1. Who We Are

This Privacy Policy applies to the website rdd-labs.com, to the Color Drain mobile application, and to related services operated by Daniel Simonov (Osek Patur: 323812388), trading as RDD Labs, based in Ashdod, Israel ("RDD Labs", "we", "us", or "our").

For privacy-related inquiries, contact us at support@rdd-labs.com.

This policy is governed by the Israeli Privacy Protection Law, 5741-1981, as amended by Amendment No. 13 (in force since 14 August 2025), and its regulations — including the Privacy Protection Regulations (Data Security), 5777-2017 and the Privacy Protection Regulations (Transfer of Data to Databases Abroad), 5761-2001. Under the amended law, online identifiers such as an IP address, a device or advertising identifier, and location data are personal data, and we treat them as such throughout this policy.

2. What Data We Collect

We collect the minimum data necessary to operate our services.

The table scrolls sideways — swipe to see Retention.

On the website, beyond the analytics data described above, we do not collect postal addresses, payment information, or precise location data. The only names we hold from the website are ones you give us yourself — typed into the “Request Pitch Deck” form, chosen as a username in the player community, or shared by Apple when you choose to sign in to the community with Apple (section 12); the signup forms ask for an email address and nothing else, apart from the email-language choice on the Hebrew pages. In the Color Drain game, the names we hold are your display name and, if you link a Google account, that account's name (section 7).

Everything you give us on this website is voluntary. No law requires you to provide it. Not providing it simply means you will not receive what the form offers — our updates, the closed-test link, a reply to your enquiry or a community account — and has no other consequences whatsoever.

3. How We Use Your Data

Your email address is used only for the following purposes:

• Sending you a confirmation email right after you sign up. Until you press the button on the page its link opens, your address is not confirmed and is not added to any of our mailings.
• Telling you the day Color Drain is out, on the platform you chose: on Google Play for Android, or on the App Store for iPhone and iPad.
• Sending you the Google Play closed-testing link, with the step that lets Google Play recognise you as a tester (section 7), once you confirm a sign-up made on a Color Drain page with Android chosen — and, historically, if you signed up through the closed-testing form while it was open. If you chose iPhone, you are never sent this link and your address is not added to the tester Google Group.
• Studio updates about once a month — what we shipped, what we learned, new game announcements and major milestones — but only if the form you signed up on said so. If you signed up on an older form that promised a single launch alert, or the closed test only, that is all you get.
• The launch gift. If you signed up for studio updates before 12 October 2026 and confirmed by 19 October, we use your record to make a personal code for an exclusive Color Drain skin, and email it to you once the game can redeem it (the gift's terms are in section 16.4 of the Terms). The code is made from your record and a secret key, so the game can check it without asking us: we never send your email address to the game, and the game records only which game account redeemed the code.
• If you join the player community: the sign-in link, notices about your account (a suspension, or the answer to an appeal), and the notifications you switched on there (section 12).
• If you link a Google account in the Color Drain game: to identify your game account (section 7). We do not email that address.

We do not use your email for profiling, automated decision-making, or any purpose not listed above.

Some of the emails we send — including game launch announcements and studio updates — constitute advertising material under Section 30A of the Israeli Communications Law (Bezeq and Broadcasts), 5742-1982. In compliance with that law, every such email: (a) carries the word פרסומת at the start of its subject line and body; (b) clearly identifies RDD Labs as the sender, with our contact details and postal address; (c) includes an unsubscribe link — the page it opens takes a single press of a button, with no login — plus the standard header that lets your mail app unsubscribe you in one click. We honour every opt-out immediately and without conditions — including one sent to us as a plain reply — and we never send advertising material to anyone who has opted out. A confirmation email is not advertising material and is not marked as such.

4. Legal Basis for Processing

Under the Israeli Privacy Protection Law, we process your email address on the basis of your freely given consent, which you provide when you submit the sign-up form and confirm by pressing the button on the page that the link we email you opens. You may withdraw consent at any time — with the unsubscribe link in any email, the deletion form in section 10, or by writing to support@rdd-labs.com.

Cloudflare's security processing and Cloudflare's cookieless Web Analytics are carried out on the basis of our legitimate interest in protecting our website from abuse, keeping it available, and knowing in aggregate how it is used. Google Analytics and PostHog run only with your consent on the cookie banner, which you can withdraw at any time (section 8). The Color Drain app is covered in section 7.

5. Data Storage and Security

Email addresses are stored in Cloudflare D1, a distributed SQLite database managed by Cloudflare. Data is encrypted in transit (TLS) and at rest. Cloudflare's infrastructure is SOC 2 compliant. Cloudflare also keeps an automatic, restorable history of the database (D1 Time Travel) for up to 30 days, so a record deleted from the database can remain in that history until it ages out.

Email is delivered through Resend, Inc., from its European Union (Ireland) region. To deliver a message, Resend receives the recipient address and the message content and keeps its own delivery logs for a limited period under its privacy policy. We do not upload our list to Resend; each message is sent individually.

To protect our sign-up forms from abuse, our API applies per-IP rate limiting. It stores only one-way hashes derived from the request's IP address — never the raw IP — and these hashes are automatically deleted within approximately two hours.

The retention periods in section 2 are enforced by our own code, which deletes what has reached the end of its period; nobody has to remember to do it.

Access to stored email addresses is limited to authorised members of RDD Labs. We do not expose this data through any public interface.

No security system is impenetrable. If we become aware of a breach affecting your personal data, we will notify you at the email address you provided as required by applicable law.

6. Third-Party Services

We use the following third-party services, each of which has its own privacy policy:

• Apple Inc. — for the Color Drain app on iPhone: the App Store and its in-app purchases, Sign in with Apple if you choose it, the age range an iPhone shares with apps, and the device checks behind Firebase App Check (section 7); and, on the website, Sign in with Apple to the player community if you choose it, including the private relay address that forwards our emails to you (section 12). Privacy Policy
• Cloudflare, Inc. — website hosting, CDN, DDoS and bot protection, cookieless Web Analytics, the D1 database that holds our own records (mailing list, enquiries, community, email log), and the lookup, through its public DNS resolver, that checks the domain part of an address you sign up with (the part after the @) can receive mail. Privacy Policy
• GameAnalytics ApS (Denmark) and its affiliate GameAnalytics Limited (United Kingdom) — gameplay analytics for the Color Drain app, processed for us on cloud servers in the United States (section 7). Data-processing terms
• Google LLC — website analytics (Google Analytics 4), loaded only after you accept analytics cookies; the Google Group that Google Play uses as the Color Drain closed-test tester list, and Google Play itself (section 7); Google sign-in to the player community, if you choose it; Google Workspace (Gmail), where the email you send to our @rdd-labs.com addresses is received and kept, and where our internal signup alerts arrive; and, in the Color Drain app, Firebase (the game account, cloud save, leaderboards, feedback, analytics, crash reports and device checks), AdMob (the ads) and Google Play Billing (purchases) — section 7. Privacy Policy
• PostHog, Inc. — website product analytics (United States), loaded only after you accept analytics cookies. Data reaches PostHog through our own address, without your cookies or IP address. The only location it receives is your country (two letters, worked out for us by Cloudflare), so we can see roughly where visitors come from. Privacy Policy
• Resend, Inc. — email delivery (confirmation, closed-test, deletion, community, launch and update messages) and the delivery reports on them, EU region. Privacy Policy
• Unity Technologies — the engine Color Drain is built with and its in-app purchase library, which sends Unity data about each purchase you start in the app (section 7). Privacy Policy

The website itself shows no ads and carries no advertising or retargeting tags. The Color Drain app does show ads, through Google AdMob, and shares data with Google for them (section 7). We do not sell or rent your personal data.

7. The Color Drain Mobile App

This section covers the Color Drain game for Android and for iPhone, separately from the website. The game launches on Google Play and the App Store on 12 October 2026. Until then the Android version is in closed testing on Google Play, and this section describes the build testers have today, version 2.2.13. Color Drain is built with Unity; its online features run on Google's Firebase and Google Cloud services, and the game does not connect to rdd-labs.com. Earlier versions do not ask your age, so none of the rules below for players under 18 apply in them, and versions before 2.2.11 cannot delete your account: if you still have one, update the game from Google Play, or use the email route under “Deleting your game data” below.

On an iPhone. The iPhone version, Color Drain: Paint Rescue, launches on Apple's App Store on 12 October 2026, the same day as the Android version; its first version is 1.0. What this section says about an iPhone applies to an iPad too. It works as this section describes, with these differences. Where the section names Android or Google Play, an iPhone uses iOS and the App Store instead: the technical details the game sends include your iOS version rather than an Android version, and purchases and their records are the App Store's. On iOS 26 and later, the game asks Apple, instead of Google Play, whether it shares your age range with apps, and uses the answer in the same way; Apple's answer carries no installation ID and no parent's approval, so “A parent's approval, and age checks in Google Play”, below, applies only on Android. Firebase App Check asks Apple's App Attest, or DeviceCheck on a phone that cannot use App Attest, instead of Google Play Integrity. GameAnalytics receives Apple's identifier for vendors (IDFV) instead of Android's App Set ID. The advertising ID is Apple's IDFA, and the game can read it only if you allow tracking (“Ads”, below). You can link an Apple Account as well as, or instead of, a Google account (“Signing in with Apple”, below), and you buy through the App Store (“Purchases”, below).

Your age. Before anything else in this section starts, the game works out your age group: under 16, 16 or 17, or 18 and over (section 9). It first asks Google Play, on your phone, whether it shares your age range with apps, and Google Play may ask you, in its own window, whether to share it. If the range comes from a parent who manages your Google account, or Google has assessed or verified it, that range decides and the game does not ask you; if you gave Google the range yourself, the game uses whichever is younger, that range or an answer you gave the game. Otherwise the game asks you once for your month and year of birth. Your answer stays on your phone: the game keeps only your age group, the month you answered and, if you are under 18, the month in which you move up to the next group. We never keep your date of birth, and none of this leaves your phone. What Google Play tells the game is used only to set your age group, apart from the installation ID below, and is never recorded. Only three things ever leave your phone because of your age: for players aged 16 and 17, the flag the game adds to its requests to Google's ad and consent services, so that Google does not personalise their ads; if a parent supervises your Google account, your installation's ID, in the one check described below; and, if a phone that already had a game account moves to Offline Play, a one-time request that deletes that account (described under Offline Play). You cannot change your answer in the game; when you reach the next age group, the game moves you on by itself. If you are under 16, none of the collection described in this section happens: the game runs in Offline Play (below).

A parent's approval, and age checks in Google Play. If a parent supervises your Google account and has not yet approved the game, or has declined, the game runs in Offline Play until they approve it. Where the law requires you to confirm your age with Google Play and you have not, the game runs in Offline Play and asks you to confirm your age in the Play Store to get the full game, with a button that opens it. Until then, nothing this section describes for players aged 16 and over happens. If a parent withdraws an approval they gave, Google Play lists that installation's ID (Google Play's own identifier for the game on that phone) in our Google Play Console; we copy that list into our database in Cloud Firestore once a week and keep each ID there for 12 months after we copy it, or longer while Google Play still lists it, so that the block keeps working. If a parent supervises your Google account and you are 16 or over, the game checks for itself each time it signs in to your game account: it sends your installation's ID to our database, which answers only whether that ID is on the list; the game does not download the list, and the check stores nothing. If the ID is on the list, the game becomes unavailable on that installation and shows “Color Drain isn't available on this device” from then on; that result is kept only on the phone. Installations that no parent supervises, and Offline Play, never make this check. If your age group goes down — Google Play later reports that you are under 16, or a parent's approval becomes pending or is declined — or a parent withdraws an approval, the game switches analytics and crash reports off at once, at every launch, and events from a session without analytics are never sent later.

Offline Play (under 16). You can play every level, and your progress is kept only on your phone. The game starts none of the services described in this section — no Firebase, no ads, no purchases, no game account or cloud save, no leaderboards, no feedback, no analytics and no crash reports — and leaves out everything that would need them: Second Wind, doubled offline earnings, free coins, skin trials, the shop's COINS section and Restore Purchases, the RANKS tab, Google sign-in and the account ID, feedback forms and requests to rate the game, Rate Us, Share Game and Privacy Choices. The daily reward is given without an ad, and “Delete my progress” in Settings erases your progress on the phone. The one exception: if you are under 16 and your phone already had a game account from an earlier version, the game makes one request to our server to delete that account — sending the account's sign-in token and the phone's Google Analytics app-instance ID, so that the server can also ask Google Analytics to erase that data — which deletes the account, its cloud save, its leaderboard entries and its feedback, as “Delete account & data” does (below); your progress stays on the phone. After that, Offline Play sends nothing. When you turn 16, the game shows you “Welcome to the full game” and then the notice below, before anything starts; the crash reports your phone kept during Offline Play are deleted unsent.

What the game tells you first. If you are 16 or over, the game then shows a notice, once, before anything that sends data starts. It says what the game collects and why, who processes it for us, that no law requires you to give us this data but the game needs it to work, and that you can delete your account and its data in Settings at any time, and it links to this policy and to the game terms. If you are 18 or over, it lists your game account and cloud save, crash reports, “how the game is played (analytics)” and ads from Google, which may be personalised, processed for us by Google (Firebase and AdMob) and GameAnalytics, and says that your leaderboard name and scores are public and that you can hide them. If you are 16 or 17, it lists your game account and cloud save, crash reports and ads from Google, never personalised, processed for us by Google (Firebase and AdMob); it says “We don't collect analytics for players under 18”, and that your leaderboard name comes from a list and you can hide it. Nothing starts until you press Continue. If you turn 18 — on your birthday, or when Google Play's age signal says so — the game first shows you the notice for players aged 18 and over, before analytics, personalised ads or ads between levels start. Offline Play collects nothing and shows no notice.

Your game account. The first time the game can reach the internet after you press Continue on the notice, it creates a game account for you with Firebase Authentication (Google LLC): a random account ID, with no name, email address or password. Every player outside Offline Play gets one, and there is no option to skip it — it is how your progress is saved. The game's Profile screen shows this ID in full, after “ID:”, with a COPY button that copies it, and your display name starts as “Player #” followed by four characters of it.

Cloud save. After each level and when you leave the game, your progress is backed up under that account in Cloud Firestore (Google LLC): your display name, whether you have chosen to hide from the leaderboards, levels, stars and total colour drained, coins and boosters, skins, upgrades and other items, and your daily-reward streak. The backup also holds a technical profile of your phone — model, Android version, memory, number of processor cores, graphics system, performance tier, app version, whether it is a development build, and when you last played — which helps us find problems on particular phones. Purchases are not part of the backup: Google Play keeps them.

Signing in with Google (optional). If you choose to link a Google account, Google gives the game that account's email address, name and profile picture, and Firebase stores them with your game account; the game shows your email address. Linking does not change your account ID. “Sign out” unlinks Google; your game account stays. If the Google account is already linked to another Color Drain save — after you reinstall the game, for example — the game shows the two saves side by side (display name, highest level, stars, coins and when each was last played, from summaries our server prepares without either account ID) and you choose which one to keep. The other save is never deleted automatically: it stays on our servers until you ask us by email to delete it; “Delete account & data” does not reach it, because it belongs to another game account.

Signing in with Apple (optional, iPhone only). If you choose to link an Apple Account, the game asks Apple for neither your name nor your email address, so Apple gives it only an identifier for your Apple Account and proof of the sign-in; Firebase stores the identifier with your game account, and the Profile screen calls the account “Apple ID”. So that deleting your game account can also end the game's access to your Apple Account, as Apple requires, our server exchanges the one-time code Apple issues when you link for a token, and keeps it with your account ID until your game account is deleted. Linking does not change your account ID, and “Sign out” unlinks Apple; your game account stays. If the Apple Account is already linked to another Color Drain save, the game shows the two saves side by side and you choose which one to keep, as with Google (above).

Public leaderboards. The game has two global leaderboards, which show each player's display name, star total, total colour drained and the skin they use. Everyone who plays Color Drain online can see them. “Hide me from the leaderboards”, on the leaderboard screen, deletes your entries and keeps you off the boards until you switch it off; the choice is saved with your cloud save, so it follows your game account to another phone. Entries are stored under a one-way hash of your account ID and do not include the ID itself. If you are 18 or over, your display name is whatever you type, 3 to 16 characters, and before it can appear on the boards our server checks it — its length, its characters (English letters A–Z only, digits, spaces, hyphens and underscores, with at least one letter and no six digits in a row) and a list of blocked words in English and Hebrew — and keeps the name it approved with your game account; do not use your real name or anything else that identifies you. If you are 16 or 17, your name on the boards is the one the game gives you or one you pick from the game's list. Tapping another player's name lets you report it as offensive or as personal information: we store the report — the board, the entry, the name, the reason, your account ID and the time — where no player can read it, and review it; you can send one report every 30 seconds, and our server keeps the time of your last report to enforce this. Entries that earlier versions wrote are stored under the account ID and still include it, and any copy of the game can read them: version 2.2.13 deletes your own old entries the first time it updates the boards, and we will remove the rest ourselves now that version 2.2.13 has reached testers. Versions 2.2.12, 2.2.11 and earlier can no longer add or update entries, so your results from them do not reach the boards. “Delete All Progress” does not remove your entries; “Delete account & data” does, and so does a deletion request by email (below). The game terms set the rules for display names.

Feedback you send from the game. If you use “Send Feedback” in Settings or answer a feedback prompt after a level, we store what you write (up to 4,000 characters) and your answers — type, rating, difficulty, features and category — with your account ID, display name, level, stars, total colour drained, app version, platform and the time, in Cloud Firestore, so that we can read it and improve the game. Please do not include personal details; every feedback form in the game reminds you of this. The game also keeps your last 50 feedback entries on your phone.

Ads (Google AdMob). If you are 16 or over, Color Drain shows ads through Google AdMob (Google LLC). Rewarded video ads play only when you choose to watch one for a reward: your daily reward, free coins, a second chance in a level, a skin trial or doubled offline earnings. If you are 18 or over, the game also shows an ad between levels, only as you leave the screen at the end of a level: from level 8, at most once every three levels and every three minutes, and never in your first session. The No-Ads Pass removes these ads between levels, but not the rewarded videos (“Purchases”, below). There are no other ads, and players under 18 never see an ad between levels. Every ad request the game makes is limited to ads rated G (general audiences) for players aged 16 and 17, and to ads rated G or PG (parental guidance) for players aged 18 and over; our AdMob settings for the game set a PG limit for everyone and block these ad categories: alcohol, gambling, dating, social casino games, references to sex, sexual and reproductive health, weight loss, cosmetic procedures, get-rich-quick schemes, drugs and supplements, and sensationalism. Version 2.2.13 is a closed-test build, so its ads are Google's test ads — sample ads that earn us nothing — but the ads software works the same way and sends Google the same kinds of data. To serve and measure ads and to detect fraud, the AdMob software in the game sends Google your IP address (from which an approximate location is worked out), information about your phone and the app, and how you interact with ads, and, if you are 18 or over, your phone's advertising ID. If you are 18 or over, Google, and ad technology partners that Google works with, can use this data to show you personalised ads, under Google's own policies (how Google uses data from apps that use its services). If you are 16 or 17, the game asks Google to treat every ad request as one for a child: your ads are never personalised, and your advertising ID is not sent. You can reset or delete your advertising ID at any time in your phone's settings (on most phones, Settings → Privacy → Ads, or Settings → Google → Ads). On an iPhone, the advertising ID is Apple's IDFA (Identifier for Advertisers), and iOS gives it to an app only if you allow tracking. If you are 18 or over, the game shows Apple's App Tracking Transparency prompt once, after the notice and Google's consent message; AdMob and GameAnalytics can read your IDFA only if you choose “Allow”. If you don't, you still see ads, but they are not personalised. Players under 18 never see the prompt, and the game never asks for their IDFA. You can change your answer at any time in the iPhone's Settings → Privacy & Security → Tracking.

What version 2.2.13 asks you, and what waits for your answer. Once you press Continue on the notice, Google's consent software checks whether a consent message is required where you are. If you are 18 or over, in the European Economic Area, the United Kingdom and Switzerland it shows Google's consent message, which asks for your consent to a list of purposes, among them storing and reading information on your phone and personalised ads; “Privacy Choices” in Settings opens it again so that you can change your answer. Everywhere else, including Israel, no message is shown, and “Privacy Choices” only says that no ad privacy choices apply in your region. If you are 16 or 17, the game tells the consent software that you are under the age of consent, so no message is shown anywhere, and “Privacy Choices” says that there are no ad choices to make, because your ads are never personalised. Until the consent software has an answer, the game requests no ads and GameAnalytics does not start. Then:

• GameAnalytics, for players aged 18 and over only, starts, in those three regions, only if you consent to information being stored on and read from your phone, and only with that consent does it get your advertising ID; everywhere else it starts without asking you and never gets your advertising ID. If you do not consent, the events that were waiting for it are thrown away; if you withdraw your consent in “Privacy Choices”, it stops sending.
• Google Analytics for Firebase, for players aged 18 and over only, starts with every type of consent set to “denied” and then follows the answer: all are set to “granted” where no message is required, and set from your choices in the message where it is. With consent denied, it still sends Google signals that carry no identifier.
• Firebase Crashlytics and Firebase App Check, for players aged 16 and over, do not wait for this answer: they start once you press Continue on the notice, everywhere, whatever you answer.

Outside those three regions the game does not ask players aged 18 and over for consent to analytics, and it has no setting that turns analytics off. What the game collects is in the notice it shows before any of it starts, and this policy and the game terms are linked from that notice and from Settings. If you do not want this data collected, do not press Continue on the notice: close the game and uninstall it. You can also delete your advertising ID in your phone's settings.

Analytics and crash reports. For players aged 18 and over only, Google Analytics for Firebase records what happens in the game against a random app-instance ID, never your advertising ID, as far as the consent settings above allow: first opens and sessions; levels started, finished, failed or abandoned, and how a session ended; screens viewed; tutorial steps; rewarded ads offered and watched, and ads between levels shown, clicked, unavailable or failed; purchases (the product, its category, price, quantity and currency, and the Google Play order number); linking or unlinking a Google account; and, automatically, your phone model, Android version, country and app version. We use it to see how the game is played and where players get stuck. Our Google Analytics property has Google signals switched off, so these events are not combined with information from signed-in Google accounts, and ads personalisation switched off in every region, so they are not used to personalise ads. For players aged 16 and over, Firebase Crashlytics records crashes and errors: the stack trace, the state of the app, your phone model and Android version, and a Crashlytics installation ID; when a purchase fails to be delivered, the report names the order only by the last four characters of its Google Play order number. Firebase App Check asks Google Play Integrity to confirm that requests come from the real game on a real phone.

GameAnalytics. For players aged 18 and over only, version 2.2.13 also sends data to GameAnalytics, a game-analytics service that processes it for us (section 6), once the consent rules above allow it. It receives a random GameAnalytics ID, Android's App Set ID, your IP address, from which it works out your country, your phone's make, model, Android version and connection type, and the app version, and your advertising ID only in the case described above. With them it records when your sessions start and how long they last, and many of the game events that Google Analytics records (above), among them: the levels you start, finish (with the stars you earned) or fail, with the time you spent, how much colour you drained, which attempt it was and whether the game gave you extra time; the ones you leave unfinished, with how far you got and why the level ended; and your purchases — the product, its price and currency, but not the order number — and the ones that failed or were restored. It also records the coins and pigment you earn and spend, and on what; each rewarded ad and each ad between levels requested, loaded, shown, clicked or failed, the rewards you get from rewarded ads, and what AdMob reports each ad earned; the settings you change, and to what; whether you have ever bought anything; and your phone's performance tier. GameAnalytics' own error reporting is switched off: the game sends it only exceptions and errors, at most 20 per session, with email addresses and runs of six or more digits removed; in rare failures they can still include your account ID. We use it to see how the levels are played and where players stop. GameAnalytics stores the data with its cloud providers in the United States, keeps raw events for one month and player-level data for up to 18 months, and may also use the data, aggregated or de-identified, for its own benchmarks and to improve its services.

Unity. Color Drain is built with the Unity engine (Unity Technologies); the engine's own diagnostics are switched off in version 2.2.13. For players aged 16 and over, the Unity in-app purchase library in the game sends Unity an event when you start a purchase, when it is paid, fails or is cancelled, and when it is completed: the product, its price and currency, the transaction ID and, once it is paid, the Google Play receipt (with the order number and a purchase token), with your phone model, Android version, language settings, storage size and when your phone last started up, the app version and install time, and a Unity installation ID, but not your advertising ID. The library has no setting that turns this off. Unity handles this data under its own privacy policy.

Purchases. If you are 16 or over, the game sells six items for real money through Google Play Billing (Google LLC) or, on an iPhone, Apple's App Store in-app purchase (Apple Inc.): the No-Ads Pass, which removes the ads between levels and gives you 100 coins a day and the Diamond skin; the Vacuum Master starter pack; and four coin packs. The game terms describe them. Each has fixed contents: none is a paid chance at a random reward. The top of the shop's coin section says “Under 18? Ask a parent or guardian before you buy.”, and if you are 16 or 17, the game shows you this before your first purchase: “Under 18? You need a parent's or guardian's OK to buy. Parents can ask us to refund a purchase made without their OK.” Google or Apple handles the payment — we never receive your card or bank details. We receive the order number, the product and its price; the game uses them to deliver and restore what you bought, and, if you are 18 or over, Google Analytics and GameAnalytics record them as described above.

Kept only on your phone. Your age group, the month you answered the age question (and, under 18, the month you move up to the next group), whether you have seen the notice and the purchase reminder, your settings (sound, vibration, battery mode, colour-blind mode, frame rate and graphics quality), your offline-earnings and daily-goal timers, the counts that space out the ads between levels, your last 50 feedback entries, and a key that protects your save file from tampering stay on your phone, and uninstalling the game removes them; only the changes you make to your settings are also reported to GameAnalytics, for players aged 18 and over (above).

The game does not ask for permission to use your location, contacts, photos or files, microphone or camera, and it does not read the contents of other apps. We do not sell your personal data.

Why, and on what basis. The game account, the cloud save, the leaderboards, the reports you make and the feedback you choose to send are how the game works: we process them to provide it to you. We check whether a parent has withdrawn their approval in order to respect that decision, following Google Play's guidance. In the European Economic Area, the United Kingdom and Switzerland, Google Analytics and GameAnalytics, which run only for players aged 18 and over, rest on your consent, which you can withdraw at any time in “Privacy Choices”; the signals without identifiers that Google Analytics sends when consent is denied, and analytics everywhere else, where the game does not ask for consent, rest on our legitimate interest in understanding and improving the game. Crash reports and device checks rest on our legitimate interest in fixing the game and in preventing fraud, everywhere. The ads data is processed to show and measure the ads in the game; where the law requires consent for personalised ads, Google's consent message asks for it (“What version 2.2.13 asks you”, above), and players aged 16 and 17 never get personalised ads.

Is any of this required? No law requires you to give us this data, but the game needs it to work, as the notice says. Once you press Continue on the notice, the game account, the cloud save, crash reports and device checks start automatically, and so does analytics for players aged 18 and over outside the three regions above; the game's online features depend on the account and the cloud save. If you do not want this data collected, do not press Continue: close the game and uninstall it. Declining in Google's consent message, withdrawing your consent later or deleting your advertising ID does not take any feature away.

How long, and where. Your game account, cloud save, leaderboard entries and approved leaderboard name, the reports you make and the time of your last one, and your feedback: until you delete them in the game or ask us to (below) — nothing deletes them automatically yet, but we will remove the leaderboard entries that earlier versions wrote ourselves (above). A save you left behind when linking Google: until you ask us to delete it. An installation ID on our list of withdrawn parental approvals: 12 months after we copy it from our Google Play Console (we copy the list once a week), or longer while Google Play still lists it. Google Analytics data: 14 months, the retention period set in our Google Analytics property for event and user data. GameAnalytics data: raw events for one month and player-level data for up to 18 months, GameAnalytics' standard periods, after which it is deleted or made anonymous. Crash reports: 90 days, Crashlytics' standard retention. Ads data and your Google Play purchase records: under Google's own policies. Your App Store purchase records: under Apple's. The Sign in with Apple token: until your game account is deleted. Unity's data: under Unity's policy. We keep the game account, cloud save, leaderboard entries and approved leaderboard name, your reports and your feedback in Google Cloud Firestore in the European Union (the europe-west10 region: Berlin, Germany); our server functions, which delete accounts, compare saves when you link Google and run the server checks such as the leaderboard-name check, run in Google Cloud in the United States (the us-central1 region: Iowa). Google, GameAnalytics and Unity process this data in the United States and in other countries where they operate (section 11).

Abuse prevention (website). To stop a single source flooding our sign-up form, we count submissions per hour against a one-way hash of your IP address combined with the current hour. The raw IP address is never written to our database, and these counters are deleted automatically after about two hours.

Closed testing. Once you confirm a signup made on a Color Drain page with Android chosen, the Google Play invitation to the closed test is emailed to you (section 3); the record is the one described in section 2. Google Play lets testers in through a Google Group that serves as the tester list: the invitation asks you to join that group with the Google account on your phone, or — where we have switched this on — we add your confirmed address to the group ourselves. As the group's owner the studio can see who is in it, and Google handles the membership under its own privacy policy. Google Play separately makes tester participation data available to us as the developer. No name, no device information. If you signed up through the earlier closed-testing form, your record also shows whether you ticked the 14-day box; such a record is used only for the closed test, and is deleted on request and in any case once the closed test concludes. If you chose iPhone, none of this happens: no Google Play invitation is emailed, nothing is sent to Google, and your address is not added to the tester Google Group. The address is kept only for the confirmation, the launch news and the studio updates (sections 2 and 3).

Investor and partnership enquiries. The “Request Pitch Deck” form is a business-contact channel, not part of the game. If you use it we store exactly four things: the name you enter, the company or fund name if you give one, your email address, and the date and time you submitted it. We use them to reply to you and to send the pitch deck. Investor enquiries are kept separate from the player mailing list and are never added to it, never used for marketing, and never shared with anyone outside RDD Labs. Ask us at support@rdd-labs.com, or use the deletion form in section 10, and your enquiry is deleted.

Signup alerts. So that we notice a closed-test signup, an iPhone signup or a pitch-deck enquiry without having to check a database, a short alert is sent to our own internal team channel. That alert contains a masked address (for example d*****@gmail.com) — never your full address — plus, for signups, a running total, and for enquiries, the company name you gave.

Deleting your game data. You can delete your game account and its data from inside the game, or ask us to by email:

• In the game: Settings → “Delete account & data”. After two confirmations, and with an internet connection, our server deletes your cloud save; your entries on every leaderboard; your approved leaderboard name, the reports you made and any reports about your entries, and the time of your last report; all feedback you sent; and, last, your game account itself, with any Google email address, name and picture linked to it. If you linked an Apple Account, it also revokes the game's Sign in with Apple authorization with Apple and deletes the token it kept for that. It also asks Google Analytics to delete the data recorded for the game on your phone, using the Google Analytics app-instance ID your phone sends with the request. The game tells you whether the deletion worked. Your phone then erases your progress, gets a new Google Analytics ID and starts over as a new player, with a new game account. The button does not delete your GameAnalytics data (we send GameAnalytics no deletion request, and your phone keeps the same GameAnalytics ID), crash reports, the ads data and your answer to the consent message that Google holds, your Google Play or App Store purchase records, Unity's data, the entries our server writes to its log, with your account ID, when it checks a leaderboard name you chose or deletes an account, a save you left under another game account when you linked Google, or any backup of our database. The same request runs once by itself when a phone that already had a game account moves to Offline Play (above); that phone then keeps its progress instead of starting over.
• By email, for example if you still have version 2.2.10 or no longer have the game: write to support@rdd-labs.com with the subject “Delete my Color Drain data”, and include your account ID — on the game's Profile screen, after “ID:”, where COPY copies it — and your display name. Version 2.2.10 shows only the last six characters of the ID: send those. If you linked a Google account, you can write from that address instead. The “Delete my data” form in section 10 cannot find a game account, because a game account has no email address. We confirm within 7 days and, within 30 days, delete everything the button deletes except the Google Analytics data, and any other save of yours we find.
• Google Analytics data can be deleted only with the button, and only for the phone you press it on: an email does not tell us which installation of the game is yours. GameAnalytics data and crash reports are not stored under your account ID, so we cannot pick out yours either way; they are deleted when their retention periods end (above), as is Google Analytics data that no deletion request reached. Ads data is held by Google under its own policies, and your purchase records by Google Play or Apple.

“Delete All Progress”, also in Settings, erases only your progress on the phone and your cloud save; your game account, leaderboard entries and feedback stay. In Offline Play, where there is no game account, Settings has “Delete my progress” instead, which erases your progress on the phone. Uninstalling the game removes only what is on your phone.

The permanent link for deletion requests is rdd-labs.com/privacy#data-deletion.

8. Cookies

Google Analytics 4 sets first-party cookies (_ga, _ga_H8SMJKXT4J) to distinguish visitors and sessions — only after you accept them on the consent banner, and rejecting deletes any that exist. These are used solely for aggregate usage measurement — no advertising features are enabled. Until you accept, Google's script is not loaded at all. PostHog sets one first-party cookie (ph_<project key>_posthog), with matching entries in your browser's storage, on the same terms: its script is not loaded until you accept, and rejecting stops it and deletes them. Cloudflare Web Analytics sets no cookie and stores nothing on your device. Four small settings (your consent choice, your language, whether you paused the site's animations, and whether this device measured as too slow for them) are kept in your browser's local storage, not in cookies, and are never sent to us.

Cloudflare's infrastructure sets strictly necessary security cookies (cf_clearance, and in some cases __cf_bm) to protect the site from bot traffic. These are essential for site security and cannot be disabled without affecting functionality. They store no personal information about you.

See our full Cookie Policy for details.

9. Children and Teenagers

One age: 16. The website's sign-up forms, the player community and Color Drain's online features — ads, purchases, the game account and cloud save, leaderboards, the feedback form, Google sign-in and Sign in with Apple — are for people aged 16 and over. If you are under 16, please do not sign up or join the community. We do not knowingly collect personal data from anyone under 16.

The game asks your age once. The first time you open Color Drain — and, if you already had it, the first time you open version 2.2.13 — it asks for your month and year of birth before it starts anything that sends data. Where Google Play, or Apple on an iPhone, shares a user's age range with apps (for example, for an account a parent manages), the game uses that range instead of asking (section 7). Your answer stays on your phone: the game keeps only your age group, the month you answered and, under 18, the month in which you move up to the next group; we never keep your date of birth, and none of this leaves your phone. Only three things leave your phone because of your age: for players aged 16 and 17, the flag the game adds to its requests to Google's ad and consent services, so that Google does not personalise their ads; if a parent supervises your Google account, your installation's ID, in one lookup that checks whether the parent has withdrawn the game's approval; and, if a phone that already had a game account moves to Offline Play, a one-time request to delete that account, with its sign-in token and its Google Analytics app-instance ID (section 7).

Under 16: Offline Play. You can play every level, and your progress is kept only on your phone. There are no ads, no purchases, no game account or cloud save, no leaderboards and no feedback form. If your phone already had a game account from an earlier version, the game deletes it once, with its cloud save, leaderboard entries and feedback, and keeps your progress on the phone; after that, the game sends nothing to us or to anyone else — not even analytics or crash reports.

16 and 17. You get the full game, with these limits: ads are never personalised, are served without your phone's advertising ID and appear only when you choose to watch one; the game collects no analytics about you, only crash reports; on the leaderboards you appear only under a name from the game's list, or the one the game gives you; and purchases need a parent's or guardian's consent, which the game reminds you of before your first one (section 16.5 of our Terms). You are a minor under Israel's Legal Capacity and Guardianship Law, 5722-1962 — please sign up, join the community and play with a parent's or guardian's knowledge.

18 and over. Section 7 describes the game as it works for you, including the ads between levels that the No-Ads Pass removes. In the European Economic Area, the United Kingdom and Switzerland, you see personalised ads only if you agree in Google's consent message. On an iPhone, anywhere, you see them only if you also allow tracking in Apple's App Tracking Transparency prompt (section 7).

If we learn someone is younger. If we learn that we hold personal data of someone under 16, we delete it. A parent or guardian can ask us to do this at support@rdd-labs.com; for Color Drain, include the account ID from the game's Profile screen, or use “Delete account & data” in the game's Settings (section 7).

10. Your Rights

Under the Israeli Privacy Protection Law, you have the following rights:

• Right of inspection (Section 13) — you may request to review any personal data we hold about you in our records, and to receive a copy of it. We will respond to inspection requests within 30 days.
• Right of correction (Section 14) — if data we hold about you is inaccurate, incomplete, unclear, or no longer current, you may request that we correct, supplement, replace, or delete it. We will act on your request within a reasonable time and notify you of the outcome.
• Deletion — you may erase your mailing-list record and any pitch-deck enquiry yourself, with the form below; a community account is deleted from your profile (section 12); your Color Drain game data, from the game's Settings or by email with your account ID (section 7); for anything else, write to us. We will comply unless we are required to retain it by law. What remains afterwards is a one-way hash on our do-not-contact list and the dated record that the deletion happened.
• Withdrawal of consent and refusal of advertising — you may withdraw your consent to receiving communications from us at any time, without any conditions or consequences: with the unsubscribe link in any email we send (a single press of a button on the page it opens, honoured immediately), with your mail app's own unsubscribe button, by replying to any message, or by contacting us directly.

Every email we send to our list also carries a “Manage my email” link: it shows which list the address is on and lets you change the email language, unsubscribe, sign up again, or start a deletion, with no login.

To exercise any of these rights, send an email to support@rdd-labs.com. We will respond within 30 days.

If you believe we have not handled your data lawfully, you may file a complaint with the Israeli Privacy Protection Authority. If you live in the European Economic Area, you may also complain to the data protection authority of your country.

If you are a resident of the European Economic Area (EEA) or California, this policy respects and upholds your rights under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), respectively.

11. International Data Transfers

Your data may be processed on servers outside Israel: Cloudflare (hosting, database and Web Analytics) operates a global network including the United States and the European Union; Google (analytics, the tester group, Google Play, sign-in and the studio's mailbox, and for the Color Drain app Firebase, Google Cloud and AdMob) processes in the United States and in other countries where it operates; GameAnalytics (gameplay analytics for the Color Drain app) processes on cloud servers in the United States; PostHog (product analytics) processes in the United States; Resend (email) processes in the European Union (Ireland); Unity (the game engine and its purchase library, section 7) processes in the United States and in other countries where it operates; Apple (the App Store, Sign in with Apple — in the Color Drain app on iPhone and in the player community — and device checks) processes in the United States and in other countries where it operates.

The United States is not a country to which transfers are automatically permitted under the Privacy Protection Regulations (Transfer of Data to Databases Abroad), 5761-2001. We rely on two bases. First, Cloudflare, Google, Resend, GameAnalytics and Unity are contractually bound to protect the data to a standard no lower than Israeli law requires — their data-processing terms, which we have accepted (for Unity, its data processing addendum, which is part of the terms of service we accepted). Second, on your consent: for your own contact details, which you provide after reading this notice, for exactly the purpose you requested; for PostHog, which receives data only after you accept analytics cookies; and for Apple, which receives data only through the services you choose to use from it or that the iPhone app relies on (the App Store and purchases, Sign in with Apple, and the device checks described in section 7), under Apple's own terms and privacy policy. You may withdraw either at any time. Transfers to the European Union are to a jurisdiction whose protection is recognised as adequate.

12. The Player Community

If you join the player community, we keep a member record: it runs the community, gets the sign-in link to you, and sends the notifications you switched on. Joining is your consent to this, and you accept the community rules the first time you sign in. There is no password: you sign in by pressing the button on the page an emailed link opens, with Google, from which we take only your verified address, or with Apple (below).

Sign in with Apple. If you choose it, Apple shares with us an email address — your own, or, if you choose to hide it, a private relay address that forwards to it — and, the first time you sign in only, your name, as you let Apple share it. We store the address like any other sign-in; the emails we send to a relay address pass through Apple, which forwards them to you. If you are joining with Apple and have no display name yet, that name becomes your display name, which is public (below): you see it when you choose your username, and can change or clear it there or on your profile at any time; otherwise it is not kept. Nothing else Apple sends — an identifier for your Apple account and the tokens that prove the sign-in — is kept. What Apple itself does is in its privacy policy.

What we store. Your email address in clear and a one-way hash of it; your username, plus a display name and a line about you if you add them (or keep the name Apple shared); your avatar colour, language, role (member, tester or studio) and notification settings; when you joined, accepted the rules and were last seen; any suspension and why. Each sign-in link you ask for is recorded with your address, its expiry and whether it was used, and is deleted automatically a day after it expires. Then what you post — threads, replies, votes and poll votes — the reports you file, your appeals, and the moderation log of what the studio did and why.

Who sees what. Your username, display name, bio, avatar and posts are public to anyone who can open the community. Your email address is never shown to other members; moderators can see it.

How long. As long as your account exists. Delete it from your profile and your username, display name and bio are wiped, your address is replaced by a placeholder, and your posts and votes stay up as “deleted member”. Reports, appeals and the moderation log are kept for 12 months.

Your rights. Read, correct and delete your details on your profile. Section 10 and support@rdd-labs.com cover everything else.

Age. The community is for people aged 16 and over (section 9). If you are under 16, do not join; if we learn that a member is, we close the account and delete its personal data.

Where, and the cookie. Member data sits in the newsletter's Cloudflare D1 database, under sections 5 and 11. Signing in sets one cookie, rdd_member — HttpOnly. It signs you out after 30 minutes without activity and after 12 hours at most (15 minutes and 8 hours for the studio’s staff), and is deleted when you sign out (section 8).

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If the changes are material, we will make reasonable efforts to notify you (for example, by sending an email to the address you provided). Continued use of our services after a policy change constitutes acceptance of the updated policy.