Privacy policy

1. Who this policy covers

This policy describes personal data handled by the individual developer identified above when you play FairyTale, use its online features, visit this website, or contact support. References to “we”, “us”, and “our” refer to that individual. Platform providers and service partners may also process data under their own policies.

This privacy notice explains data processing. Reading it or accepting the game terms is not, by itself, consent to every use of personal data.

2. Data used by the game

Payment card details are entered with the applicable store or payment provider, not into FairyTale's gameplay systems. Do not send passwords, full payment details or unrelated sensitive information in support messages.

Player names and competition results may be visible to other players on leaderboards. Choose a nickname that does not reveal private information.

3. Purposes and legal grounds

Essential account, save, competition, purchase and support processing is used to provide the features you request. Where applicable data-protection law requires a legal ground, processing necessary to deliver the game is based on performance of the relevant agreement; proportionate security, abuse prevention and request handling may be based on legitimate interests; required records may be kept to meet legal obligations.

Optional analytics, tracking or personalised advertising must rely on consent wherever required. A provider's separate processing may have its own legal grounds. Consent can be refused or withdrawn in Privacy settings; accepting game terms does not grant optional consent.

4. Services and recipients

• Unity Gaming Services: Authentication, Cloud Save, Cloud Code and Leaderboards support identity, cloud progress, server operations, support tickets and competitions.
• Google Play Games: supported Android sign-in and account linking.
• Google Play and Unity IAP: store purchases and entitlement processing.
• GameAnalytics: gameplay and session analytics.
• Google Firebase Analytics and Crashlytics: usage analytics and crash diagnostics.
• Unity LevelPlay and Unity Ads: advertising mediation and ad delivery. The networks serving a particular ad may also process data under their own privacy policies.
• Cloudflare: website hosting, delivery and security when the website is deployed.

Relevant provider information: Unity player privacy policy, GameAnalytics privacy resources, Firebase privacy information, Google privacy policy, and Cloudflare privacy policy.

Email support: messages sent to [email protected] are forwarded by Cloudflare Email Routing to a Gmail mailbox managed by the developer. Cloudflare and Google process email content and delivery information to route, store and protect correspondence. The private destination address is not published on this website.

Data may also be disclosed where legally required or necessary to protect rights and investigate abuse. Provider roles and permissions vary by service; this notice does not imply that all recipients act only on our instructions.

5. Your choices

Acceptance of the Terms of Use is separate from optional analytics and personalised advertising. The game offers an optional “Allow personalized ads” checkbox, off by default. You can continue without selecting it. In Privacy settings, you can change this choice and separately enable or disable optional usage analytics and crash reports, which are also off by default.

The advertising choice is passed to LevelPlay before advertising initialisation and when you save a changed choice. Refusing or withdrawing consent does not mean that all advertising-related data processing stops: providers may still process data needed to deliver, secure or measure non-personalised ads, subject to applicable law. Withdrawal does not erase data already collected; see Account & data deletion for requests concerning existing records.

You can manage notification permissions and available advertising controls in your device settings. Local notification reminders are scheduled on the device; the inspected notification feature does not create a remote push subscription. Opening a notification can produce an analytics event when analytics collection is enabled.

For data-rights or consent questions, email [email protected]. Uninstalling the game does not itself delete cloud records or previously collected provider data.

6. Website data

This website serves static pages. It does not currently include visitor accounts, payment checkout, advertising pixels, analytics scripts or a contact form. The site itself does not set tracking cookies.

Hosting and security infrastructure may process IP addresses, requested URLs, browser information and connection logs to deliver and protect the website. Following external links takes you to services with their own data practices.

7. Storage and retention

Local saves and preferences remain on your device until removed or reset; operating-system backups can retain copies. Cloud profile, competition, purchase and support records are stored separately from local files.

Unity Cloud Save: player data does not have an automatic expiry by default. It remains in the service until the developer deletes it. Removing local app data does not remove cloud records; deletion in Cloud Save does not by itself delete Authentication or records in other services.

Firebase Analytics: the linked Google Analytics property currently has 14-month retention for user and event data. New activity resets the user-data retention period. These settings do not apply to most aggregated standard reports.

Firebase Crashlytics: Google documents retention of crash reports and associated identifiers for 90 days before the process of removing them from live and backup systems begins. This is not an immediate-deletion guarantee.

Account-linked records are retained while needed to provide the relevant feature or handle a request. Purchase-validation, security and dispute records may require longer retention where justified or required by law. Retention must be limited to those purposes. Aggregated information that no longer identifies a person may be kept for analysis.

Developer-controlled records are retained according to the purpose of the feature, account activity, request handling and specific legal, security or dispute needs. Data no longer needed for those purposes is deleted or anonymised. Provider recovery copies follow their deletion cycles.

GameAnalytics retention follows the applicable service agreement and developer instructions; requests concerning identifiable records are handled with the provider. No universal automatic expiry period is promised here.

Google Analytics events may also be exported to Google BigQuery for analysis. Exported copies are separate and are included when reviewing retention and deletion requests.

8. International processing and security

Service providers may process data outside Serbia and your country, including the United States. The configured BigQuery export location is the United States. Applicable provider data-processing terms govern processing and transfers. Unity provides a Data Processing Addendum with standard contractual clauses where applicable; Google describes its transfer safeguards in its Firebase privacy documentation linked above. Contact [email protected] for information about safeguards relevant to your data.

We use access controls and service authentication appropriate to the data and restrict operational access. No online service can promise absolute security. Do not publish account tokens or credentials when reporting an issue.

9. Your rights and requests

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent for processing based on consent without changing the lawfulness of earlier processing. Rights can be subject to lawful exceptions.

Requests should identify FairyTale and enough account information to locate the relevant records. We may need proportionate evidence of account control. Do not send a password. We will respond within the applicable legal deadline; any permitted extension must be explained. You may also complain to the competent data-protection authority. In Serbia, this is the Commissioner for Information of Public Importance and Personal Data Protection. Any rights available under the laws applicable to you remain unaffected.

See account and data deletion for how to submit a request.

10. Age and children

FairyTale is intended for teenagers and adults aged 13 and over and is not directed at children under 13. Distribution is planned worldwide, in countries where the game is made available through the relevant store, subject to local laws and platform restrictions. Store content ratings may differ by country and platform and are separate from this intended audience.

A higher local minimum age or a requirement for parental involvement may apply. Being 13 or older does not necessarily allow a player to consent independently to optional data processing. Requirements for parental authorisation and age-appropriate processing depend on the applicable law. Do not assume that a store content rating gives permission for all data processing. If you believe data from a child has been processed improperly, contact [email protected].

11. Changes

A revised policy will display a new version and effective date. Material changes will be communicated as required by applicable law. Changes to the notice will not be treated as automatic consent to new optional processing.