Privacy policy
How Hats & Spores handles your data. Effective 9 November 2026.
Effective 9 November 2026.
In short
- Your game progress is stored on your device. There are no accounts, and the game does not ask for your name, email or exact location.
- The app uses Google Firebase Analytics and Crashlytics to learn how the game is used and to fix crashes. You can switch analytics off in Settings.
- The app shows optional rewarded ads through Google AdMob. An ad appears only if you choose to watch one. Where the law requires it, we ask for your consent first.
- Purchases are processed by Apple or Google. We never see your payment details.
- We do not sell personal data.
Who we are
Hats & Spores is published by Individual entrepreneur (FOP) Korzh Artem, Ukraine (“we”, “us”). We are the controller of personal data described here. Contact: support@artemkorzh.dev.
Data on your device
Your game progress (coins, farms, upgrades, quests, spores and settings) is saved on your phone. We do not receive it and there is no cloud sync. It is removed when you uninstall the game or reset your progress in Settings.
App analytics
We use Google Analytics for Firebase to understand how the game is used, for example which features are opened, how far players progress and whether a rewarded ad is watched. Firebase collects a random app-instance identifier that is created for each install, together with device and app details such as the device model, operating system version, language, app version and approximate location (country or region) derived from your IP address.
We use this to improve the game. Event data is kept for up to 14 months. You can turn analytics off in the app under Settings, then Privacy. More information: Firebase privacy.
Crash reports
If the game crashes, Firebase Crashlytics sends a report with technical details such as the device model, operating system version, app version and what the app was doing when it failed. We use it only to find and fix bugs. Crash reports are kept for 90 days.
Ads
The game offers rewarded ads through Google AdMob, for example to double offline earnings. An ad is shown only when you choose to watch one. To serve and measure ads and to prevent fraud, Google’s advertising SDK may process your IP address, approximate location, device identifiers (including your advertising ID), device and app information, and how you interact with ads.
- Consent. In the European Economic Area, the United Kingdom and Switzerland we show a consent form (Google’s User Messaging Platform) before ads are requested. You can review your choices at any time in Settings, then Privacy.
- iPhone. We ask for your permission (App Tracking Transparency) before using your advertising identifier. If you say no, ads are not personalized to you.
- Android. You can reset or delete your advertising ID, and opt out of ad personalization, in your phone’s Google settings.
Read how Google handles this data: How Google uses information from sites or apps that use our services and the Google Privacy Policy.
Purchases
The full unlock is a one-time in-app purchase. Apple (App Store) or Google (Google Play) processes the payment under its own terms and privacy policy. We receive a confirmation of the purchase (which product was bought and a transaction identifier) so that we can unlock the content. We do not receive your card number or other payment details. Use Restore purchases in Settings if you reinstall the game.
This website
This website is hosted by Cloudflare. We measure visits with Cloudflare Web Analytics, which does not use cookies and does not track you across sites or build profiles of visitors. This website does not set cookies, so there is no cookie banner.
Who processes data
| Provider | Purpose | Data |
|---|---|---|
| Google (Firebase Analytics) | App usage analytics | App-instance ID, device and app details, approximate location, in-app events |
| Google (Firebase Crashlytics) | Crash reports | Device and app details, crash diagnostics |
| Google (AdMob) | Optional rewarded ads | IP address, device identifiers including advertising ID, ad interactions, consent choices |
| Apple, Google Play | Payment for the full unlock | Purchase confirmation and transaction ID (we never get card data) |
| Cloudflare | Website hosting and cookie-free visit statistics | IP address and request data processed to deliver the site |
International transfers
Google, Apple and Cloudflare operate globally, so data may be processed outside your country, including in the United States. Where required, these providers rely on safeguards such as the EU-US Data Privacy Framework or Standard Contractual Clauses.
Why we may use data
If the GDPR or similar law applies to you, we rely on: your consent (ad personalization and, where required, analytics); our legitimate interests in keeping the game working, fixing crashes and understanding how it is used; and performance of our contract with you (delivering a purchase you made).
Children
Hats & Spores is not directed at children under 13 (or the higher minimum age in your country). We do not knowingly collect personal data from children. If you believe a child has given us data, email us and we will help remove it.
Your rights
Depending on where you live, you may have the right to access, correct or delete your data, restrict or object to its use, move it, withdraw consent, and complain to your data protection authority. Because the game has no accounts, we usually cannot identify you from analytics data unless you give us your app-instance ID. To act on a right, or to delete your data, see Delete your data or email support@artemkorzh.dev.
Changes
We may update this policy as the game changes. The effective date above shows the latest version. If a change is significant, we will say so in the app or here.
Contact
Individual entrepreneur (FOP) Korzh Artem, Ukraine
support@artemkorzh.dev