Privacy Policy
Aqua Sort: Water Color Puzzle
This Privacy Policy explains what information Aqua Sort: Water Color Puzzle (operated by Erebos Lab) collects, how it is used, who it is shared with, and the choices you have. By using Aqua Sort: Water Color Puzzle you agree to the practices described here.
Data-safety summary
At a glance, here is the data the app collects, whether it is linked to your identity, and whether it is used to track you across other companies’ apps and websites.
| Data category | Linked to you | Used for tracking | Purpose |
|---|---|---|---|
| Identifiers (Device ID) | No | Yes | Serve and measure ads through Google AdMob, only after the Google UMP consent flow is resolved and, on iOS, the App Tracking Transparency prompt is answered. Used for third-party advertising and analytics. |
| Usage Data (Advertising Data) | No | Yes | Third-party advertising and analytics by Google AdMob. |
| Usage Data (Product Interaction) | Yes | Yes | App functionality for events and competitions; advertising and analytics for the AdMob part. |
| Location (Coarse) | No | Yes | Third-party advertising. No precise location is collected. |
| Diagnostics | No | No | Analytics for ad delivery stability. The game itself ships no crash reporter. |
| Identifiers (User ID) | Yes | No | App functionality: restore your cloud save and in-app purchases. There is no email, password or login. |
| Contact Info (Name, Optional) | Yes | No | Show your name on the star leaderboard. |
| User Content (Gameplay) | Yes | No | App functionality: leaderboard, cloud save and competitions on the Erebos Lab arcade service (arcade-api.ereboslab.com). |
| Purchases | Yes | No | Manage in-app purchases through Apple/Google via RevenueCat. |
What we collect
Identifiers (Device ID)
- Advertising identifier (IDFA only after you allow App Tracking Transparency; IDFV / Android Advertising ID)
Serve and measure ads through Google AdMob, only after the Google UMP consent flow is resolved and, on iOS, the App Tracking Transparency prompt is answered. Used for third-party advertising and analytics.
Usage Data (Advertising Data)
- Ad impressions, clicks and ad interaction data
Third-party advertising and analytics by Google AdMob.
Usage Data (Product Interaction)
- Ad interactions (Google AdMob)
- Weekly event and competition progress (Erebos Lab arcade service, only if you turn on cloud features)
App functionality for events and competitions; advertising and analytics for the AdMob part.
Location (Coarse)
- Approximate location inferred from IP address by Google AdMob
Third-party advertising. No precise location is collected.
Diagnostics
- Crash data and performance data collected by the Google AdMob SDK
Analytics for ad delivery stability. The game itself ships no crash reporter.
Identifiers (User ID)
- Random cloud account id and recovery key (only if you turn on cloud save, events or competition)
- RevenueCat anonymous app user id
App functionality: restore your cloud save and in-app purchases. There is no email, password or login.
Contact Info (Name, Optional)
- Leaderboard display name you type (optional, 20 characters, filtered for offensive words)
Show your name on the star leaderboard.
User Content (Gameplay)
- Leaderboard star score
- Cloud save backup
- Competition runs
App functionality: leaderboard, cloud save and competitions on the Erebos Lab arcade service (arcade-api.ereboslab.com).
Purchases
- Purchase history for non-consumable items and the optional Season pass
Manage in-app purchases through Apple/Google via RevenueCat.
What we do NOT do
- No email, phone number, password or login: the game is playable offline without any account.
- Progress, settings and the in-progress level are stored only on your device; the cloud recovery key stays in your device keychain.
- The arcade service sees your IP address only for rate limiting and does not store it with scores.
- You can delete your cloud account in the app (Cloud > Delete cloud account), which removes the server backup, event progress and competition results.
- We do not sell your personal information.
Third parties who process your data
We share data only with the processors below, each bound to use it only to provide their service to us. Items marked "unverified" are placeholders we must confirm and name before this policy is treated as final.
- Google AdMob — Rewarded and interstitial ads in the free version, after consent
- Google User Messaging Platform (UMP) — Ad consent (GDPR/US state privacy) before any ad loads
- Apple App Tracking Transparency — iOS permission prompt before the advertising identifier is used
- RevenueCat — In-app purchases and entitlements via Apple/Google
- Erebos Lab arcade service (arcade-api.ereboslab.com, Cloudflare Workers + D1) — Leaderboard, optional cloud save, weekly events and competitions
How we use your information
- Operate and personalize the app and its core features.
- Maintain your account, authenticate sessions, and provide support.
- Process payments and manage subscriptions/entitlements.
- Keep the service secure and prevent fraud and abuse.
- Comply with legal obligations and enforce our Terms of Service.
- Improve the product through aggregated, de-identified analytics.
Data retention
We keep personal information only as long as needed to provide the service. Account data is retained while your account is active and for a short recovery window after deletion, then deleted or anonymized. Billing records are retained as required by tax and accounting law. Backups are purged on a rolling basis.
Your rights and choices
Depending on your jurisdiction you may access, correct, export, or delete your personal data, object to or restrict certain processing, and withdraw consent. You can delete your account and its server-side data from within the app, or by emailing us. We respond within 30 days.
Children’s privacy
The app is not directed to children under 13 (under 16 in the EEA/UK) and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.
Security
We use industry-standard safeguards including TLS in transit, encryption at rest for sensitive fields, hashed passwords, least-privilege access, and audit logging. No system is 100% secure; please use a strong, unique password.
Changes to this policy
We may update this policy. Material changes will be reflected by a new "Last updated" date and, where required, announced in the app.
Contact
Privacy questions? Email [email protected].