1. Who We Are

This Privacy Policy applies to the website rdd-labs.com, to the Color Drain mobile application, and to related services operated by Daniel Simonov (Osek Patur: 323812388), trading as RDD Labs, based in Ashdod, Israel ("RDD Labs", "we", "us", or "our").

For privacy-related inquiries, contact us at support@rdd-labs.com.

This policy is governed by the Israeli Privacy Protection Law, 5741-1981, as amended by Amendment No. 13 (in force since 14 August 2025), and its regulations — including the Privacy Protection Regulations (Data Security), 5777-2017 and the Privacy Protection Regulations (Transfer of Data to Databases Abroad), 5761-2001. Under the amended law, online identifiers such as an IP address, a device or advertising identifier, and location data are personal data, and we treat them as such throughout this policy.

2. What Data We Collect

We collect the minimum data necessary to operate our services.

The table scrolls sideways — swipe to see Retention.

On the website, beyond the analytics data described above, we do not collect postal addresses, payment information, or precise location data. The only names we hold from the website are ones you give us yourself — typed into the “Request Pitch Deck” form, chosen as a username in the player community, or shared by Apple when you choose to sign in to the community with Apple (section 12); the signup forms ask for an email address and nothing else, apart from the email-language choice on the Hebrew pages. In the Color Drain game, the names we hold are your display name and, if you link a Google account, that account's name (section 7).

Everything you give us on this website is voluntary. No law requires you to provide it. Not providing it simply means you will not receive what the form offers — our updates, a reply to your enquiry or a community account — and has no other consequences whatsoever.

3. How We Use Your Data

Your email address is used only for the following purposes:

• Sending you a confirmation email right after you sign up. Until you press the button on the page its link opens, your address is not confirmed and is not added to any of our mailings.
• Telling you the day Color Drain is out, on the platform you chose: on Google Play for Android, or on Apple's App Store.
• Until Color Drain came out on Google Play on 7 October 2026: sending you the Google Play closed-testing link, with the step that let Google Play recognise you as a tester (section 7), once you confirmed a sign-up made on a Color Drain page with Android chosen — or if you signed up through the closed-testing form while it was open. Nobody is sent this link any more. If you chose iPhone, you were never sent it and your address was not added to the tester Google Group.
• Studio updates about once a month — what we shipped, what we learned, new game announcements and major milestones — but only if the form you signed up on said so. If you signed up on an older form that promised a single launch alert, or the closed test only, that is all you get.
• The launch gift. If you signed up for studio updates before 12 October 2026 and confirmed by 19 October, we use your record to make a personal code for an exclusive Color Drain skin, and email it to you once the game can redeem it (the gift's terms are in section 16.4 of the Terms). The code is made from your record and a secret key, so the game can check it without asking us: we never send your email address to the game, and the game records only which game account redeemed the code.
• If you join the player community: the sign-in link, notices about your account (a suspension, or the answer to an appeal), and the notifications you switched on there (section 12).
• If you write to us (for example at support@rdd-labs.com): to read your message and answer it. An AI assistant (see section 6) may help us sort your message and draft or send the reply to routine questions (how to get the game on Android or iPhone, signing in to the community, ideas and feedback). Requests about your privacy rights, refunds and purchases, security, legal matters or a child's data are always reviewed and decided by our team; the assistant may only tell you that we have received them.
• If you link a Google account in the Color Drain game: to identify your game account (section 7). We do not email that address.

We do not use your email for profiling, automated decision-making, or any purpose not listed above.

Some of the emails we send — including game launch announcements and studio updates — constitute advertising material under Section 30A of the Israeli Communications Law (Bezeq and Broadcasts), 5742-1982. In compliance with that law, every such email: (a) carries the word פרסומת at the start of its subject line and body; (b) clearly identifies RDD Labs as the sender, with our contact details and postal address; (c) includes an unsubscribe link — the page it opens takes a single press of a button, with no login — plus the standard header that lets your mail app unsubscribe you in one click. We honour every opt-out immediately and without conditions — including one sent to us as a plain reply — and we never send advertising material to anyone who has opted out. A confirmation email is not advertising material and is not marked as such.

4. Legal Basis for Processing

Under the Israeli Privacy Protection Law, we process your email address on the basis of your freely given consent, which you provide when you submit the sign-up form and confirm by pressing the button on the page that the link we email you opens. You may withdraw consent at any time — with the unsubscribe link in any email, the deletion form in section 10, or by writing to support@rdd-labs.com.

Cloudflare's security processing and Cloudflare's cookieless Web Analytics are carried out on the basis of our legitimate interest in protecting our website from abuse, keeping it available, and knowing in aggregate how it is used. Google Analytics and PostHog run only with your consent on the cookie banner, which you can withdraw at any time (section 8). The Color Drain app is covered in section 7.

5. Data Storage and Security

Email addresses are stored in Cloudflare D1, a distributed SQLite database managed by Cloudflare. Data is encrypted in transit (TLS) and at rest. Cloudflare's infrastructure is SOC 2 compliant. Cloudflare also keeps an automatic, restorable history of the database (D1 Time Travel) for up to 30 days, so a record deleted from the database can remain in that history until it ages out.

Email is delivered through Resend, Inc., from its European Union (Ireland) region. To deliver a message, Resend receives the recipient address and the message content and keeps its own delivery logs for a limited period under its privacy policy. We do not upload our list to Resend; each message is sent individually.

To protect our sign-up forms from abuse, our API applies per-IP rate limiting. It stores only one-way hashes derived from the request's IP address — never the raw IP — and these hashes are automatically deleted within approximately two hours.

The retention periods in section 2 are enforced by our own code, which deletes what has reached the end of its period; nobody has to remember to do it.

Access to stored email addresses is limited to authorised members of RDD Labs. We do not expose this data through any public interface.

No security system is impenetrable. If we become aware of a breach affecting your personal data, we will notify you at the email address you provided as required by applicable law.

6. Third-Party Services

We use the following third-party services, each of which has its own privacy policy:

• Anysphere, Inc. (Cursor) and SpaceXAI LLC (xAI) — Grok Bot, the AI assistant that may help us read and answer email sent to support@rdd-labs.com. Anysphere runs the service and SpaceXAI makes the Grok models it uses; both are based in the United States. It receives the emails sent to support@rdd-labs.com, with your address and anything you attach, and our replies, and it may keep copies in its own workspace. We have switched on the account's privacy mode, which is meant to keep these messages out of AI model training. Cursor Privacy Policy · xAI Privacy Policy
• Apple Inc. — for the Color Drain app on iPhone: the App Store and its in-app purchases (including the notices Apple sends our server when it refunds or revokes one), Sign in with Apple if you choose it, the age range an iPhone shares with apps, and the device checks behind Firebase App Check (section 7); and, on the website, Sign in with Apple to the player community if you choose it, including the private relay address that forwards our emails to you (section 12). Privacy Policy
• Cloudflare, Inc. — website hosting, CDN, DDoS and bot protection, cookieless Web Analytics, the D1 database that holds our own records (mailing list, enquiries, community, email log), and the lookup, through its public DNS resolver, that checks the domain part of an address you sign up with (the part after the @) can receive mail. Privacy Policy
• GameAnalytics ApS (Denmark) and its affiliate GameAnalytics Limited (United Kingdom) — gameplay analytics for the Color Drain app, processed for us on cloud servers in the United States (section 7). Data-processing terms
• Google LLC — website analytics (Google Analytics 4), loaded only after you accept analytics cookies; the Google Group that Google Play used as the Color Drain closed-test tester list until the game came out, and Google Play itself (section 7); Google sign-in to the player community, if you choose it; Google Workspace (Gmail), where the email you send to our @rdd-labs.com addresses is received and kept, and where our internal signup alerts arrive; and, in the Color Drain app, Firebase (the game account, cloud save, leaderboards, feedback, the records of purchases, gift codes and friend links, analytics, crash reports, device checks and, from version 2.3.12, Remote Config), BigQuery in Google Cloud (a copy of the game's analytics events), AdMob (the ads), Google Play Billing (purchases) and Google Play's install referrer (friend links) — section 7; and, for our own marketing, YouTube, where we have a channel, and Google Ads, which shows our ads for Color Drain, counts installs and, from players aged 18 and over, three in-game events to measure them, and reports the results to us only in aggregate (section 13). Privacy Policy
• LinkedIn — the studio's page on LinkedIn. LinkedIn processes what you do on our page as an independent controller (section 13). Privacy Policy
• Meta Platforms (Facebook and Instagram) — our official pages there, and the ads for Color Drain we run there. Meta processes what you do on our pages, and decides who sees our ads, as an independent controller; we share no player data with it, and there is no Meta pixel or software kit on this website or in the app (section 13). Privacy Policy
• PostHog, Inc. — website product analytics (United States), loaded only after you accept analytics cookies. Data reaches PostHog through our own address, without your cookies or IP address. The only location it receives is your country (two letters, worked out for us by Cloudflare), so we can see roughly where visitors come from. PostHog also holds aggregated reports that we copy into it from Google Analytics, for the website and for the Color Drain app (section 7) — counts and totals, with no identifier and no per-person rows — and the on/off switches we keep for some of the game's features, which hold no player data. The Color Drain app itself never contacts PostHog. Privacy Policy
• Resend, Inc. — email delivery (confirmation, closed-test, deletion, community, launch and update messages) and the delivery reports on them, EU region. Privacy Policy
• TikTok — our official accounts there (@color_drain for the game, @rddlabs for the studio), and the ads for Color Drain we may run there. TikTok processes what you do on our accounts, and decides who sees our ads, as an independent controller; we share no player data with it, and there is no TikTok pixel or software kit on this website or in the app (section 13). Privacy Policy
• Unity Technologies — the engine Color Drain is built with and its in-app purchase library, which sends Unity data about each purchase you start in the app (section 7). Privacy Policy

The website itself shows no ads and carries no advertising or retargeting tags. The Color Drain app does show ads, through Google AdMob, and shares data with Google for them (section 7). We advertise Color Drain on Google, Meta and TikTok without adding any tag to the website or the app (section 13). We do not sell or rent your personal data.

7. The Color Drain Mobile App

This section covers the Color Drain game, separately from the website. Color Drain has been available to everyone on Google Play, for Android, since 7 October 2026, and on Apple's App Store since 14 October 2026, as an iPhone app that the App Store also offers for Macs with Apple silicon (“On an iPhone”, below). This section describes version 2.3.14, which came out on 24 October 2026, and the earlier versions that players may still have, back to 2.3.11; where something started after version 2.3.11, the section says from which version, for example “from version 2.3.12”. Version 2.3.14 brings ads and purchases to players under 16 and ads between levels to players aged 16 and 17; where this section says “from version 2.3.14”, earlier versions do not do it: in them, players under 16 see no ads and can buy nothing, and players aged 16 and 17 see no ads between levels. Color Drain is built with Unity; its online features run on Google's Firebase and Google Cloud services, and the game does not connect to rdd-labs.com itself (links in the game open its pages in your browser, and friend links are rdd-labs.com addresses, below). Versions before 2.2.13, which only closed testers had, do not ask your age, so none of the rules below for players under 18 apply in them, and versions before 2.2.11 cannot delete your account: if you still have one, update the game from Google Play, or use the email route under “Deleting your game data” below.

On an iPhone. The iPhone version, Color Drain: Paint Rescue, has been on Apple's App Store since 14 October 2026, starting with version 1.0; it is not yet offered in the European Union. The App Store lists it under the developer name Dary Akerman, co-founder of RDD Labs, while the change to the studio's name is in progress with Apple. The App Store offers it for iPhone and, as an iPhone app, for Macs with Apple silicon; what this section says about an iPhone applies to the App Store version wherever it runs. It works as this section describes, with these differences. Where the section names Android or Google Play, an iPhone uses iOS and the App Store instead: the technical details the game sends include your iOS version rather than an Android version, and purchases and their records are the App Store's. On iOS 26 and later, the game asks Apple, instead of Google Play, whether it shares your age range with apps, and uses the answer in the same way. Apple's answer carries no installation ID, so the check for a withdrawn approval in “A parent's approval, and age checks in Google Play”, below, happens only on Android. The rest of that paragraph, about Google Play's approvals and age checks, applies only on Android too. Instead, from version 2.3.14, the game asks Apple at every launch whether a parent must approve the game's significant change (below) for you. If so, and your Apple Account first downloaded the game before version 2.3.14, the game holds the change back for that session: under 16, there are no ads and no purchases, as before; at 16 or 17, there is no ad between levels. On iOS 26.0 and 26.1, where the game cannot ask, it holds the change back in the same way. Nothing about this is stored. Firebase App Check asks Apple's App Attest, or DeviceCheck on a phone that cannot use App Attest, instead of Google Play Integrity. GameAnalytics receives Apple's identifier for vendors (IDFV) instead of Android's App Set ID. The advertising ID is Apple's IDFA, and the game can read it only if you allow tracking (“Ads”, below). You can link an Apple Account as well as, or instead of, a Google account (“Signing in with Apple”, below), and you buy through the App Store (“Purchases”, below): the reminder before a first purchase says that parents can ask Apple, at reportaproblem.apple.com, to refund a purchase made without their OK, and Apple tells our server when it refunds or revokes one (“Purchases on your game account”, below). An iPhone has no reminders and no clips, the App Store passes no install referrer to the game, and the artwork for every World is inside the app. After version 1.0, the App Store version has the same version numbers as the Android one, so what this section says “from version 2.3.12” applies on an iPhone too.

Your age. Before anything else in this section starts, the game works out your age group: under 16, 16 or 17, or 18 and over (section 9). It first asks Google Play, on your phone, whether it shares your age range with apps, and Google Play may ask you, in its own window, whether to share it. If the range comes from a parent who manages your Google account, or Google has assessed or verified it, that range decides and the game does not ask you; if you gave Google the range yourself, the game uses that range, or, if you already answered the game's question, whichever of the two is younger. Otherwise the game asks you once for your month and year of birth. Your answer stays on your phone: the game keeps only your age group, where it came from (your answer or Google Play) and, if you are under 18, the month in which you move up to the next group. We never keep your date of birth, and none of this leaves your phone. What Google Play tells the game is used only to set your age group and to follow a parent's decision (below), apart from the installation ID below, and is never recorded; it is never passed to the game's ad or analytics software, and never used for ads or analytics. The same goes for Apple's answer on an iPhone. Only three things ever leave your phone because of your age: for players under 18 (before version 2.3.14, for players aged 16 and 17 only), the flag the game adds to its requests to Google's ad and consent services, so that Google treats them as a child's and does not personalise their ads; if a parent supervises your Google account, your installation's ID, in the one check described below; and, if a phone that already had a game account moves to Offline Play, a one-time request that deletes that account (described under Offline Play). You cannot change your answer in the game; when you reach the next age group, the game moves you on by itself. If you are under 16, the game runs in Offline Play (below), and none of the collection described in this section happens, apart from the ads and purchases that Offline Play has from version 2.3.14.

A parent's approval, and age checks in Google Play. If a parent supervises your Google account and has not yet approved the game, or has declined, the game runs in Offline Play until they approve it. Where the law requires you to confirm your age with Google Play and you have not, the game runs in Offline Play and asks you to confirm your age in the Play Store to get the full game, with a button that opens it. Until then, nothing this section describes for players aged 16 and over happens, and, from version 2.3.14, the game shows no ads and offers no purchases, whatever your age. Because version 2.3.14 brings new ads and purchases to players under 18, we told Google Play and Apple about it as a “significant change” under Texas law (SB 2420): a parent who supervises a child's account approves it in the store before the child gets it. If a parent withdraws an approval they gave, Google Play lists that installation's ID (Google Play's own identifier for the game on that phone) in our Google Play Console; we copy that list into our database in Cloud Firestore once a week and keep each ID there for 12 months after we copy it, or longer while Google Play still lists it, so that the block keeps working. If a parent supervises your Google account and you are 16 or over, the game checks for itself each time it signs in to your game account: it sends your installation's ID to our database, which answers only whether that ID is on the list; the game does not download the list, and the check stores nothing. If the ID is on the list, the game becomes unavailable on that installation and shows “Color Drain isn't available on this device” from then on; that result is kept only on the phone. Installations that no parent supervises, and Offline Play, never make this check. If your age group goes down — Google Play later reports that you are under 16, or a parent's approval becomes pending or is declined — or a parent withdraws an approval, the game switches analytics and crash reports off at once, at every launch, and events from a session without analytics are never sent later.

Offline Play (under 16). You can play every level, and your progress is kept only on your phone. The game starts no Firebase service — no game account or cloud save, no leaderboards, no feedback, no gift codes, no Remote Config, no analytics and no crash reports — and no friend links, reminders or clips, and it leaves out everything that would need them, such as the RANKS tab, Google sign-in and the account ID, and feedback forms. A friend link that opens the game is dropped, and Google Play's install referrer is not read. “Delete my progress” in Settings erases your progress on the phone. Before version 2.3.14, Offline Play has no ads and no purchases either, and leaves out the features that need them, such as free coins, Second Wind and the shop's COINS section. From version 2.3.14, Offline Play has ads and purchases: ads from Google AdMob only, which are never personalised (“Ads”, below), and real-money purchases through Google Play or the App Store only, each after a grown-up's check (“Purchases”, below). They send what those paragraphs describe to Google or Apple and, for a purchase, to Unity (“Unity”, below); nothing about them reaches us. The one exception to what Offline Play sends us: if you are under 16 and your phone already had a game account from an earlier version, the game makes one request to our server to delete that account — sending the account's sign-in token and, if the phone has one, its Google Analytics app-instance ID, so that the server can also ask Google Analytics to erase that data, with a device check (Firebase App Check) for that request only — which deletes the account and everything else “Delete account & data” deletes (below); your progress stays on the phone. After that, Offline Play sends us nothing. On Android, the artwork for World 2 onwards is part of the game's own files and is downloaded through the Google Play Store app on your phone, as for every player; the game sends nothing about you with that request. When you turn 16, the game shows you “Welcome to the full game” and then the notice below, before anything starts; the crash reports your phone kept during Offline Play are deleted unsent.

What the game tells you first. If you are 16 or over, the game then shows a notice, once, before anything that sends data starts. It says what the game collects and why, who processes it for us, that no law requires you to give us this data but the game needs it to work, and that you can delete your account and its data in Settings at any time, and it links to this policy and to the game terms. If you are 18 or over, it lists your game account and cloud save, crash reports, “how the game is played (analytics)” and ads from Google, which may be personalised, processed for us by Google (Firebase and AdMob) and GameAnalytics, and says that your leaderboard name and scores are public and that you can hide them. If you are 16 or 17, it lists your game account and cloud save, crash reports and ads from Google, never personalised, processed for us by Google (Firebase and AdMob); it says “We don't collect analytics for players under 18”, and that your leaderboard name comes from a list and you can hide it. Nothing starts until you press Continue. If you turn 18 — on your birthday, or when Google Play's age signal says so — the game first shows you the notice for players aged 18 and over, before analytics or personalised ads start (before version 2.3.14, before ads between levels start too). If you are under 16, from version 2.3.14, the game shows its own notice before any ad or purchase: that the game has ads from Google (AdMob), which are never personalised, and that to show and count them Google gets the phone's IP address and basic device details, but never its advertising ID; that anything you buy goes through Google Play or the App Store, through Unity's purchase tools, which tell Unity about each purchase, and needs a grown-up's OK; that the game collects no analytics or crash reports for players under 16, and there is no account; and that no law requires you to give us this data, but ads and purchases need it to work. Before version 2.3.14, Offline Play collects nothing and shows no notice.

Your game account. The first time the game can reach the internet after you press Continue on the notice, it creates a game account for you with Firebase Authentication (Google LLC): a random account ID, with no name, email address or password. Every player outside Offline Play gets one, and there is no option to skip it — it is how your progress is saved. The game's Profile screen shows this ID in full, after “ID:”, with a COPY button that copies it, and your display name starts as “Player #” followed by four characters of it.

Cloud save. After each level and when you leave the game, your progress is backed up under that account in Cloud Firestore (Google LLC): your display name, whether you have chosen to hide from the leaderboards, levels, stars and total colour drained, coins and boosters, skins, avatars, upgrades and other items, the citizens you have rescued, and your daily-reward streak. The backup also holds a technical profile of your phone — model, Android version, memory, number of processor cores, graphics system, performance tier, app version, whether it is a development build, and when you last played — which helps us find problems on particular phones. Purchases are not part of the backup: the store keeps them, and our server keeps its own record of some of them (“Purchases on your game account”, below).

Signing in with Google (optional). If you choose to link a Google account, Google gives the game that account's email address, name and profile picture, and Firebase stores them with your game account; the game shows your email address. Linking does not change your account ID. “Sign out” unlinks Google; your game account stays. If the Google account is already linked to another Color Drain save — after you reinstall the game, for example — the game shows the two saves side by side (display name, highest level, stars, coins and when each was last played, from summaries our server prepares without either account ID) and you choose which one to keep. The other save is never deleted automatically: it stays on our servers until you ask us by email to delete it; “Delete account & data” does not reach it, because it belongs to another game account.

Signing in with Apple (optional, iPhone only). If you choose to link an Apple Account, the game asks Apple for neither your name nor your email address, so Apple gives it only an identifier for your Apple Account and proof of the sign-in; Firebase stores the identifier with your game account, and the Profile screen calls the account “Apple ID”. So that deleting your game account can also end the game's access to your Apple Account, as Apple requires, our server exchanges the one-time code Apple issues when you link for a token, and keeps it with your account ID until your game account is deleted. Linking does not change your account ID, and “Sign out” unlinks Apple; your game account stays. If the Apple Account is already linked to another Color Drain save, the game shows the two saves side by side and you choose which one to keep, as with Google (above).

Public leaderboards. The game has two global leaderboards, which show each player's display name, star total, total colour drained and the skin and avatar they use. Everyone who plays Color Drain online can see them. “Hide me from the leaderboards”, on the leaderboard screen, deletes your entries and keeps you off the boards until you switch it off; the choice is saved with your cloud save, so it follows your game account to another phone. Entries are stored under a one-way hash of your account ID and do not include the ID itself. If you are 18 or over, your display name is whatever you type, 3 to 16 characters, and before it can appear on the boards our server checks it — its length, its characters (letters of the Latin alphabet, including accented ones such as é, ã or ñ, digits, spaces, hyphens and underscores, with at least one letter and no six digits in a row; letters of other scripts are refused) and a list of blocked words in English and Hebrew — and keeps the name it approved with your game account; do not use your real name or anything else that identifies you. If you are 16 or 17, your name on the boards is the one the game gives you or one you pick from the game's list. Tapping another player's name lets you report it as offensive or as personal information: we store the report — the board, the entry, the name, the reason, your account ID and the time — where no player can read it, and review it; you can send one report every 30 seconds, and our server keeps the time of your last report to enforce this. Entries that earlier versions wrote are stored under the account ID and still include it, and any copy of the game can read them: version 2.2.13 and later versions delete your own old entries the first time they update the boards, and we will remove the rest ourselves. Versions 2.2.12, 2.2.11 and earlier can no longer add or update entries, so your results from them do not reach the boards. “Delete All Progress” does not remove your entries; “Delete account & data” does, and so does a deletion request by email (below). The game terms set the rules for display names.

Feedback you send from the game. If you use “Send Feedback” in Settings or answer a feedback prompt after a level, we store what you write (up to 4,000 characters) and your answers — type, rating, difficulty, features and category — with your account ID, display name, level, stars, total colour drained, app version, platform and the time, in Cloud Firestore, so that we can read it and improve the game. Please do not include personal details; every feedback form in the game reminds you of this. The game also keeps your last 50 feedback entries on your phone.

Ads (Google AdMob). Color Drain shows ads through Google AdMob (Google LLC), its only ad partner: there is no ad mediation, so no other ad network receives an ad request. Players aged 16 and over see them and, from version 2.3.14, so do players under 16; in Family mode, and while the game waits for a parent's approval or for you to confirm your age in Google Play (above), the game shows none, and on an iPhone, in a session in which it holds back version 2.3.14's change for a player under 18 (above), it shows only the ads that player had before that version. Rewarded video ads play only when you choose to watch one for a reward, such as your daily reward, free coins, a second chance in a level, a skin trial, doubled coins or offline earnings, or, from 16, a refilled tank; players under 16 can watch at most 10 free-coin videos a day, and only players aged 18 and over can watch one for an extra spin of a prize wheel. The game also shows an ad between levels to players aged 18 and over and, from version 2.3.14, to younger players too, only as the panel at the end of a level closes: from level 8 (from level 4 in version 2.3.11), only after at least two levels finished or failed since the last one and 90 seconds since the last full-screen ad, never when you press Retry, and never within 7 days of a purchase. From version 2.3.12 we can change these limits for players aged 18 and over through Remote Config (below), but only to show these ads later or less often. The No-Ads Pass removes these ads between levels, but not the rewarded videos (“Purchases”, below). There are no other ads. From version 2.3.14, “Report an Ad” in Settings, there for every player who sees ads, opens an email to support@rdd-labs.com in your mail app (in Offline Play, past the grown-up check); the game adds nothing to it, and we handle what you write like any other email to us (section 3). Every ad request the game makes is limited to ads rated G (general audiences) for players under 18 (before version 2.3.14, for players aged 16 and 17), and to ads rated G or PG (parental guidance) for players aged 18 and over; on an iPhone, from version 2.3.14, it is limited to ads rated G at every age; our AdMob settings for the game set a PG limit for everyone and block these ad categories: alcohol, gambling, dating, social casino games, references to sex, sexual and reproductive health, weight loss, cosmetic procedures, get-rich-quick schemes, drugs and supplements, and sensationalism. To serve and measure ads and to detect fraud, the AdMob software in the game sends Google your IP address (from which an approximate location is worked out), information about your phone and the app, and how you interact with ads, and, if you are 18 or over, your phone's advertising ID. If you are 18 or over, Google, and ad technology partners that Google works with, can use this data to show you personalised ads, under Google's own policies (how Google uses data from apps that use its services). If you are under 18 (before version 2.3.14, 16 or 17), the game asks Google to treat every ad request as one for a child (AdMob's age-restricted treatment “child”): your ads are never personalised, your advertising ID is not sent, no third-party ad vendors are involved, and Google uses what it receives — your IP address, information about your phone and the app, and how you interact with the ad — only to serve contextual ads (chosen for the app, not for you), to limit how often an ad is shown (frequency capping), to measure ads and to prevent fraud. You can reset or delete your advertising ID at any time in your phone's settings (on most phones, Settings → Privacy → Ads, or Settings → Google → Ads). On an iPhone, the advertising ID is Apple's IDFA (Identifier for Advertisers), and iOS gives it to an app only if you allow tracking. If you are 18 or over, the game shows Apple's App Tracking Transparency prompt once, after the notice and Google's consent message; AdMob and GameAnalytics can read your IDFA only if you choose “Allow”. If you don't, you still see ads, but they are not personalised. Players under 18 never see the prompt, and the game never asks for their IDFA. You can change your answer at any time in the iPhone's Settings → Privacy & Security → Tracking.

What the game asks you, and what waits for your answer. Once you press Continue on the notice, Google's consent software checks whether a consent message is required where you are. If you are 18 or over, in the European Economic Area, the United Kingdom and Switzerland it shows Google's consent message, which asks for your consent to a list of purposes, among them storing and reading information on your phone and personalised ads; “Privacy Choices” in Settings opens it again so that you can change your answer. Everywhere else, including Israel, no message is shown, and “Privacy Choices” only says that no ad privacy choices apply in your region. If you are under 18 (before version 2.3.14, 16 or 17), the game tells the consent software that you are under the age of consent, so no consent message is shown anywhere, and where the GDPR applies, Google shows you only its “limited ads”; for players aged 16 and 17, “Privacy Choices” says that there are no ad choices to make, because their ads are never personalised. Until the consent software has an answer, the game requests no ads and GameAnalytics does not start. Then:

• GameAnalytics, for players aged 18 and over only, starts, in those three regions, only if you consent to information being stored on and read from your phone, and only with that consent does it get your advertising ID; everywhere else it starts without asking you and never gets your advertising ID. If you do not consent, the events that were waiting for it are thrown away; if you withdraw your consent in “Privacy Choices”, it stops sending.
• Google Analytics for Firebase, for players aged 18 and over only, starts with every type of consent set to “denied” and then follows the answer: all are set to “granted” where no message is required, and set from your choices in the message where it is. With consent denied, it still sends Google signals that carry no identifier.
• Firebase Crashlytics and Firebase App Check, for players aged 16 and over, do not wait for this answer: they start once you press Continue on the notice, everywhere, whatever you answer.

Outside those three regions the game does not ask players aged 18 and over for consent to analytics, and it has no setting that turns analytics off. What the game collects is in the notice it shows before any of it starts, and this policy and the game terms are linked from that notice and from Settings. If you do not want this data collected, do not press Continue on the notice: close the game and uninstall it. You can also delete your advertising ID in your phone's settings.

Analytics and crash reports. For players aged 18 and over only, Google Analytics for Firebase records what happens in the game against a random app-instance ID, never your advertising ID, as far as the consent settings above allow: first opens and sessions; levels started, finished, failed or abandoned, and how a session ended; screens viewed; tutorial steps; rewarded ads offered and watched, and ads between levels shown, clicked, unavailable or failed; purchases (the product, its category, price, quantity and currency, and the Google Play order number); linking or unlinking a Google or Apple account; the daily reward, prize-wheel spins and other rewards; the cards that offer the No-Ads Pass, and what you chose; a gift code redeemed; friend links shared, installed, redeemed or claimed; clips offered and shared, with the app you shared one to; reminders allowed, scheduled or opened; from version 2.3.12, the prompts that offer to link a Google account or to rate the game in the store, and your answers; never a gift code or a friend link's code; and, automatically, your phone model, Android version, country and app version. We use it to see how the game is played and where players get stuck. A daily copy of these events is exported to BigQuery, in our Google Cloud project, where we can analyse it (“How long, and where”, below). We also copy aggregated reports from the game's Google Analytics into PostHog (section 6) to analyse them: active users per day, week and four weeks, and counts of events by event name, by new or returning player, by phone model and country, and by location, device, campaign and traffic source. They are counts and totals, with no app-instance ID, account ID or per-person rows. Our Google Analytics property has Google signals switched off, so these events are not combined with information from signed-in Google accounts, and ads personalisation switched off in every region, so they are not used to personalise ads. The property is linked to our Google Ads account so that Google Ads can count first opens, completed levels and purchases to measure and improve our ads for the game; personalised advertising and audience sharing are off on that link (section 13). For players aged 16 and over, Firebase Crashlytics records crashes and errors: the stack trace, the state of the app, the screen and level you were on, your phone model and Android version, and a Crashlytics installation ID; when a purchase fails to be delivered, the report names the order only by the last four characters of its Google Play order number. Firebase App Check asks Google Play Integrity to confirm that requests come from the real game on a real phone.

GameAnalytics. For players aged 18 and over only, the game also sends data to GameAnalytics, a game-analytics service that processes it for us (section 6), once the consent rules above allow it. It receives a random GameAnalytics ID, Android's App Set ID, your IP address, from which it works out your country, your phone's make, model, Android version and connection type, and the app version, and your advertising ID only in the case described above. With them it records when your sessions start and how long they last, and many of the game events that Google Analytics records (above), among them: the levels you start, finish (with the stars you earned) or fail, with the time you spent, how much colour you drained, which attempt it was and whether the game gave you extra time; the ones you leave unfinished, with how far you got and why the level ended; and your purchases — the product, its price and currency, but not the order number — and the ones that failed or were restored. It also records the coins and pigment you earn and spend, and on what; each rewarded ad and each ad between levels requested, loaded, shown, clicked or failed, the rewards you get from rewarded ads, and what AdMob reports each ad earned; the settings you change, and to what; whether you have ever bought anything; and your phone's performance tier. GameAnalytics' own error reporting is switched off: the game sends it only exceptions and errors, at most 20 per session, with email addresses and runs of six or more digits removed; in rare failures they can still include your account ID. We use it to see how the levels are played and where players stop. GameAnalytics stores the data with its cloud providers in the United States, keeps raw events for one month and player-level data for up to 18 months, and may also use the data, aggregated or de-identified, for its own benchmarks and to improve its services.

Unity. Color Drain is built with the Unity engine (Unity Technologies); the engine's own diagnostics are switched off. For every player who buys something, whatever their age (before version 2.3.14, only players aged 16 and over can), the Unity in-app purchase library in the game sends Unity an event when you start a purchase, when it is paid, fails or is cancelled, and when it is completed: the product, its price and currency, the transaction ID and, once it is paid, the Google Play receipt (with the order number and a purchase token), with your phone model, Android version, language settings, storage size and when your phone last started up, the app version and install time, and a Unity installation ID, but not your advertising ID. The library has no setting that turns this off. Unity handles this data under its own privacy policy.

Settings we can change without an update (Firebase Remote Config, from version 2.3.12). From version 2.3.12, the game uses Firebase Remote Config (Google LLC), so that we can change some of its settings without releasing a new version. It runs only for players aged 16 and over: on a launch in Offline Play or in Family mode, before your age group is known, and where the game is unavailable, Firebase does not start and nothing is fetched. When the game starts, it asks Remote Config for our current settings, and Google's software fetches them from Google at most once every 12 hours; the rest of the time it uses the copy on your phone. Some settings, such as the dates of seasonal events, can change while you play; the others take effect the next time you open the game. Google describes what Remote Config collects for this: on Android, your phone's country code, language code and time zone, its platform and operating-system versions, the game's Firebase app ID and package name, and the version of the Remote Config software; on an iPhone, the country code, language code, time zone, operating-system version, Firebase app ID, bundle ID and the version of the Remote Config software, and, for players aged 18 and over, whose Google Analytics is on, the Google Analytics user properties the game sets (which control mode you use, and whether the phone is one of our test phones) and when the game was first opened. Google works out the country from the IP address of the request. Remote Config also relies on Firebase installations, which, as Google describes it, collects a Firebase installation ID — an identifier for this installation of the game that, Google says, does not uniquely identify a user or a physical device — and the “Firebase user agent”: your phone's operating-system version, name, model, brand and form factor, the app store that installed the game, and which Firebase software the game uses, with its versions, which Google says is never linked to a user or device identifier. Google uses the installation ID to choose which settings to return (“How long, and where”, below, says how long Google keeps it). Our settings do not use Google Analytics audiences or user properties to decide who gets what, and they contain no personal data. What they can change: for players aged 16 and over, the dates of seasonal events and of Drain Rush weekends, switching the Paint Wheel, Tanks or Colour Flood off (and, from version 2.3.13, Hindi), and the level timers; for players aged 18 and over only, ad and reward settings — when ads between levels may appear (only later or less often, above), free-coins videos, the Paint Wheel's spins and coin prizes, the Starter Pack's coins, and some numbers for Tanks and Colour Flood. Players aged 16 and 17 always get the ad and reward settings the game was built with.

Purchases. The game sells ten items for real money through Google Play Billing (Google LLC): the No-Ads Pass, which removes the ads between levels and gives you 100 coins a day and the Diamond skin; the Vacuum Master starter pack; four coin packs; and four premium avatar items — three avatars, and a pack of all five premium avatars. On an iPhone, Apple's App Store in-app purchase (Apple Inc.) sells the same items apart from the premium avatar items: six in all. The game terms describe them. Players aged 16 and over can buy them and, from version 2.3.14, so can players under 16; nothing can be bought in Family mode, or while the game waits for a parent's approval or for you to confirm your age in Google Play (above), and on an iPhone a player under 16 can buy nothing in a session in which the game holds back version 2.3.14's change (above). Each has fixed contents: no one can pay for a chance at a random reward. The Paint Wheel stays free, and players under 16 get no chance-based rewards at all. If you are under 16, a grown-up's check comes before every purchase, and the purchase starts only once it is passed; the stores' own parental approvals, such as purchase approvals in Google Family Link and Apple's Ask to Buy, still apply. The top of the shop's coin section says “Under 18? Ask a parent or guardian before you buy.”, and if you are 16 or 17, the game shows you this before your first purchase in the shop: “Under 18? You need a parent's or guardian's OK to buy. Parents can ask us to refund a purchase made without their OK.” A premium avatar bought from the avatar picker, outside the shop, goes straight to Google Play without this reminder. From version 2.3.14, for every player under 18, the shop's wording is neutral: each button shows the price, and there are no “best value” labels, no countdowns and no upsell cards, such as an offer of the No-Ads Pass straight after an ad. Google or Apple handles the payment — we never receive your card or bank details. For players aged 16 and over, we receive the order number, the product and its price; the game uses them to deliver and restore what you bought, and, if you are 18 or over, Google Analytics and GameAnalytics record them as described above. If you are under 16, the game gets from the store only the purchase token, the product ID and the transaction ID, and keeps none of them: it keeps on your phone only which items you own and the product IDs the store has restored. You have no game account, so nothing about the purchase reaches our servers. Google Play or the App Store, and its billing software on your phone, keep their own records of your purchases.

Purchases on your game account. So that the No-Ads Pass, the Starter Pack and the premium avatars follow your game account to another phone, including from Android to iPhone and back, the game sends our server what the store gave it for each of these purchases — on Android, the Google Play purchase token; on an iPhone, Apple's signed transaction — and our server checks it with Google or Apple before recording it. The record holds your account ID, the store, the product, whether you own it or it was refunded, when you bought it and whether it was a test purchase; a Google Play purchase is filed under a one-way hash of its purchase token, never the token itself, and an App Store purchase under Apple's original transaction ID. Our server also keeps the list of what your account owns, including anything it was given with a gift code (below). It asks Google Play every 6 hours for purchases that were refunded or cancelled, and Apple tells it when it refunds or revokes one; the record then shows the purchase as refunded, and your account no longer counts it as owned. Coin packs are not recorded this way, and neither is anything bought in Offline Play, which has no game account.

Gift codes (16 and over). If you have a gift code, such as the launch gift we emailed to people who signed up on our website (section 3), you can type it in Settings → “Gift code”. The game sends the code to our server, which checks it and, if it is genuine and unused, gives the gift to your game account. Our server keeps a record of the claim — the code's serial number, your account ID and the time — and of what your account was given, and counts your attempts, so that you can try at most ten times an hour. From version 2.3.13, a gift code can give coins as well as an item. For a code that gives coins, our server also records how many coins it gave and when they reached your account, and your cloud save lists the codes whose coins your balance already holds (the campaign, the code's serial number and the number of coins, never the code itself), so that the coins arrive only once. A launch-gift code's serial number is the number of the website signup it was made for, so together with our website records it shows which signup's code was redeemed by which game account; no email address passes between the website and the game.

Friend links (16 and over). “Invite a Friend” and “Send a Tank” let you share a link to the game. The link is an address on rdd-labs.com with a random code our server made for it: your own invite code, or a tank code that works once and for 48 hours. On an Android phone that has the game, the link opens it; otherwise the page sends the visitor to Google Play with the code attached, and Google Play passes it to the game, which reads it from Google Play's install referrer once per installation, and only once it knows that the player is 16 or over. When you share or open a link, the game sends its code to our server, with a device check (Firebase App Check) where there is one. When a friend you invited has cleared level 5, on a game account less than 30 days old, you each get a tank and 100 coins; a tank link gives your friend a tank, and you get one back when it is picked up. Our server keeps your invite code, whose invite you redeemed and whose redeemed yours, the tank links you sent and who claimed them, the gifts waiting for you, and daily counts that limit how many links can be made and used. These records hold account IDs and random codes only — no names, no contacts, no friend list — and the game never tells you which account is on the other side.

Reminders and clips (Android, 16 and over). The game can remind you, with a notification on your phone, about your daily reward and other events in the game: at most one a day, and never between 21:00 and 09:00. If you are 16 or 17, reminders are off until you switch them on in Settings; if you are 18 or over, they are on once you allow the game to show notifications, which on Android 13 and later it asks at most twice. Reminders are planned on your phone. At the end of a level, the game can make a short clip of it from its own picture and sound — never from your camera or microphone — and offer it to you; the clip is kept in the game's storage on your phone and goes only where you send it from Android's share menu, and sharing it earns you nothing. For players aged 18 and over, Google Analytics records reminders and clips as described above.

Family mode. If you hand your phone to a child, Settings → Family → “Playing with a child” switches on Family mode in one tap; switching it off needs the grown-up check. From version 2.3.14, a parent can switch it on in the game of a player under 16 too, to turn off that game's ads and purchases. While it is on, whatever the player's age, no ad loads or plays and no purchase can start; for a player aged 16 or over, the game also plays by Offline Play's other rules: analytics and crash reports stop at once, and the crash reports kept in the meantime are deleted before crash reports start again; no leaderboard entry is written; there are no friend links, reminders, clips or feedback forms; and every link out of the game asks a grown-up first. If the game is opened while Family mode is on, it starts no game account, ads or purchases (and, from version 2.3.12, fetches no Remote Config settings) until Family mode is switched off. If you switch it on while playing, your game account stays signed in until the game is next opened, and progress made in the meantime is still backed up to your cloud save. The switch is kept only on your phone, and “Delete All Progress” does not reset it.

Kept only on your phone. Your age group and where it came from (and, under 18, the month you move up to the next group), whether Family mode is on, whether you have seen the notice and the purchase reminder, your settings (sound, vibration, battery mode, colour-blind mode, frame rate, graphics quality and reminders, and, from version 2.3.12, the game's language), your offline-earnings and daily-goal timers, the counts that space out the ads between levels, for players under 16 which items they own and the product IDs the store has restored (from version 2.3.14), friend-link codes waiting to be used, the clips the game made, the last Remote Config settings fetched (from version 2.3.12), your last 50 feedback entries, and a key that protects your save file from tampering stay on your phone, and uninstalling the game removes them; only the changes you make to your settings are also reported to GameAnalytics, for players aged 18 and over (above).

The game does not ask for permission to use your location, contacts, photos or files, microphone or camera, and it does not read the contents of other apps. On Android 13 and later, it asks for permission to show notifications, for reminders (above). We do not sell your personal data.

Why, and on what basis. The game account, the cloud save, the leaderboards, the reports you make and the feedback you choose to send are how the game works: we process them to provide it to you. We check whether a parent has withdrawn their approval in order to respect that decision, following Google Play's guidance. In the European Economic Area, the United Kingdom and Switzerland, Google Analytics and GameAnalytics, which run only for players aged 18 and over, rest on your consent, which you can withdraw at any time in “Privacy Choices”; the signals without identifiers that Google Analytics sends when consent is denied, and analytics everywhere else, where the game does not ask for consent, rest on our legitimate interest in understanding and improving the game. Crash reports and device checks rest on our legitimate interest in fixing the game and in preventing fraud, everywhere. The ads data is processed to show and measure the ads in the game; where the law requires consent for personalised ads, Google's consent message asks for it (“What the game asks you”, above), and players under 18 never get personalised ads. In the European Economic Area and the United Kingdom, the ads shown to players under 18 rest on our legitimate interest in funding a free game with ads, served as Google's limited ads; players under the age of consent are not asked for consent, and no player under 18 is profiled. A purchase is processed to sell you what you chose to buy, through the store.

Is any of this required? No law requires you to give us this data, but the game needs it to work, as the notice says. Once you press Continue on the notice, the game account, the cloud save, crash reports and device checks start automatically, and so do, from version 2.3.12, the Remote Config fetches, and analytics for players aged 18 and over outside the three regions above; the game's online features depend on the account and the cloud save. If you do not want this data collected, do not press Continue: close the game and uninstall it. Declining in Google's consent message, withdrawing your consent later or deleting your advertising ID does not take any feature away. In Offline Play, from version 2.3.14, ads are part of the game once the under-16 notice has been shown; Family mode (above) turns them off, and no purchase starts without a grown-up's check.

How long, and where. Your game account, cloud save, leaderboard entries and approved leaderboard name, the reports you make and the time of your last one, your feedback, and the records of your purchases, gifts and friend links: until you delete them in the game or ask us to (below) — nothing deletes them automatically yet, but we will remove the leaderboard entries that earlier versions wrote ourselves (above). Deleting your account keeps a few records without your account ID, and one with it, as “Deleting your game data” (below) explains. A save you left behind when linking Google: until you ask us to delete it. An installation ID on our list of withdrawn parental approvals: 12 months after we copy it from our Google Play Console (we copy the list once a week), or longer while Google Play still lists it. Google Analytics data: 2 months, the retention period set in our Google Analytics property for event and user data. The daily copy of those events in BigQuery: 60 days for the tables created since 4 October 2026; the tables from 3 September to 4 October 2026 have no expiry set. GameAnalytics data: raw events for one month and player-level data for up to 18 months, GameAnalytics' standard periods, after which it is deleted or made anonymous. Crash reports: 90 days, Crashlytics' standard retention. The Firebase installation ID that Remote Config uses (from version 2.3.12): Google keeps it until we ask Google to delete it, and then removes it from its live and backup systems within 180 days; we make no such request, and deleting your game account does not either. Ads data and your Google Play purchase records: under Google's own policies. Your App Store purchase records: under Apple's. The Sign in with Apple token: until your game account is deleted. Unity's data: under Unity's policy. What the game keeps about the purchases of a player under 16 (from version 2.3.14) — which items they own and the product IDs the store has restored: on the phone, until “Delete my progress” erases them (the game then asks the store to restore the purchases), or the game is uninstalled; they never reach us. Section 9 sets out what is kept about players under 16, and for how long, in one place. We keep the game account, cloud save, leaderboard entries and approved leaderboard name, your reports, your feedback and the records of your purchases, gifts and friend links in Google Cloud Firestore in the European Union (the europe-west10 region: Berlin, Germany); our server functions, which delete accounts, compare saves when you link Google, check purchases and gift codes, handle friend links and run the server checks such as the leaderboard-name check, run in Google Cloud in the United States (the us-central1 region: Iowa). Google, GameAnalytics and Unity process this data in the United States and in other countries where they operate (section 11).

Abuse prevention (website). To stop a single source flooding our sign-up form, we count submissions per hour against a one-way hash of your IP address combined with the current hour. The raw IP address is never written to our database, and these counters are deleted automatically after about two hours.

Closed testing. Until Color Drain came out on Google Play on 7 October 2026, confirming a signup made on a Color Drain page with Android chosen emailed you the Google Play invitation to the closed test (section 3); the record is the one described in section 2. Since then, no invitation is sent and no address is added to the tester group. Google Play let testers in through a Google Group that served as the tester list: the invitation asked you to join that group with the Google account on your phone, or — where we had switched this on — we added your confirmed address to the group ourselves. As the group's owner the studio can see who is in it, and Google handles the membership under its own privacy policy. Google Play separately makes tester participation data available to us as the developer. No name, no device information. If you signed up through the earlier closed-testing form, your record also shows whether you ticked the 14-day box; such a record is used only for the closed test, and is deleted on request and in any case once the closed test concludes. If you chose iPhone, none of this happened: no Google Play invitation was emailed, nothing was sent to Google, and your address was not added to the tester Google Group. The address is kept only for the confirmation, the launch news and the studio updates (sections 2 and 3).

Investor and partnership enquiries. The “Request Pitch Deck” form is a business-contact channel, not part of the game. If you use it we store exactly four things: the name you enter, the company or fund name if you give one, your email address, and the date and time you submitted it. We use them to reply to you and to send the pitch deck. Investor enquiries are kept separate from the player mailing list and are never added to it, never used for marketing, and never shared with anyone outside RDD Labs. Ask us at support@rdd-labs.com, or use the deletion form in section 10, and your enquiry is deleted.

Signup alerts. So that we notice a signup or a pitch-deck enquiry without having to check a database, a short alert is sent to our own internal team channel. That alert contains a masked address (for example d*****@gmail.com) — never your full address — plus, for signups, a running total, and for enquiries, the company name you gave.

Deleting your game data. You can delete your game account and its data from inside the game, or ask us to by email:

• In the game: Settings → “Delete account & data”. After two confirmations, and with an internet connection, our server deletes your cloud save; your entries on every leaderboard; your approved leaderboard name, the reports you made and any reports about your entries, and the time of your last report; all feedback you sent; your purchase records and the list of what your account owns; what your account was given with a gift code, the record of the coins gift codes gave it (from version 2.3.13), and the count of your gift-code attempts; your invite code, the gifts waiting for you, your daily friend-link counts, your redemption of a friend's invite and the tank links you sent; and, last, your game account itself, with any Google email address, name and picture linked to it. If you linked an Apple Account, it also revokes the game's Sign in with Apple authorization with Apple and deletes the token it kept for that. It also asks Google Analytics to delete the data recorded for the game on your phone, using the Google Analytics app-instance ID your phone sends with the request. The game tells you whether the deletion worked. Your phone then erases your progress, gets a new Google Analytics ID and starts over as a new player, with a new game account. It keeps, without your account ID, the record of a gift code you claimed (your account ID is replaced by “deleted”, so that the code stays used), the record of a purchase that was refunded or revoked (so that the refund stays a refund), and a friend's redemption of your invite (your account ID is replaced by “deleted”); and a tank link someone else sent you, which you claimed, keeps your account ID until the sender's game account is deleted. The button does not delete your GameAnalytics data (we send GameAnalytics no deletion request, and your phone keeps the same GameAnalytics ID), crash reports, the copy of your Google Analytics events already exported to BigQuery (deleted when its table expires, “How long, and where”, above), the Firebase installation ID that Google keeps for Remote Config (from version 2.3.12), the ads data and your answer to the consent message that Google holds, the records Google Play or the App Store keep of your purchases, Unity's data, the entries our server writes to its log, with your account ID, when it records a purchase, a gift code, a friend link or an Apple sign-in, checks a leaderboard name you chose or deletes an account, a save you left under another game account when you linked Google, or any backup of our database. The same request runs once by itself when a phone that already had a game account moves to Offline Play (above); that phone then keeps its progress instead of starting over.
• By email, for example if you still have version 2.2.10 or no longer have the game: write to support@rdd-labs.com with the subject “Delete my Color Drain data”, and include your account ID — on the game's Profile screen, after “ID:”, where COPY copies it — and your display name. Version 2.2.10 shows only the last six characters of the ID: send those. If you linked a Google account, you can write from that address instead. The “Delete my data” form in section 10 cannot find a game account, because a game account has no email address. We confirm within 7 days and, within 30 days, delete everything the button deletes except the Google Analytics data, and any other save of yours we find.
• Google Analytics data can be deleted only with the button, and only for the phone you press it on: an email does not tell us which installation of the game is yours. GameAnalytics data and crash reports are not stored under your account ID, so we cannot pick out yours either way; they are deleted when their retention periods end (above), as are Google Analytics data that no deletion request reached and the BigQuery copy of Google Analytics events. Ads data is held by Google under its own policies, and the stores' own records of your purchases by Google Play or Apple.

“Delete All Progress”, also in Settings, erases only your progress on the phone and your cloud save; your game account, leaderboard entries and feedback stay. In Offline Play, where there is no game account, Settings has “Delete my progress” instead, which erases your progress on the phone. Uninstalling the game removes only what is on your phone.

The permanent link for deletion requests is rdd-labs.com/privacy#data-deletion.

8. Cookies

Google Analytics 4 sets first-party cookies (_ga, _ga_H8SMJKXT4J) to distinguish visitors and sessions — only after you accept them on the consent banner, and rejecting deletes any that exist. These are used solely for aggregate usage measurement — no advertising features are enabled. Until you accept, Google's script is not loaded at all. PostHog sets one first-party cookie (ph_<project key>_posthog), with matching entries in your browser's storage, on the same terms: its script is not loaded until you accept, and rejecting stops it and deletes them. Cloudflare Web Analytics sets no cookie and stores nothing on your device. Four small settings (your consent choice, your language, whether you paused the site's animations, and whether this device measured as too slow for them) are kept in your browser's local storage, not in cookies, and are never sent to us.

Cloudflare's infrastructure sets strictly necessary security cookies (cf_clearance, and in some cases __cf_bm) to protect the site from bot traffic. These are essential for site security and cannot be disabled without affecting functionality. They store no personal information about you.

See our full Cookie Policy for details.

9. Children and Teenagers

One age for accounts and sign-ups: 16. The website's sign-up forms, the player community and Color Drain's online features — the game account and cloud save, leaderboards, the feedback form, gift codes, friend links, Google sign-in and Sign in with Apple — are for people aged 16 and over. If you are under 16, please do not sign up or join the community. Apart from what the ads and purchases in Offline Play send to Google, Apple and Unity (below), we do not knowingly collect personal data from anyone under 16, and none of it reaches us.

The game asks your age once. The first time you open Color Drain — and, if you had a version before 2.2.13, the first time you open 2.2.13 or a later version — it asks for your month and year of birth before it starts anything that sends data. Where Google Play, or Apple on an iPhone, shares a user's age range with apps (for example, for an account a parent manages), the game uses that range instead of asking (section 7). Your answer stays on your phone: the game keeps only your age group, where it came from and, under 18, the month in which you move up to the next group; we never keep your date of birth, and none of this leaves your phone. Only three things leave your phone because of your age: for players under 18 (before version 2.3.14, for players aged 16 and 17 only), the flag the game adds to its requests to Google's ad and consent services, so that Google treats them as a child's and does not personalise their ads; if a parent supervises your Google account, your installation's ID, in one lookup that checks whether the parent has withdrawn the game's approval; and, if a phone that already had a game account moves to Offline Play, a one-time request to delete that account, with its sign-in token and, if there is one, its Google Analytics app-instance ID (section 7).

Age signals from Google Play and Apple. From Google Play, the game can learn the age range Google Play shares with apps, where it comes from (a parent who manages the account, Google's own assessment or verification, or the user), whether a parent's approval of the game is pending, given or declined, whether the user must confirm their age in the Play Store, and, for a supervised account, the installation's ID. On an iPhone, it can learn the age range Apple shares with apps and, from version 2.3.14, whether a parent must approve the game's significant change for you. The game uses these signals only to set your age group and to follow a parent's decision (section 7). It keeps only your age group, where it came from and when you move up (above), never passes the signals to its ad or analytics software, and never uses them for ads or analytics; the installation's ID leaves the phone only in the one lookup above.

Under 16: Offline Play. You can play every level, and your progress is kept only on your phone. There is no game account or cloud save, no leaderboards, no feedback form, no gift codes, no friend links, reminders or clips, no Remote Config, and no analytics or crash reports. If your phone already had a game account from an earlier version, the game deletes it once, with its cloud save, leaderboard entries, feedback and everything else stored under it, and keeps your progress on the phone; after that, the game sends nothing to us. Before version 2.3.14, Offline Play has no ads and no purchases, and sends nothing to anyone else either. From version 2.3.14:

• Ads come from Google AdMob only, with AdMob's child treatment (its age-restricted treatment “child”): they are never personalised, no advertising ID is sent, no third-party ad vendors are involved, and only ads rated G are shown. There is no consent form, and where the GDPR applies, Google shows only its “limited ads”. On an iPhone, there is no App Tracking Transparency prompt. With each ad request, Google receives the phone's IP address, details of the phone and the app, and how the player interacts with the ad, and uses them to serve contextual ads, to cap how often an ad is shown, to measure ads and to prevent fraud.
• Which ads. Rewarded videos that the player taps to watch, for a bonus; free-coin videos are capped at 10 a day for players under 16. And an ad between levels: only as the panel at the end of a won or failed level closes, from level 8, only after at least two levels finished or failed since the last one and 90 seconds since the last full-screen ad, never when the player presses Retry, and never within 7 days of a purchase.
• Purchases — coin packs, the Starter Pack, the No-Ads Pass, and skins and avatars — are real-money purchases through Google Play or the App Store only. A grown-up's check comes before every purchase, and the stores' own parental approvals, such as purchase approvals in Google Family Link and Apple's Ask to Buy, still apply. The game gets only the store's purchase token, product ID and transaction ID, and keeps none of them, only which items the player owns; there is no account under 16, so nothing about the purchase reaches our servers. Unity's purchase library sends Unity an event about each purchase, as it does for every player (section 7).
• Nothing paid is random, for anyone. The Paint Wheel stays free, and players under 16 get no chance-based rewards at all.

Children under 13 (COPPA). Color Drain is a game for a general audience that children also play. In the United States, the Children's Online Privacy Protection Act (COPPA) protects children under 13, who play Color Drain in Offline Play, like every player under 16. The game asks them for no name, email address, contact details, location, photo or voice, has no account, chat or public names for them, and collects no analytics about them. From version 2.3.14, the only personal information collected in the game from a child under 13 is collected by our one ad partner, Google AdMob (Google LLC); there is no ad mediation, so no other ad network receives anything. With each ad request, AdMob receives a persistent identifier (never the phone's advertising ID) and the phone's IP address, with details of the phone and the app and how the child interacts with the ad. They are used for what COPPA calls support for the internal operations of the game: to serve contextual ads, chosen for the game and not for the child, and to cap how often an ad is shown (frequency capping), together with measuring those ads and preventing fraud. The safeguards: every ad request carries AdMob's child treatment, so no advertising ID is sent, the ads are never personalised or based on behaviour, no third-party ad vendors are involved and only G-rated ads are shown; nothing is used to build a profile of a child or to contact one; and we make no other disclosure of a child's personal information, for advertising or for anything else. Because this is support for internal operations, we do not ask a parent for consent to it. When a grown-up completes a purchase in the game, the store handles it, and Unity's in-app purchase library sends Unity a purchase event with a Unity installation ID, the phone's model, operating system and locale, and the store's receipt, purchase token and transaction ID; the library cannot switch this off, and Unity handles it under its own privacy policy (section 7).

Family mode. Anyone can switch on Family mode before handing the phone to a child, and from version 2.3.14 a parent can switch it on in the game of a player under 16 too. While it is on, the game shows no ads and sells nothing, until a grown-up switches it off (section 7).

A parent's approval. Because version 2.3.14 brings new ads and purchases to players under 18, we told Google Play and Apple about it as a “significant change” under Texas law (SB 2420): parents approve it in the store before their supervised child gets it. On Android, if a parent manages the player's account through Google Family Link and their approval is pending or declined, or Google Play says the player must confirm their age, the game shows no ads and offers no purchases (from version 2.3.14) until that is resolved. On an iPhone, the game asks Apple at every launch whether a parent must approve the change for the player; if so, and the player's Apple Account first downloaded the game before version 2.3.14, the game holds the change back for that session: a player under 16 gets no ads and no purchases, as before, and a player aged 16 or 17 no ad between levels. On iOS 26.0 and 26.1, where the game cannot ask, it holds the change back in the same way. Nothing about this is stored (section 7).

Every player under 18. No player under 18 — under 13, under 16, or 16 and 17 — is profiled, and the game collects no analytics about any of them. Their ads are never personalised, and on an iPhone they never see the App Tracking Transparency prompt. From version 2.3.14, the shop's wording for them is neutral: each button shows the price, and there are no “best value” labels, no countdowns and no upsell cards.

16 and 17. You get the full game, with these limits: ads are never personalised, are served with AdMob's child treatment and without your phone's advertising ID, and are limited to G-rated ads; besides the rewarded videos you choose to watch, you see an ad between levels under the same rules as every player (from version 2.3.14; before it, you see only the videos you choose to watch). The game collects no analytics about you, only crash reports; on the leaderboards you appear only under a name from the game's list, or the one the game gives you; and purchases need a parent's or guardian's consent, which the game reminds you of before your first purchase in the shop (section 16.5 of our Terms). You are a minor under Israel's Legal Capacity and Guardianship Law, 5722-1962 — please sign up, join the community and play with a parent's or guardian's knowledge.

18 and over. Section 7 describes the game as it works for you, including the ads between levels that the No-Ads Pass removes. In the European Economic Area, the United Kingdom and Switzerland, you see personalised ads only if you agree in Google's consent message. On an iPhone, anywhere, you see them only if you also allow tracking in Apple's App Tracking Transparency prompt (section 7).

In the European Economic Area and the United Kingdom. The ads shown to players under 18 rest on our legitimate interest in funding a free game with ads, and are served as Google's limited ads. Players under the age of consent are not asked for consent: the game tells Google's consent software that they are under that age, so no consent form is shown to them. No player under 18 is profiled, and the game itself limits how often ads appear (section 7).

What is kept about players under 16, and for how long. This is our retention policy for children's personal information. We keep it only for as long as its purpose needs, and never indefinitely. RDD Labs keeps nothing about a player under 16 on any server: there is no account, no analytics, no crash reports and no purchase records, and crash reports stay switched off on the phone too. What exists is kept as follows:

• On the phone: the age group, where it came from and the month it next moves up, to apply the age rules, and Family mode's switch, until the game is uninstalled or its data is cleared; progress and, from version 2.3.14, which items the player owns and the product IDs the store has restored, to deliver what was bought, until “Delete my progress” erases them (the game then asks the store to restore the purchases) or the game is uninstalled.
• At Google: what each ad request sends (above), kept by Google under its own retention periods, and Google Play's record of a purchase.
• At Apple and Unity: the App Store's record of a purchase, under Apple's policies, and Unity's purchase events, under Unity's privacy policy. The store's billing software on the phone keeps its own records too.
• A game account that an earlier version created: deleted once, when the phone moves to Offline Play (section 7).

Security. We protect children's personal information with security measures suited to it. The first is that we do not keep it on our servers: nothing about a player under 16 is stored there. Everything else we hold is protected as section 5 describes.

Parents and guardians: your rights, and how to reach us. You can ask us what we hold about your child, ask us to delete it, and tell us to stop collecting it, by writing to support@rdd-labs.com; we answer within 30 days (section 10). For a player under 16 there is nothing on our servers to show or delete, and what the ads and purchases send is held by Google, Apple and Unity, with no identifier we could use to find it. To stop the ads and purchases on your child's game, switch on Family mode (Settings → Family → “Playing with a child”), which only a grown-up can switch off; uninstalling the game stops everything. To report an ad, use “Report an Ad” in the game's Settings, which opens an email to us. Google Family Link and Apple's Ask to Buy let you approve every purchase, and you can ask us, or Google or Apple, to refund a purchase made without your OK (section 16.5 of our Terms). The operator is Daniel Simonov (Osek Patur: 323812388), trading as RDD Labs, 1 Shlesinger St., Ashdod 7760801, Israel, and you can reach the operator at support@rdd-labs.com or daniel@rdd-labs.com, or by phone at +972 55-720-8567.

When something changes. Before we make a significant change to what the game collects from children or how it uses it, we tell parents: through Google Play's and Apple's approval of significant changes, where a parent supervises the child's account; in the game, with a notice before the change applies; and here, by updating this section and the date at the top of this policy.

If we learn someone is younger. If we learn that we hold personal data of someone under 16, we delete it. A parent or guardian can ask us to do this at support@rdd-labs.com; for Color Drain, include the account ID from the game's Profile screen, or use “Delete account & data” in the game's Settings (section 7).

10. Your Rights

Under the Israeli Privacy Protection Law, you have the following rights:

• Right of inspection (Section 13) — you may request to review any personal data we hold about you in our records, and to receive a copy of it. We will respond to inspection requests within 30 days.
• Right of correction (Section 14) — if data we hold about you is inaccurate, incomplete, unclear, or no longer current, you may request that we correct, supplement, replace, or delete it. We will act on your request within a reasonable time and notify you of the outcome.
• Deletion — you may erase your mailing-list record and any pitch-deck enquiry yourself, with the form below; a community account is deleted from your profile (section 12); your Color Drain game data, from the game's Settings or by email with your account ID (section 7); for anything else, write to us. We will comply unless we are required to retain it by law. What remains afterwards is a one-way hash on our do-not-contact list and the dated record that the deletion happened.
• Withdrawal of consent and refusal of advertising — you may withdraw your consent to receiving communications from us at any time, without any conditions or consequences: with the unsubscribe link in any email we send (a single press of a button on the page it opens, honoured immediately), with your mail app's own unsubscribe button, by replying to any message, or by contacting us directly.

Every email we send to our list also carries a “Manage my email” link: it shows which list the address is on and lets you change the email language, unsubscribe, sign up again, or start a deletion, with no login.

To exercise any of these rights, send an email to support@rdd-labs.com. We will respond within 30 days.

If you believe we have not handled your data lawfully, you may file a complaint with the Israeli Privacy Protection Authority. If you live in the European Economic Area, you may also complain to the data protection authority of your country.

If you are a resident of the European Economic Area (EEA) or California, this policy respects and upholds your rights under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), respectively.

11. International Data Transfers

Your data may be processed on servers outside Israel: Cloudflare (hosting, database and Web Analytics) operates a global network including the United States and the European Union; Google (analytics, the tester group, Google Play, sign-in and the studio's mailbox, and for the Color Drain app Firebase, Google Cloud and AdMob) processes in the United States and in other countries where it operates; GameAnalytics (gameplay analytics for the Color Drain app) processes on cloud servers in the United States; PostHog (product analytics, and aggregated reports from Google Analytics) processes in the United States; Resend (email) processes in the European Union (Ireland); Unity (the game engine and its purchase library, section 7) processes in the United States and in other countries where it operates; Apple (the App Store, Sign in with Apple — in the Color Drain app on iPhone and in the player community — and device checks) processes in the United States and in other countries where it operates; Anysphere (Cursor) and SpaceXAI (xAI) (Grok Bot, the AI assistant for support email, section 6) process in the United States and in other countries where they operate.

The United States is not a country to which transfers are automatically permitted under the Privacy Protection Regulations (Transfer of Data to Databases Abroad), 5761-2001. We rely on two bases. First, Cloudflare, Google, Resend, GameAnalytics and Unity are contractually bound to protect the data to a standard no lower than Israeli law requires — their data-processing terms, which we have accepted (for Unity, its data processing addendum, which is part of the terms of service we accepted). Second, on your consent: for your own contact details and the messages you send us, which you provide after reading this notice, for exactly the purpose you requested (including the AI assistant in section 6); for PostHog, which receives data about your visits to this website only after you accept analytics cookies (the Google Analytics reports we copy into it are aggregated, with no identifier); and for Apple, which receives data only through the services you choose to use from it or that the iPhone app relies on (the App Store and purchases, Sign in with Apple, and the device checks described in section 7), under Apple's own terms and privacy policy. You may withdraw either at any time. Transfers to the European Union are to a jurisdiction whose protection is recognised as adequate.

12. The Player Community

If you join the player community, we keep a member record: it runs the community, gets the sign-in link to you, and sends the notifications you switched on. Joining is your consent to this, and you accept the community rules the first time you sign in. There is no password: you sign in by pressing the button on the page an emailed link opens, with Google, from which we take only your verified address, or with Apple (below).

Sign in with Apple. If you choose it, Apple shares with us an email address — your own, or, if you choose to hide it, a private relay address that forwards to it — and, the first time you sign in only, your name, as you let Apple share it. We store the address like any other sign-in; the emails we send to a relay address pass through Apple, which forwards them to you. If you are joining with Apple and have no display name yet, that name becomes your display name, which is public (below): you see it when you choose your username, and can change or clear it there or on your profile at any time; otherwise it is not kept. Nothing else Apple sends — an identifier for your Apple account and the tokens that prove the sign-in — is kept. What Apple itself does is in its privacy policy.

What we store. Your email address in clear and a one-way hash of it; your username, plus a display name and a line about you if you add them (or keep the name Apple shared); your avatar colour, language, role (member, tester or studio) and notification settings; when you joined, accepted the rules and were last seen; any suspension and why. Each sign-in link you ask for is recorded with your address, its expiry and whether it was used, and is deleted automatically a day after it expires. Then what you post — threads, replies, votes and poll votes — the reports you file, your appeals, and the moderation log of what the studio did and why.

Who sees what. Your username, display name, bio, avatar and posts are public to anyone who can open the community. Your email address is never shown to other members; moderators can see it.

How long. As long as your account exists. Delete it from your profile and your username, display name and bio are wiped, your address is replaced by a placeholder, and your posts and votes stay up as “deleted member”. Reports, appeals and the moderation log are kept for 12 months.

Your rights. Read, correct and delete your details on your profile. Section 10 and support@rdd-labs.com cover everything else.

Age. The community is for people aged 16 and over (section 9). If you are under 16, do not join; if we learn that a member is, we close the account and delete its personal data.

Where, and the cookie. Member data sits in the newsletter's Cloudflare D1 database, under sections 5 and 11. Signing in sets one cookie, rdd_member — HttpOnly. It signs you out after 30 minutes without activity and after 12 hours at most (15 minutes and 8 hours for the studio’s staff), and is deleted when you sign out (section 8).

13. Our Social Media Pages and Advertising

Our pages. RDD Labs and Color Drain have official pages on Facebook (facebook.com/colordrain), Instagram, TikTok (@color_drain for the game, @rddlabs for the studio), YouTube and LinkedIn (linkedin.com/company/rdd-labs-il), and we post the same videos as Instagram Reels and YouTube Shorts. When you follow, like, comment on or message one of our pages, the platform — Meta (Facebook and Instagram), TikTok, Google (YouTube) or LinkedIn — processes that data as an independent controller, under its own terms and privacy policy. We see only what the platform shows a page's owner: your public profile, the comment or message itself, and aggregated, anonymous statistics about the page and its posts. We use your messages only to answer them.

Comments. Comments that contain links or common spam words are hidden automatically (on Facebook, by Meta's Moderation Assist). We may also hide or delete comments that contain links, spam or abuse, and block accounts that keep posting them.

Advertising. We advertise Color Drain through Google Ads, Meta (Facebook and Instagram) and TikTok. The platforms themselves decide who sees our ads, from the settings we choose for a campaign, such as countries and interests, and the information they hold under their own policies. We upload no customer or email lists to any of them, we share no player data with Meta or TikTok, and there is no Meta or TikTok pixel or software kit on this website or in the app. What Google Ads receives about the game is described at the end of this paragraph. All we receive back are aggregated campaign reports: impressions, clicks, installs, in-game results and cost. Our ads on Meta and TikTok are aimed at adults aged 18 and over. Our Google Ads campaign is an app campaign, which Google shows across its own network — Google Search, Google Play, YouTube, and other websites and apps that show Google ads. In an app campaign we can only suggest an audience to Google; we cannot exclude any age group, so Google decides who sees these ads under its own advertising policies. Our Google Ads account is linked to Color Drain's Google Play listing and to our YouTube channel, so that Google Play can report to it, in aggregate, how many installs came from our ads. It is also linked to the game's Google Analytics for Firebase property, so that Google Ads can count three in-app events — the first time the game is opened, a completed level and a purchase — to measure and improve our ads. These events exist only for players aged 18 and over, because the game collects no analytics about younger players (section 7). On this link, personalised advertising and audience sharing are switched off, so the events are not used to build ad audiences or to personalise ads. Google Ads is not linked to this website's Google Analytics, and the website carries no Google Ads tag.

Where a visit or install came from. The Google Play links we share on our pages and in our ads can carry campaign tags that say which channel the link was posted on (for example “facebook”, “tiktok” or “google”) and for which campaign. A tag describes the link, not the person who taps it. When you install Color Drain from such a link, Google Play passes the tag to the app. The game itself reads it only to look for the code of a friend's invite or Send a Tank link (section 7), and sends the tag nowhere. If you are 18 or over and the game's analytics is on for you (section 7), Google Analytics for Firebase may also record which campaign led to the install. For players under 18 it is never recorded, because the game collects no analytics about them.

Your choices. The ads you see on these platforms are controlled in the ad settings of your account there, and in your phone's advertising-ID settings (section 7). To ask about anything we see on our pages, write to support@rdd-labs.com (section 10).

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If the changes are material, we will make reasonable efforts to notify you (for example, by sending an email to the address you provided). How we tell parents about a significant change that concerns children is in section 9. What sections 7 and 9 say about ads and purchases for players under 18 applies from 24 October 2026, the day version 2.3.14 came out. Continued use of our services after a policy change constitutes acceptance of the updated policy.