Privacy Policy — Neon Blocks
Last updated: 2 November 2026
1. Who we are
This Privacy Policy explains what information is processed when you use the Neon Blocks mobile game for iOS ("Neon Blocks", "the game"), why, on what legal basis, and what choices you have.
The controller responsible for this processing is Filip Drottshage, operating as ValleyTale Studios, Sweden.
Privacy contact: valleytalestudios@gmail.com
2. Information we process
You do not need to give us your name, email address or phone number to play.
Pseudonymous player account
When Neon Blocks first starts with an internet connection, it automatically creates a player account with our backend provider Supabase, without any registration. The account is identified only by a random identifier (your Player ID). It does not contain your name or contact details, but because data is linked to it, it is pseudonymous rather than anonymous, and we treat it as personal data.
You can see and copy your Player ID in the game under Settings → Account & Support → Player ID. If the game has never been online on your device, no account exists and nothing about you is stored on our servers.
Leaderboards and events
If you use the leaderboards or events, we store, linked to your Player ID:
- the leaderboard name you choose (picked from a predefined list of words; free text is not possible)
- scores you submit, and identifiers and timestamps of the game sessions behind them (used to prevent cheating)
- event rewards you have claimed, and related timestamps
Technical data
When the game communicates with Supabase, Supabase receives technical data necessary to deliver the service, such as your IP address, the time of the request and request metadata. This data appears in the service provider's operational and security logs. Supabase's sign-in service can also record the IP address and the app's user agent (technical information about the app and device software) of a sign-in together with your Player ID, to keep accounts secure. We do not use this data to determine your location, to identify you, or for advertising.
Information stored only on your device
Your game progress, coins and other in-game currencies, settings, notification preferences and local diagnostic information are stored on your device and are not sent to us. A loading report can be copied from the game only if you choose to copy it and send it to us yourself.
Notifications
If you allow notifications, the game schedules reminders (for example, for daily rewards and events) locally on your device. Scheduling them does not send any data to us. You can turn them off in the game's Settings or in iOS Settings.
3. Advertising and tracking
Neon Blocks can show optional rewarded video ads in versions where advertising is enabled. Earlier ad-free versions do not request ads. An ad only plays when you tap a button that says what you get (for example coins or an extra life). There are no banner ads and no ads that interrupt play. Ads are provided by Google AdMob (Google Ireland Limited in the EEA and Switzerland, otherwise Google LLC).
When an ad is requested or shown, Google's Mobile Ads SDK receives information such as your IP address (used to estimate your approximate location), device and app information, how you interact with the ad, and diagnostic data. Google uses it to deliver and measure ads and to prevent fraud. In the EEA, the UK and Switzerland, and wherever else the law requires it, we ask for your choice through Google's consent message before ads are personalised. When Google's consent tool requires it, Settings → Ad Privacy appears in the game and reopens Google's consent message, where you can change or withdraw your choice at any time. Google UMP records your choices, and the app checks whether ads may be requested before starting the advertising SDK. If you decline personalised advertising or other required consent, Google may serve eligible non-personalised or limited ads, or no ad may be available. Non-personalised ads can still require consent for device storage and measurement. You can continue playing when ads are unavailable; an ad reward is given only after a completed rewarded ad is confirmed by the SDK.
Google and eligible advertising partners may process ad-request and advertising data to deliver, measure and protect ads, subject to your choices and applicable requirements. Our current AdMob configuration permits programmatic limited ads. In this mode Google may use cookies or local storage only to detect invalid traffic, including when consent for other storage or personalisation is not given. Limited ads do not use personal data for ad personalisation. Google's consent message lists the advertising partners and their purposes; Google's partner information below explains its processing.
Neon Blocks asks for your permission through Apple's App Tracking Transparency (ATT) framework. The request appears after Google's consent message (where that applies), only if ads may be requested, and before the advertising SDK starts. If you allow tracking, the SDK can access your device's advertising identifier (IDFA), and Google may use it together with the data described above to measure ad performance, limit how often you see the same ad and prevent fraud. Neon Blocks requests non-personalised ads. If you do not allow tracking, or tracking is restricted on your device, the SDK cannot access the IDFA. Declining tracking does not disable optional ads or change the game or its rewards. Ad availability is not guaranteed and also depends on consent choices and available inventory. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking. Other app or device identifiers, advertising data and interactions may still be processed by Google whatever you choose. Absence of IDFA does not by itself mean that processing is not tracking under Apple's definition. Your consent choices and platform permissions determine what processing is permitted; a GDPR consent choice does not grant App Tracking Transparency permission, and ATT permission does not replace a required GDPR consent choice. How Google uses information from apps: https://policies.google.com/technologies/partner-sites, Google's privacy policy: https://policies.google.com/privacy
4. In-app purchases
Purchases are processed by Apple through the App Store. We do not receive or store your payment card details. The game stores a record of completed purchases on your device so that items can be delivered. Apple's privacy policy: https://www.apple.com/legal/privacy/
5. Service providers
| Provider | Purpose | Privacy information |
|---|---|---|
| Supabase, Inc. | Player account, leaderboards and events (backend hosting) | https://supabase.com/privacy |
| Apple (App Store, StoreKit, notifications) | Purchases and delivery of local notifications | https://www.apple.com/legal/privacy/ |
| Google (AdMob, User Messaging Platform) | Rewarded ads, ad consent | https://policies.google.com/privacy |
Supabase processes data on our behalf as our data processor. Google acts as an independent controller for the data it processes to provide, measure and protect ads.
6. Purposes and legal bases (GDPR)
| Purpose | Data | Legal basis |
|---|---|---|
| Creating and running your player account, leaderboards, events and rewards | Player ID, leaderboard name, scores, session identifiers, claimed rewards, timestamps | Performance of our agreement with you to provide the game (Art. 6(1)(b) GDPR) |
| Security, preventing cheating and abuse, operating the service | Session identifiers, timestamps, technical data such as IP address | Our legitimate interest in a fair and secure game (Art. 6(1)(f) GDPR) |
| Answering your requests | Your message, email address and Player ID | Our legal obligations (Art. 6(1)(c) GDPR) and our legitimate interest in answering you (Art. 6(1)(f) GDPR) |
| Showing rewarded ads you choose to watch, ad measurement and fraud prevention | IP address, device and app information, ad interaction and diagnostic data (processed by Google) | Your consent where required (Art. 6(1)(a) GDPR), otherwise our legitimate interest in funding the free game through optional ads (Art. 6(1)(f) GDPR) |
We do not sell personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
7. How long we keep data
- Player account, leaderboard and event data: for as long as it is needed to provide these game features, or until you ask us to delete it.
- Session identifiers used against cheating: for as long as they are needed to verify the scores and rewards they belong to.
- Technical log data at Supabase: for the period for which the provider keeps its operational and security logs.
- Correspondence with us: for as long as needed to handle your request, unless the law requires us to keep it longer.
- Data on your device: until you delete the game.
- Backups: our backend provider makes regular backups of the database. After we delete your data, copies can remain in those backups for a limited period until they are automatically replaced.
8. Your rights and how to request deletion
Depending on where you live, you may have the right to access, correct or delete your personal data, to restrict or object to processing, and to data portability.
To delete your account and the data linked to it: open Settings → Account & Support → Delete Account in the game and confirm. This immediately deletes your player account and the leaderboard, event and related data linked to it from our servers, and signs this device out. After that, the game does not create a new account unless you submit a score or claim an event reward.
If Delete Account is not available (for example when you are offline), open Settings → Account & Support → Request account deletion. This opens an email to us with your Player ID filled in. Alternatively, copy your Player ID from Settings and email it to valleytalestudios@gmail.com. Because the account has no name or email, the Player ID is how we find it; we may ask for additional information that only the account holder would know, such as the leaderboard name in use.
We will respond within one month, as required by the GDPR.
You also have the right to lodge a complaint with a supervisory authority. In Sweden this is Integritetsskyddsmyndigheten (IMY), https://www.imy.se.
9. International data transfers
Our service providers may process data outside the EU/EEA. Where that happens, the transfer relies on the safeguards in the provider's data processing terms, such as the European Commission's Standard Contractual Clauses.
10. Children
Neon Blocks is made for a general audience. It does not ask anyone for their name or contact details, and any ads are optional rewarded ads limited to content suitable for a general audience. Parents or guardians can contact us about a child's data at valleytalestudios@gmail.com.
11. Security
We use measures such as encrypted connections (HTTPS) and access controls on our backend. No online service can guarantee complete security.
12. Changes
We will update this policy when the game or its service providers change. The date at the top shows the latest version.
13. Contact
ValleyTale Studios — valleytalestudios@gmail.com