Español

Last updated: 25 September 2026

1. Who is responsible

Sunsprout is a mobile puzzle game developed by Jorge Andreu Royo, an independent developer and the controller of your data. You can write to midwayofdraenor@gmail.com with any privacy question.

This policy explains what data the game processes, why, who it is shared with, how long it is kept and how you can exercise your rights.

2. What data we process

2.1. Without an account (as a guest)

You can play without signing up. Your progress, dewdrops, purchases and settings are saved on your own device. To show you on the leaderboard, the game creates an anonymous account with a random identifier and an automatically generated name and avatar (for example, "Serene Fern 42"). We don't ask for your email, name or any other data for this.

2.2. Account (optional)

If you sign in with Apple, Google or Discord, the provider gives us a user identifier, your email address and, if you share it, your name or username (Apple lets you hide your real email). We use them to keep a copy of your progress in the cloud and restore it on another device. We never receive or store your password. Your name and email never appear on the leaderboard.

2.3. Progress and leaderboard

Completed levels, golden flowers and, in weekly challenges, your moves, your time and the solution you submit, so we can check that it is valid. The leaderboard only shows the generated name and avatar.

2.4. Purchases

Purchases are made through the App Store or Google Play. We store what you bought, when, and the transaction identifier provided by Apple or Google, so we can validate, activate and restore it on your devices. We never see your card or payment details.

2.5. Advertising

The free version shows ads from Google AdMob. Google's SDK may collect device identifiers (such as the advertising ID), your IP address, ad interaction data and diagnostic data to show ads, measure their performance and prevent fraud.

• In the European Economic Area, the United Kingdom and Switzerland we ask for your consent with Google's message before your data is used for personalised ads. If you don't consent, ads are not personalised. You can change your choice at any time in Settings.
• On iPhone, the system asks whether you allow tracking. If you don't, the game does not access Apple's advertising identifier.
• If you buy "Remove ads", you won't see ads between levels. Rewarded videos are always optional.

2.6. Usage statistics

To tune the difficulty and fix bugs we record gameplay events: levels started and completed, hints used, times, ads shown and purchases, together with the game version, device model and system version. They are linked to your player identifier, not to your name or email. We don't use third-party analytics SDKs.

2.7. Crash reports

If you have allowed it in your device settings, Apple and Google may share anonymous reports with us when the game closes unexpectedly.

2.8. Preferences

Sound, vibration, the chosen theme and other preferences are stored on your own device.

3. Why we use your data and on what legal basis

• Providing the service (performance of a contract): the game, the account, the cloud copy, the leaderboard and activating and restoring your purchases.
• Personalised ads and tracking on iPhone (consent): you can withdraw it at any time in Settings or in your device settings.
• Non-personalised ads, statistics and security (legitimate interest): funding the free version, improving the game, detecting cheating and protecting the service from abuse.
• Legal obligations: keeping the information required by law, for example about purchases.

4. Who we share it with

4.1. Other players

They see your generated name, your avatar and your results on the leaderboard. Nothing else.

4.2. Providers

• Supabase (processor): database, sign-in and server functions. Servers in the European Union (Ireland).
• Google: AdMob for advertising, Google sign-in and Google Play purchases. For advertising, Google also processes data under its own privacy policy.
• Apple: Sign in with Apple and App Store purchases.
• Discord: optional sign-in with Discord, under its own privacy policy.

Some of these providers may process data outside the European Economic Area. In that case, transfers are covered by the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

4.3. We do not sell your data

We do not sell, rent or give your personal data to third parties for their own purposes.

5. How long we keep it

• Account, cloud copy and leaderboard: while you keep the account, or until you delete it.
• Inactive anonymous guest accounts: deleted after 24 months without playing.
• Usage statistics: 14 months at most.
• Purchase records: as long as the law requires (up to 6 years in Spain), with no data that identifies you beyond the transaction identifier.

6. Your rights

You can ask to access, correct or delete your data, object to or restrict its processing, and receive it in a portable format. You can also withdraw your consent to personalised ads in Settings.

Deleting your account. In the game, go to Settings → Account → Delete account. The account, the cloud copy, your leaderboard entries and your statistics are deleted immediately; if you signed in with Apple, access is revoked too. The progress saved on your device stays (you can erase it with "Reset progress" or by uninstalling the game), and purchases stay with your Apple or Google account, so they come back with "Restore purchases". If you can't access the game, follow the steps on this page.

To exercise these rights, email midwayofdraenor@gmail.com from the address linked to your account or tell us your player name. We reply within one month at most. If you disagree with our answer, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the authority in your country.

7. Security

All communication with our servers is encrypted. The database applies per-user access rules: each player can only read their own data. Even so, no system is completely secure.

8. Children

Sunsprout is for all ages, children included. When you start playing we ask for the year of birth in a neutral way. We only keep whether the player is below or above the minimum age, never the date. That age is 13, or your country's age of digital consent if it is higher (14 in Spain).

Below that age, the game runs in child mode:

• only non-personalised, child-appropriate ads, with no tracking, no advertising identifier and no iPhone tracking prompt;
• no sign-in or cloud save: the game is played as a guest;
• the leaderboard only shows a randomly generated name and an avatar; there is no chat or free text;
• usage statistics carry no advertising identifiers.

In-game purchases are handled by Apple and Google with their parental controls, for example "Ask to Buy" on iPhone or Google Play family approvals. We do not knowingly collect personal data from children. If you are a parent or guardian and want us to delete a child's data, write to midwayofdraenor@gmail.com.

9. Changes to this policy

If we change this policy, we will publish the new version on this page with its update date and, if the change is important, let you know in the game.