver, measure and protect those ads against fraud, Google and its advertising partners may process:

Advertising identifiers — your Android Advertising ID (AAID) or Apple Identifier for Advertisers (IDFA), which are resettable identifiers you control.
Device and app information — device model, operating system version, language, screen and network type, and the app showing the ad.
IP address, from which an approximate (typically city-level) location can be derived. Our games do not request GPS or precise location permission.
Ad interaction data — which ads were shown, viewed, clicked or completed.

We do not receive this data ourselves. We see only aggregate, non-identifying earnings and performance reports in the AdMob console.

The age question, and what it changes

Our games are made for a mixed audience — they are general-audience games that we know are also played by children. So the first time you open the game, before any ad is requested, we ask your age. Your answer is used once, to decide how advertising behaves, and:

If you are under 16, the game tells Google to treat you as a user below the age of consent. You get non-personalised ads only, no advertising profile is built from your use of the game, and you are never shown a tracking request. Ad content is also restricted to a general-audiences rating.
If you are over it, advertising works as described in the rest of this section, subject to the consent choices below.

We store only the yes/no outcome of that question on your device — we do not store, and do not send anywhere, your date of birth or your age. Advertising cannot start until the question has been answered.

Personalised vs non-personalised ads

In the EEA, the UK and Switzerland, the first time you open the game you are shown a consent message from Google's User Messaging Platform. Personalised advertising is only used if you agree to it. If you decline, you still get ads, but non-personalised ones — selected using general context rather than your interests. Declining does not limit the game in any way.

You can change or withdraw your choice at any time through the privacy options entry point in the game's Settings menu.

On iOS, Apple's App Tracking Transparency framework governs cross-app tracking separately. Where the game does not request tracking permission, ads served on iOS are non-personalised.

Google's own policies

Controlling ad tracking on your device

Android — Settings → Privacy → Ads, where you can reset or delete your advertising ID and opt out of ad personalisation.
iOS — Settings → Privacy & Security → Tracking, and Settings → Privacy & Security → Apple Advertising.

In-app purchases

Some of our games offer optional purchases, such as removing ads. Purchases are processed entirely by Google Play Billing on Android and Apple StoreKit on iOS.

We never see or store your payment details. Card numbers, billing addresses and your store account identity stay with Google or Apple.
Receipt validation. To confirm a purchase is genuine and to stop the same receipt being reused, the game sends the store's signed purchase receipt and its transaction identifier to a validation service we operate over HTTPS. That receipt is an opaque token issued by the store; it contains no name, email or payment information. We keep the transaction identifier only as long as needed to grant your entitlement and to prevent duplicate or fraudulent claims.
Restoring purchases works through your Google or Apple account — we do not hold a separate record of who bought what.

See the Google Privacy Policy and the Apple Privacy Policy for how the stores handle your purchase.

Analytics and diagnostics

Our mobile games do not currently include any analytics or crash-reporting SDK. No gameplay or diagnostic data is sent to us or to any third-party analytics vendor.

We may add an optional, opt-in diagnostics feature in a future update, to help us find crashes and difficulty spikes. If we do, it will be off by default and will require your consent before anything is sent; it will collect only gameplay events, technical crash and performance data, and a pseudonymous installation identifier that is not your advertising ID and is not linked to your identity; the data will go to our own servers rather than an advertising network; and we will update this policy and its "Last updated" date before that version ships.

What we do not do

We do not include third-party analytics or crash-reporting SDKs in our mobile games.
We do not operate player accounts, logins, leaderboards or online profiles in these games.
We do not ask for your name, email address, phone number or contacts.
We do not request precise location, camera, microphone or photo-library access.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising beyond the AdMob processing described above.

Legal bases for processing (EEA / UK)

Where the GDPR applies, we rely on the following legal bases:

Consent (Article 6(1)(a)) — for personalised advertising and the use of advertising identifiers where consent is required . You may withdraw consent at any time.
Performance of a contract (Article 6(1)(b)) — to deliver the game and to validate and grant an in-app purchase you have made.
Legitimate interests (Article 6(1)(f)) — to serve non-personalised advertising that funds a free game, to prevent fraud and invalid traffic, and to keep our games secure and working correctly.

Under Article 8, consent to personalised advertising cannot be given by a child below the age set by their country — between 13 and 16 across the EEA. We do not seek that consent from anyone under 16 at all: the age question resolves first, and personalised advertising is simply switched off for them rather than being offered and then declined. Using the top of that range everywhere means we never have to be right about which national threshold applies to a given player.

How long data is kept

On-device data — until you delete it in-game or uninstall the app.
Purchase transaction identifiers — kept only as long as necessary to maintain your entitlement and guard against duplicate claims.
Advertising data — retained by Google according to its own retention schedules, described in the Google Privacy Policy.

Your rights

If you are in the EEA or the UK, you have the right to access your personal data and to request its correction or erasure; to restrict or object to processing, including profiling for advertising; to data portability; and to withdraw consent at any time without affecting processing already carried out.

To exercise these rights:

For advertising data, the fastest route is the privacy options entry point in the game's Settings menu, plus your device's advertising ID controls described above. Because Google holds this data, requests about it are usually best directed to Google.
For anything we hold, email senekudesign@gmail.com. Note that we cannot identify individual players from the little data we hold, so we may need the transaction identifier from your store receipt to locate a purchase record.

You also have the right to lodge a complaint with your local data protection authority. In Sweden this is the Swedish Authority for Privacy Protection (IMY).

Children

Our games are suitable for children and are treated as mixed audience: made for everyone, and played by children too. We take that seriously rather than relying on a disclaimer that children should not be playing.

What we do for younger players

We ask before we advertise. The age question described above runs before any ad is requested, and advertising cannot start until it is answered.
No behavioural advertising to children. Players under 16 receive non-personalised ads only, and no advertising profile is built from their play.
No tracking requests. Under-age players are never shown Apple's App Tracking Transparency prompt, and cross-app tracking is not requested for them.
Restricted ad content. Ads are limited to a general-audiences content rating.
We collect nothing personal in the first place. There are no accounts, no names, no email addresses, no messaging between players, and no precise location — for players of any age.

The age that applies

We use a single threshold of 16, everywhere, rather than varying it by country.

The legal minimums differ: the Children's Online Privacy Protection Act (COPPA) sets it at 13 in the United States, it is 13 in the UK, and across the EEA each country sets its own anywhere between 13 and 16. Sixteen is the highest of those, so applying it everywhere means every player is treated at least as protectively as their own country requires. In practice that means players aged 13 to 15 get child treatment from us even in countries where the law would permit personalised advertising.

Parents and guardians

We do not knowingly collect personal information from a child. Because we operate no accounts and hold essentially nothing that identifies an individual player, there is usually nothing for us to look up or delete — the meaningful controls are the age question in the game, the privacy options entry point in its Settings menu, and your device's advertising ID controls described above.

If you believe your child has provided personal information to us, or you want to know what a game does before letting your child play it, email senekudesign@gmail.com. We will answer, and delete anything we hold.

In-app purchases are protected by the parental controls built into Google Play and the App Store. We recommend enabling purchase authentication on any device a child uses.

United States privacy rights

If you live in California or another US state with a comprehensive privacy law, you may have the right to know what personal information is collected, to request deletion, and to opt out of the "sale" or "sharing" of personal information for targeted advertising. We do not sell personal information for money. Where required, Google's consent SDK presents a US-state privacy notice, and you can opt out of ad personalisation through it and through your device's advertising settings. To make a request, email senekudesign@gmail.com.

International transfers

Google and Apple process data on servers in the United States and other countries. Where personal data is transferred out of the EEA or the UK, those providers rely on their own safeguards, including the European Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework.

Security

Our validation service is served over HTTPS and stores no payment data. Because we hold so little, the practical risk to you is low — but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy as our games change — for example if a new title adds a feature that processes data differently. When we do, we will revise the "Last updated" date above and post the new version at this address. This URL will remain stable.

Contact

Questions about this policy or your data? Contact Seneku Design at senekudesign@gmail.com.

This document is provided for transparency and does not constitute legal advice.