Privacy Policy

Last updated: September 26, 2026

1. Who we are

Splash Sweep (“the game”, “we”, “us”) is operated byWHO DEVELOP LTD, a company registered in England and Wales under company number09096989, with its registered office at 124 City Road, London EC1V 2NX, England, United Kingdom. You can reach us at[email protected]for any question about your data.

2. What we collect

We collect only what we need to run the game and improve it.

2.1 Stored on your device (localStorage)

Most of your game state lives on your device, not on our servers. This includes:

• Campaign progress, stars earned per level, current level
• Daily-puzzle streak and last solved date
• Diamond balance and cosmetic items unlocked or equipped
• Sound, haptics, and reminder preferences
• Onboarding and first-run flags

These keys are prefixed wd_ and stay on your device.

2.2 Analytics

We use PostHog for product analytics. PostHog receives anonymous events such as: which level you started, which you completed, swipe counts, and whether you used a hint. These events are tied to a random identifier we generate the first time you open the game — they are not linked to your name, email, or any external profile.

We use this data to figure out which puzzles are too hard, where players get stuck, and which features are worth keeping. We do not sell this data, we do not share it with advertisers, and we do not use it to build profiles about you outside the game.

2.3 Daily-puzzle leaderboard

When you first use the leaderboard, our Cloudflare service issues a random, signed player ID that is stored on your device. If you submit a daily score, we store that opaque ID, your move count, solve time, and approximate country in Cloudflare D1. The country is inferred from the request; Splash Sweep does not store your IP address. The leaderboard never publishes your name or email.

2.4 Crash reports

If the game crashes, we may collect a stack trace, the version of the game, and basic device information (browser, OS, viewport size) to help us fix the bug. We do not collect screenshots, the URL bar, or anything you typed.

2.5 Purchases

The initial release does not offer in-app purchases. If purchases are added later, they will be processed by Apple or Google under their policies; Splash Sweep will not receive your payment-card number.

3. How we use it

• To run the game and remember your progress.
• To rank an anonymous score on the daily leaderboard.
• To debug crashes and fix puzzle-difficulty regressions.
• To roughly understand how the game is used — what's popular, where retention drops off — and decide what to build next.

We do not sell your data to advertisers, share it with data brokers, or use it for profiling outside the game.

4. Cookies and similar technologies

The marketing site (splashsweep.app) uses Google Fonts via Google's CDN. Google may set cookies for font loading; we don't. The game itself does not set cookies — all device-side state lives in localStorage.

Our analytics (PostHog) uses a single anonymous identifier stored locally; it is not a third-party cross-site tracking cookie.

5. Third-party services

We rely on the following processors. Each operates under its own privacy policy:

• PostHog — product analytics
• Cloudflare Pages, Workers, and D1 — hosting, CDN, and the anonymous daily leaderboard
• Google Fonts — webfont delivery on the marketing site
• On Poki / CrazyGames / itch.io builds: the portal's own SDK may read your locale, viewport, and play time for the portal-specific features (ads, mute state). See the host portal's own policy.
• App Store / Google Play for native app distribution.

6. Where data is stored

Cloudflare and PostHog operate globally; data may be processed in the UK, EU, US, or other regions as part of normal hosting and analytics operation.

7. How long we keep it

• Device-only progress (localStorage): kept until you clear your browser data or uninstall the app. We can't see or delete this — it's yours.
• Leaderboard scores: deleted after 90 days.
• Anonymous solved dates: retained to calculate the leaderboard streak associated with the opaque player ID.
• Analytics events: retained for up to 12 months, then aggregated and the raw events removed.
• Crash reports: retained for up to 90 days.

8. Your rights

Under the GDPR (EU/UK), CCPA (California), and similar laws in other regions, you have the right to:

• Ask what data we hold about you (right of access).
• Correct anything that's wrong.
• Have us delete data associated with your anonymous player ID.
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent (e.g. opt out of analytics) at any time.
• Lodge a complaint with your local data-protection authority.

Email [email protected] and we will reply within 30 days.

9. Children

Splash Sweep is suitable for all ages. We do not knowingly collect any personal information from children under 13 (or under 16 in the EU where applicable). If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it.

10. Changes to this policy

When we change this policy, we update the "Last updated" date at the top. For material changes, we'll surface a notice in the game on next launch where practical.

11. Contact

Questions, requests, or complaints? Email [email protected].