1. Who we are
The controller of your personal data is Lidmila Maršálková (CodeWhiskers), Company ID 05684447, Jindice 115, 285 04 Rašovice, Czech Republic ("we", "us"). Contact for all privacy matters: hello@codewhiskers.app.
This policy covers the mobile game Constellaboo for Android (Google Play) and iOS (App Store) and the website constellaboo.com. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Czech law.
2. Playing without an account
You can play Constellaboo as a guest without creating an account. Your game data (level progress, stars, coins, boosters, decorated worlds, nickname, settings and profile photo) is then stored only on your device. The profile photo you pick from your gallery or take with your camera always stays on your device and is never uploaded to us.
3. What we process and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email address and sign-in identifier (if you sign in with an email link, Google, Facebook or Apple) | Your optional account, sign-in | Performance of a contract (Art. 6(1)(b) GDPR) | Until you delete your account |
| Game progress and settings backup, nickname and reached level (signed-in players) | Restoring progress on another device, leaderboard | Performance of a contract | Until you delete your account |
| Advertising identifier and ad impression data | Optional rewarded videos (e.g. an extra life or a continue) | Consent (EEA, UK, Switzerland); legitimate interest elsewhere | According to Google's policies |
| Purchase data (coin and booster packs, No Ads, purchase history) | Delivering and restoring purchases | Performance of a contract; legal obligation | As required by accounting and tax law (usually 10 years) |
| Emails you send us | Answering your questions and support requests | Legitimate interest | Up to 3 years after the request is resolved |
Sign-in
Signing in is optional. We use Firebase Authentication. If you choose Facebook, it is used for sign-in only – no app events are sent to Meta. Sign in with Apple lets you hide your real email address.
Progress backup and leaderboard
For signed-in players we back up game progress and settings in Google Cloud Firestore (database region in the EU). The leaderboard shows your nickname and the level you reached to other players.
Ads
Constellaboo only shows optional rewarded videos via Google AdMob. In the EEA, the UK and Switzerland we ask for your consent using Google's consent form (UMP); without consent, only non-personalized ads are shown. On iOS, the game also asks for tracking permission (App Tracking Transparency). You can change ad consent in the game under Settings → Ad privacy settings and tracking permission in your iPhone Settings. After the one-time No Ads purchase, rewards are granted without watching a video.
Purchases
In-app purchases are processed by the App Store or Google Play – we never see your card details. We use RevenueCat to verify purchases and let you restore them on another device.
No analytics in the game
The game itself does not use analytics or ad-measurement tools such as Google Analytics.
4. This website (constellaboo.com)
Website analytics: if you allow analytics cookies in the cookie banner, we load Google Analytics 4 (Google Ireland Ltd.) and Microsoft Clarity (Microsoft Ireland Operations Ltd.). They tell us how visitors use the page – which pages and sections they view, how far they scroll, which buttons, worlds, characters, screenshots and questions they click, which links they follow, how fast the page loads, and general information about the device, browser, approximate location (country/city derived from a shortened IP address) and the website you came from. Clarity also creates heatmaps and session recordings in which all text on the page is masked. We use this only to improve the website; we don't use it for advertising and don't combine it with game data.
Without your consent, neither script is loaded and nothing is sent. Cookies used: _ga, _ga_* (Google Analytics, up to 2 years), _clck, _clsk (Clarity, up to 1 year / 1 day). Analytics data is kept for 14 months. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via Cookie settings in the footer – measurement stops and the cookies are deleted. Your choice itself is stored in your browser's local storage for 12 months.
Server logs: our hosting provider (Vercel) processes technical data such as IP address and browser type to deliver the website securely. Legal basis: legitimate interest.
5. Processors and recipients
- Google Ireland Ltd. / Google LLC – Firebase Authentication, Cloud Firestore (EU region), AdMob, Google sign-in, Google Play
- Apple Inc. – Sign in with Apple, App Store payments
- RevenueCat, Inc. (USA) – purchase management
- Meta Platforms Ireland Ltd. – Facebook sign-in, only if you choose it
- Google Ireland Ltd. – Google Analytics on this website (with your consent)
- Microsoft Ireland Operations Ltd. – Microsoft Clarity on this website (with your consent)
- Vercel Inc. (USA) – hosting of this website
Transfers to the USA are based on the EU–US Data Privacy Framework or standard contractual clauses approved by the European Commission. We never sell your personal data.
6. Children
Constellaboo is intended for players aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe a child has given us personal data, contact us and we will delete it.
7. Your rights
Under the GDPR you have the right to:
- access your personal data and get a copy of it,
- have inaccurate data corrected,
- have your data deleted ("right to be forgotten"),
- restrict processing and object to processing based on legitimate interest,
- data portability,
- withdraw consent at any time (for example for personalized ads) without affecting earlier processing,
- lodge a complaint with the supervisory authority – the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.
To exercise your rights, email hello@codewhiskers.app. We will reply within one month.
8. Deleting your account
You can delete your account and backup directly in the game under Settings → Account → Delete account or by email. See Delete account for details.
9. Security
Data is transmitted over encrypted connections (HTTPS/TLS) and stored with providers that use industry-standard security measures. Access to data is limited to what is necessary to run the game.
10. Changes
We may update this policy when the game or the law changes. We will publish the new version on this page and, for significant changes, let you know in the game.