SPROUT GUARD
Privacy Policy.
This Privacy Policy explains how CodeEnsis Ltd ("we", "us", "our") handles information when you play Sprout Guard (Android package com.codeensis.sproutguard, "the Game").
- You do not need an account to play. We never ask for your name, email, phone number, contacts, photos or precise location.
- The Game has no ads and no in-app purchases.
- We collect a small amount of technical and gameplay data to understand how the Game is played and to fix crashes. We use three services for this: GameAnalytics, Google Firebase Analytics and Google Firebase Crashlytics.
- If you are in the EEA or the UK, we ask for your consent before analytics collection starts, and you can change your choice at any time.
- We do not sell your data and we do not use it for advertising.
1. Who is responsible for your data
The data controller is CodeEnsis Ltd. Company number: HE 492360 (Registrar of Companies, Nicosia). Registered address: Christodoulou Sozou 2, Eiffel Tower, Floor 3, Office 301, 1096 Nicosia, Cyprus. Email: [email protected]
2. What data we collect
We collect only the data listed below. It is collected automatically by the Game and the services it uses, and you do not type it in yourself.
| Category | What it is | Collected by |
|---|---|---|
| Device and app identifiers | A random ID created for your installation of the Game (for example the Firebase app instance ID, the Firebase installation ID, the Crashlytics installation ID and the GameAnalytics user ID). | GameAnalytics, Firebase |
| Gameplay and usage events | Things you do in the Game: sessions started and ended, runs started and finished, run length, level reached, upgrades and weapons chosen, progress in the Garden, screens viewed, and similar game events. | GameAnalytics, Firebase Analytics |
| Device and technical information | Device model and manufacturer, Android version, app version, language and region settings, screen size and basic performance data. | GameAnalytics, Firebase |
| Crash logs and diagnostics | When the Game crashes or reports an error: the stack trace, the state of the app at the time and device information. | Firebase Crashlytics, GameAnalytics (error events) |
| Approximate country | Your country or region, which is estimated from your IP address when data is sent. We do not keep your full IP address in our reports, and we never collect your precise (GPS) location. | GameAnalytics, Firebase Analytics |
The Player ID is a random identifier created by the Game on your device; it is attached to analytics and crash data so you can refer to it in privacy requests.
We do not collect your name, email address, phone number, contacts, photos, files, precise location, payment information or any other content from your device.
3. Why we use it and our legal basis
| Purpose | Data used | Legal basis (EEA/UK) |
|---|---|---|
| Analytics: to understand how players use the Game, measure retention, balance difficulty and decide what to improve. | Identifiers, gameplay events, device information, approximate country | Consent (Art. 6(1)(a) GDPR / UK GDPR). Outside the EEA/UK: our legitimate interest in improving the Game. |
| Crash reporting and stability: to find and fix crashes and bugs. | Crash logs, diagnostics, device information, installation ID | Legitimate interest (Art. 6(1)(f)) in providing a working and secure Game. |
| Legal compliance: to answer requests and meet legal obligations. | Only what is needed | Legal obligation (Art. 6(1)(c)) |
We do not use your data for advertising, for building advertising profiles or for automated decisions that have legal or similar effects on you.
4. Your consent choice (EEA and UK)
When you first open the Game in the European Economic Area or the United Kingdom, we show a consent dialog before any analytics data is sent.
- If you accept, analytics collection by GameAnalytics and Firebase Analytics is turned on.
- If you decline, analytics collection stays off. You can still play the full Game.
- You can change your choice at any time in the Game under Settings > Statistics. Withdrawing consent does not affect processing that happened before you withdrew it.
We detect whether you are in the EEA or UK from the country of your SIM card, or if that is not available, your mobile network, or if that is not available, your device's region setting. If the country cannot be determined, we ask for consent.
5. Who we share data with
We do not sell or rent your personal data. We share it only with the service providers who process it for us under contract:
- GameAnalytics ApS (Denmark) and its affiliates, including GameAnalytics Limited (United Kingdom): game analytics. Privacy information: gameanalytics.com/trust/privacy-notice
- Google LLC / Google Ireland Limited, through Firebase Analytics and Firebase Crashlytics: analytics and crash reporting. Privacy information: firebase.google.com/support/privacy
We may also disclose data if required by law, to protect our rights, or as part of a merger or sale of our business, in which case this policy will continue to apply to your data.
6. International transfers
Our service providers may process data outside your country, including in the United States. Where data leaves the EEA or UK, the transfer is protected by an adequacy decision (such as the EU-U.S. Data Privacy Framework, where the provider is certified) or by the European Commission's Standard Contractual Clauses and the UK Addendum.
7. How long we keep data
| Data | Retention |
|---|---|
| Firebase Analytics user-level and event-level data | 2 months (the retention setting in our Google Analytics property). Aggregated reports that cannot identify you may be kept longer. |
| Firebase Crashlytics crash data | 90 days |
| GameAnalytics data | Raw event data: 1 month. Processed analytics data: up to 12 months on a rolling basis (some player-level lookup data up to 18 months), after which it is deleted or anonymised. Aggregated, anonymous statistics may be kept longer. |
| Emails you send us | Up to 2 years after we answer, unless the law requires longer |
Game progress (your Garden, unlocks and settings) is stored only on your device. It is deleted when you uninstall the Game or clear its data.
8. Security
Data sent by the Game to our service providers is encrypted in transit (HTTPS/TLS). Access to analytics dashboards is limited to the people at CodeEnsis Ltd who need it and is protected by individual accounts.
9. Children
Sprout Guard is a general-audience game. It is not directed at children under 13 (or under the minimum age of digital consent in your country, which can be up to 16 in the EEA), and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us at [email protected] and we will delete it.
10. Your rights
Depending on where you live, including under the GDPR, the UK GDPR and US state privacy laws such as the CCPA/CPRA, you may have the right to:
- access the personal data we hold about you;
- correct it;
- have it deleted;
- restrict or object to its processing;
- receive it in a portable format;
- withdraw consent at any time (see section 4);
- complain to a data protection authority. In the UK this is the Information Commissioner's Office (ico.org.uk). In the EEA it is the authority in your country.
Because the Game has no accounts, we cannot link data to you by name. To make a request, email [email protected] and include the Player ID shown in the Game under Settings > Player ID. We will answer within one month. You can also stop all future collection at any time by withdrawing consent (EEA/UK) or by uninstalling the Game.
We do not sell or "share" personal data for cross-context behavioral advertising, as those terms are defined in the CCPA.
11. Changes to this policy
We may update this policy, for example when we add new features such as the upcoming Night Garden mode, or if we ever add ads, purchases or accounts. We will change the "Last updated" date and, for significant changes, tell you in the Game.
12. Contact
CodeEnsis Ltd, Christodoulou Sozou 2, Eiffel Tower, Floor 3, Office 301, 1096 Nicosia, Cyprus. Email: [email protected]