Last updated: 29 September 2026
Effective date: 1 July 2023
This Privacy Policy explains how CRAFTPLAY Ltd ("CRAFTPLAY", "we", "us" or "our") processes personal data in connection with our games, applications, websites and related services (together, the "Services").
This Privacy Policy provides information about our data-handling practices. It does not, by itself, constitute a request for your consent. Where consent is required, we request it separately before carrying out the relevant processing. You may withdraw that consent as explained in this Privacy Policy.
Information Collection and Use
CRAFTPLAY designs its Services to minimise the personal data handled directly by CRAFTPLAY. Our applications do not require a CRAFTPLAY account or CRAFTPLAY cloud sign-in.
Depending on the Service, device, distribution platform and your privacy choices, the platforms and software development kits ("SDKs") described below may process device, technical, usage, transaction or advertising-related information. Information may also be processed when you contact us or visit our websites.
Our Services are intended only for users aged 18 years or over.
Controller
For processing activities for which CRAFTPLAY determines the purposes and means of processing, the data controller is:
CRAFTPLAY Ltd
11 Stratigou Papagou
Limassol, Cyprus 3091
Email: info@craftplay.studio
Company registration number: HE 437970
Privacy contact: info@craftplay.studio
Some providers process personal data on our behalf. Others act as independent controllers for processing activities that they determine themselves. These roles are explained further under "Third-Party Service Providers" and in the applicable providers' privacy notices.
Scope
This Privacy Policy applies to CRAFTPLAY games, applications, websites and related Services for which CRAFTPLAY publishes or refers to this Privacy Policy.
It does not replace the privacy notices of Google, Apple or other independent third-party services. When you interact directly with a third-party platform, its processing may also be governed by its own privacy notice.
Third-Party Service Providers
We use third-party providers to support the functionality, analytics, diagnostics, advertising and other operations described in this Privacy Policy.
Providers that process personal data on our behalf act under our instructions and applicable data-processing agreements. Other providers may act as independent controllers for processing activities that they determine themselves.
CRAFTPLAY remains responsible for processing for which it acts as controller, including processing carried out on its behalf by service providers. Independent controllers are responsible for their own processing as described in their privacy notices. A reference to a provider's privacy notice does not replace CRAFTPLAY's own responsibilities.
No CRAFTPLAY accounts or cloud sign-in
Our applications do not offer CRAFTPLAY user accounts or CRAFTPLAY cloud authentication. We do not maintain an app-user profile database on our own application servers.
You may use a Google Play, Apple App Store or other platform account to download an application, make purchases or use platform features. These are not CRAFTPLAY accounts.
The absence of a CRAFTPLAY account or user-profile database does not mean that no personal data is processed. Personal data may still be processed through the providers described below or when you contact us.
Personal data stored directly by CRAFTPLAY
CRAFTPLAY does not maintain or store application-user personal data in a CRAFTPLAY-hosted user database or on CRAFTPLAY-operated application servers. In particular, we do not maintain game-user profiles containing names, email addresses, passwords or cloud-authentication credentials.
This statement concerns our application-server architecture. It does not exclude correspondence handled through our email provider, processing by SDK providers on our behalf, or processing by independent platform providers. The applicable retention and deletion practices are described below.
Information you provide when contacting us
If you choose to contact CRAFTPLAY, for example by sending an email to info@craftplay.studio, we receive the information contained in your communication, such as:
- your email address or other contact details that you provide;
- the contents of your message;
- technical or application information you choose to include; and
- attachments or other information you voluntarily provide.
CRAFTPLAY does not require payment-card numbers, passwords or account credentials when handling privacy or support requests. Please do not include them in your message.
Information that third-party platforms and SDKs may process
The categories processed depend on the relevant application, operating system, enabled integrations and your privacy choices:
- Device and technical information: device model, operating-system version, application version, language, network information, IP address and device-level or application-level identifiers.
- Application usage and gameplay information: application launches, sessions, interactions with screens or features, gameplay events and progression.
- Crash and diagnostic information: crash logs, stack traces, application performance, loading time, latency, frame rate, device state and related diagnostics.
- Purchase and entitlement information: transaction or entitlement information processed in connection with purchases, subscriptions where offered, promotional entitlements and pre-registration rewards. CRAFTPLAY applications may receive information needed to provide purchased or awarded digital content.
- Advertising information: advertising identifiers, device information, advertisement impressions and interactions, and information used to measure advertising or, where enabled and legally permitted, personalise it.
- Privacy choices: consent status and the privacy preferences communicated through the relevant privacy-message or consent mechanism.
- Website information: IP address, browser or device information, technical logs, and cookies or similar identifiers processed by website hosting providers and any website technologies actually enabled.
- Approximate location: advertising or analytics providers may derive an approximate country or region from an IP address. This is different from precise location obtained through GPS or a device location permission.
Third-Party Platforms and Technologies.
The following platforms and technologies are used in connection with the relevant Services. Their applicability depends on the application and platform.
Platform or technology | Function | Privacy information |
Google Play / Google Play Services | Android distribution and platform functionality, depending on the service used. | |
Apple App Store | Application distribution, platform purchases and related store functionality. | |
Firebase Crashlytics | Crash reporting and diagnostics. | |
ByteBrew Analytics | Application and gameplay analytics. | |
Google AdMob | Advertising and related measurement. | Google Privacy Policy and How Google uses information from sites and apps that use its services |
Google AdMob Privacy & messaging | Privacy messages and management of user choices. | Google Privacy Policy; About Privacy & messaging is product information, not a separate privacy policy. |
Purposes for which information may be processed
Where applicable to the relevant Service and provider, personal data is processed for the following purposes:
- to operate and provide application or platform functionality;
- to verify purchases, subscriptions where offered, promotional entitlements or digital rewards;
- to monitor application stability and technical performance and correct crashes or technical errors;
- to understand aggregate or pseudonymous usage of features and improve the Services;
- to maintain security, prevent fraud and investigate abuse;
- to provide advertising, measure its effectiveness or personalise it where enabled and legally permitted;
- to record and apply privacy choices;
- to answer support, privacy or legal enquiries; and
- to establish, exercise or defend legal claims and meet applicable legal obligations.
Legal bases for processing in the EEA and UK
Where the GDPR or UK GDPR applies and CRAFTPLAY acts as controller, the legal basis depends on the purpose and circumstances of the processing.
Processing purpose | Legal basis |
Providing functionality requested by you and fulfilling purchases or digital rewards | Performance of a contract, but only to the extent the processing is objectively necessary to provide the requested functionality or entitlement. |
Handling support and general enquiries | Performance of a contract where necessary to provide requested service support; otherwise our legitimate interest in responding to enquiries and resolving reported issues, subject to your rights and interests. |
Maintaining security and preventing fraud | Our legitimate interests in protecting users and the Services, where the processing is necessary and those interests are not overridden by your rights and interests. This does not replace consent where separate rules require it for access to information on a device. |
Diagnosing failures and analysing application usage | Consent where required for the relevant activity. |
Advertising and related measurement | Consent where required for the relevant activity. |
Complying with statutory duties, including applicable privacy-request obligations | Compliance with the relevant legal obligation. |
Establishing, exercising or defending legal claims | Our legitimate interest in protecting our legal rights, subject to your rights and interests, or compliance with a specific legal obligation where applicable. |
Advertising, analytics and tracking choices
Where required by applicable law, we request consent before enabling the relevant advertising, analytics, tracking or device-access activity. The precise processing and available choices depend on the application and jurisdiction.
We use Google AdMob Privacy & messaging. for privacy messages in applications in which that functionality is implemented.
Apple tracking permission: Where an application performs tracking as defined by Apple, or accesses the advertising identifier in circumstances requiring permission, that activity requires permission through Apple's AppTrackingTransparency framework. A choice in another consent interface does not override the user's Apple tracking-permission setting.
Website cookies and similar technologies: Website privacy choices are separate from in-app choices.
Recipients and service providers
Personal data may, where applicable, be processed by or disclosed to:
- application-store and platform providers such as Google and Apple;
- analytics, crash-reporting and diagnostics providers;
- advertising, attribution or mediation providers;
- website hosting and website analytics providers;
- email or communications providers when you contact CRAFTPLAY;
- professional advisers where reasonably necessary; and
- public authorities, regulators or courts where disclosure is legally required.
CRAFTPLAY does not sell users' personal data in exchange for money. This statement does not, by itself, mean that every advertising-related disclosure falls outside the definitions of "sale", "sharing" or targeted advertising under applicable US state privacy laws.
International transfers
Although CRAFTPLAY does not operate application-user personal-data storage servers, providers may process information outside Cyprus, the European Economic Area ("EEA") or the United Kingdom.
Where CRAFTPLAY is responsible for a restricted international transfer, an appropriate legal transfer mechanism and any necessary additional safeguards must apply. Depending on the transfer, this may be an applicable adequacy decision or approved contractual safeguards. Transfers subject to UK law require an applicable UK transfer mechanism.
You may contact info@craftplay.studio for information about safeguards applicable to transfers for which CRAFTPLAY is responsible, including how to obtain a copy where applicable.
Retention
CRAFTPLAY does not maintain an application-user personal-data database on its own application servers. Retention also concerns data held by providers on our behalf and any copies or exports that we hold.
Support correspondence. We retain correspondence for the time needed to resolve the enquiry and handle reasonably related follow-up. We then delete it unless particular records remain necessary to comply with a legal obligation or to establish, exercise or defend a legal claim. In those cases, we retain only the information relevant to that purpose.
Data processed on our behalf. Retention depends on the purpose, applicable service configuration and any legal obligation to retain particular records. Data is not retained indefinitely merely because it is held by a provider rather than on CRAFTPLAY servers.
Category | Applicable period or retention criteria |
Crash and diagnostic data | Firebase Crashlytics retains crash stack traces, extracted minidump data and associated installation identifiers for 90 days before beginning their removal from its live and backup systems. This period applies to data retained within Crashlytics and does not determine the retention of any separately exported copies. (Firebase) |
ByteBrew analytics and associated identifiers | ByteBrew’s published retention period for End User Data is up to 24 months, subject to different developer instructions and the exceptions described in its Privacy Policy, including legal, regulatory, tax and permitted business purposes. Any retention for which CRAFTPLAY is responsible must remain necessary for the disclosed purpose and comply with applicable law. This period does not determine the retention of separately exported copies. (ByteBrew Documentation) |
Privacy-choice and consent records | Current privacy-choice records are retained for the period needed to remember and apply your choices. They are updated when you change your preferences or when a renewed choice is required. Where evidence of consent is retained for CRAFTPLAY, it is kept while processing relies on that consent. After the relevant processing ends, only the minimum records necessary to meet an applicable legal obligation or address a related complaint or legal claim are retained, for the period required by that obligation or the applicable limitation period. Such records are not used to continue consent-based processing after consent has been withdrawn. |
Purchase and reward-entitlement records held for CRAFTPLAY | Where such records are retained for CRAFTPLAY, they are kept for the period necessary to verify and fulfil the purchase or reward, maintain or restore the relevant entitlement where supported, and prevent duplicate fulfilment while the entitlement remains capable of being claimed. Records needed to handle a refund, complaint or dispute are retained until that matter is resolved and any applicable legal retention requirement has ended. Records that are no longer needed are deleted or anonymised. Transaction records held independently by the relevant app store are subject to that platform’s own retention practices. |
Website logs, cookies and analytics | Our website is built and hosted using Tilda. Where Tilda’s built-in statistics are enabled, reports covering the previous 12 months are available in the statistics dashboard. This reporting window does not establish a deletion deadline for underlying technical logs or backup copies. |
Deletion
You may request deletion of personal data for which CRAFTPLAY is responsible, including personal data processed on our behalf by service providers, subject to applicable legal conditions and exceptions.
To submit a request, contact info@craftplay.studio and identify the application and platform concerned. We may ask for limited additional information reasonably necessary to locate the relevant data and verify your request. Do not send passwords or payment-card information. You do not need to create a CRAFTPLAY account to make a request.
Where a request concerns data controlled independently by Google, Apple or another provider, you may need to use that provider's privacy tools or contact it directly. This does not limit CRAFTPLAY's obligations for processing for which it is responsible.
We respond within the time limits required by applicable law. Where a legal exception prevents deletion of particular information, we explain the applicable reason as required by law.
Your rights in the EEA
Where the GDPR applies, and subject to its conditions and exceptions, you have the right to:
- request confirmation of processing and access to your personal data;
- request correction of inaccurate personal data;
- request deletion or restriction of processing;
- object to processing based on legitimate interests;
- receive certain personal data in a portable format where that right applies;
- withdraw consent at any time, without affecting the lawfulness of earlier processing; and
- lodge a complaint with a competent supervisory authority.
Right to object. You may object, on grounds relating to your particular situation, to processing based on legitimate interests. Where data is processed for direct marketing, you may object at any time, including to related profiling.
To exercise a right concerning processing for which CRAFTPLAY is responsible, contact info@craftplay.studio.
Because CRAFTPLAY does not maintain user accounts or a user database, we may not be able to identify data relating to you from an app installation alone. Where necessary and permitted by law, we may request information sufficient to locate the data and verify the request, without collecting more than reasonably necessary.
You may complain to the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus or another competent supervisory authority, including in the EU country of your habitual residence, place of work or the alleged infringement. You do not have to contact us before exercising a right to complain to an authority.
Information for users in the United Kingdom
Where UK data-protection law applies, you have applicable rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent, subject to the conditions and exceptions of that law.
Privacy requests may be sent to info@craftplay.studio. You may also complain to the UK's competent data-protection supervisory authority, the Information Commissioner's Office (ICO).
Information for residents of the United States
US state privacy rights differ by state and apply where the relevant law covers CRAFTPLAY and the processing concerned.
Where applicable, these rights include access or knowledge, correction, deletion, portability, opt-out of sale or sharing, targeted advertising or specified profiling, rights concerning certain uses of sensitive information, and protection against unlawful discrimination for exercising privacy rights.
Requests may be sent to info@craftplay.studio. The relevant advertising practices are addressed under "Recipients and Service Providers" and "Advertising, Analytics and Tracking Choices".
Children and minors
The Services are intended for persons aged 18 years or older. CRAFTPLAY does not intend to offer the Services to children or knowingly solicit personal data from persons under 18.
CRAFTPLAY does not provide child accounts, parent-managed accounts or user-profile functionality.
If CRAFTPLAY becomes aware that personal data from a person under 18 has been processed in circumstances requiring action by CRAFTPLAY, we take appropriate steps within our control, including deletion or requesting deletion from a processor where appropriate.
Please contact info@craftplay.studio with any concern about a minor's personal data.
Security
Where CRAFTPLAY controls personal-data processing, it takes technical and organisational measures appropriate to the nature and risk of that processing. Measures may include data minimisation, access controls, SDK review and secure data transmission, as relevant to the activity.
CRAFTPLAY expects providers processing personal data on its behalf to maintain appropriate safeguards. No method of electronic processing or transmission eliminates every possible security risk.
Automated decision-making, profiling and artificial intelligence
CRAFTPLAY does not use personal data, including through AI systems, to make decisions based solely on automated processing that produce legal or similarly significant effects for users.
The absence of such decisions is distinct from advertising-related profiling. The advertising practices and choices relevant to each application are described under "Advertising, Analytics and Tracking Choices".
If CRAFTPLAY introduces materially different automated decision-making, profiling or AI-based personal-data processing, we will provide the required information and apply any additional safeguards or consent requirements before the new processing begins.
Links and third-party services
A Service or CRAFTPLAY website may contain links to third-party websites or services operating under their own privacy notices and terms.
This Privacy Policy does not govern processing performed independently by those parties. This does not exclude CRAFTPLAY's responsibilities for selecting and integrating technologies or for processing carried out on its behalf.
Changes to this Privacy Policy
CRAFTPLAY may update this Privacy Policy when its Services, technologies, providers, legal obligations or privacy practices change.
The "Last updated" date will be revised when the policy changes. Where applicable law requires additional notice or consent for a material change, we provide that notice or obtain the required consent before applying the new processing.
Contact Information
For privacy questions, requests or concerns, contact:
CRAFTPLAY Ltd
11 Stratigou Papagou
Limassol, Cyprus 3091
Email: info@craftplay.studio
