This policy explains what personal data Dashlings ("the game", "we", "us") collects, why, who we share it with and your rights. The game is run by Wanda Campos, trading as Thames Fox Games, London, United Kingdom ("we"), who is the data controller. Contact: support@thamesfoxgames.com.
Your account (optional). You can play without an account; then your progress is stored only on your device and we receive no account data. If you choose to sign in with Google, we receive a user ID and your email address. We do not receive your Google password.
Your game data. Progress, levels, stars, coins, gems, characters, items, settings, statistics and records. With an account it is saved in the cloud so it works on your devices; as a guest it stays on your device.
Your age group. The age group you choose when you start (18 or older, 13 to 17, under 13). We use it to keep the game safe (see section 6).
Rewards data. Reward points, which boss levels you completed and when, gift card requests (amount, currency, country, the email address the card is sent to and its status) and, for players under 18, the email address of the parent or guardian who approves the request.
Age check result. If you redeem gift cards, we keep only the result of the age check (adult: yes or no), the method used and the date. See section 4.
Purchases. If you buy something, Google Play or the App Store processes the payment. We receive a record of what was bought and subscription status (through our provider RevenueCat), never your card details.
Advertising data. Our advertising partner Google AdMob collects device information, such as the advertising ID, IP address, approximate location (country or city) and how you interact with ads, to show and measure ads and prevent fraud.
Messages you send us, for example support emails.
Gameplay statistics (only if you say yes). If you are 18 or over and choose "Allow", we collect gameplay events, not linked to your name or email, (for example levels started, completed or failed, time taken, ads started and purchases started) through Google Analytics for Firebase, together with a random app-instance ID and basic device information. It is off unless you allow it, never used for players under 18 and never used for advertising. You can switch it off in Settings → Usage statistics.
Weekly leaderboard (only if you join). Players aged 13 or over who choose "Join the leaderboard" in Settings appear on a weekly leaderboard with their best Endless-mode score and a name the game chooses automatically (for example "SwiftPanda7"). We never show your real name or email. You can leave at any time, which removes your entry.
Crash reports (only if you say yes). With the same permission as gameplay statistics, Firebase Crashlytics sends us a report when the game crashes or has an error: device model, system version, app version and the technical error. It is never used for players under 18.
Security checks. Firebase App Check asks Google Play Integrity (Android) or Apple App Attest (iOS) to confirm that requests come from a genuine copy of the game on a genuine device. When you request a gift card we also record simple fraud signals, such as how old your account is and whether the delivery email is used by another account.
Daily reminder: if you turn it on in Settings, your phone shows one local notification a day. It is scheduled on your phone, so no data is sent to us. It is off by default.
We do not sell your personal data.
2. Why we use it and our legal basis (UK GDPR)
To provide the game, cloud saves, purchases and rewards — to perform our contract with you (our Terms of Use).
To prevent cheating and fraud and keep the game secure (for example checking reward claims and that one card verifies only one account) — our legitimate interests in running a fair game.
Gameplay statistics and crash reports (only for players aged 18 or over who allow it) — your consent, which you can withdraw at any time in Settings.
Weekly leaderboard — your consent (you choose to join and can leave at any time).
Security checks (App Check) and fraud signals — our legitimate interests in preventing cheating and protecting the rewards programme.
Personalised ads (only for players aged 18 or over) — your consent, which you can withdraw at any time in Settings. Players under 18 only ever get non-personalised ads.
Non-personalised ads — our legitimate interest in funding a free game.
Age checks, parental approval and payout records — to meet our legal obligations (including protecting children and keeping tax and accounting records) and our legitimate interest in preventing fraud.
3. Who we share data with
We use these service providers, who process data on our behalf or as independent controllers for their own services:
Google (Firebase) — sign-in, cloud database, servers, App Check and, only if you allow it, Google Analytics and Crashlytics for Firebase.
Google Play and Apple App Store — app distribution and payments.
RevenueCat — managing purchases and subscriptions.
Stripe — age checks (credit card check or ID document check).
Our email provider — sending emails to parents and guardians.
Tremendous (and, if needed, other gift card providers) — sending the gift cards you redeem. They receive the email address the card is sent to and the card's value and currency.
We may also share data if the law requires it, or to protect players and the game from fraud.
4. Age checks
Before an adult redeems a gift card, and before a parent or guardian approves a gift card for a player under 18, we check that they are 18 or over. The check is done by Stripe:
Credit card check: you enter a card in a secure Stripe page. Nothing is charged. We only learn whether it is a credit card (only adults can hold one in the UK) and a card "fingerprint" — a code that identifies the card without revealing its number — so that one card cannot be used to verify several player accounts. We do not see or store the card number.
ID document check: you take a photo of a passport, driving licence or ID card and a selfie. Stripe checks them and tells us only whether the person is an adult. We ask Stripe to delete (redact) the images and document data as soon as we have the result.
Some providers process data outside the UK, mainly in the United States. When this happens we rely on UK adequacy regulations (such as the UK-US data bridge) or approved safeguards such as the International Data Transfer Agreement or Addendum.
6. Children
We follow the UK Information Commissioner's Age Appropriate Design Code (Children's Code). Until we know a player's age, and for every player under 18:
ads are never personalised and are set as child-directed or under the age of consent in AdMob;
the shop does not use sales promotions, and every purchase needs a grown-up to confirm it;
gift cards need the approval of a parent or guardian, who must pass an adult age check, and the card is sent to them;
boss levels that give reward points use the same rules for everyone, so paying never helps to earn them;
gameplay statistics and crash reports are never collected, the daily reminder is off unless they turn it on, and under-13s cannot join the leaderboard (13 to 17s can choose to, with an automatic name).
Parents and guardians can contact us at support@thamesfoxgames.com to see, correct or delete their child's data.
7. How long we keep data
Account and game data: until you delete your account.
Gift card requests and payout records: 6 years, because the law requires us to keep accounting records.
Age check result and card fingerprint: while your account exists. ID images are not kept by us.
Gameplay statistics: up to 14 months in Google Analytics, then deleted automatically. Crash reports: up to 90 days.
Leaderboard entries: the current week and the 4 weeks before, then deleted.
Support emails: up to 2 years.
8. Your rights
You have the right to access your data, correct it, delete it, restrict or object to how we use it, receive it in a portable format and withdraw consent at any time. You can delete your account and game data at any time in Settings → Delete my account. To use any other right, email support@thamesfoxgames.com. We will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO): ico.org.uk, telephone 0303 123 1113. We would appreciate the chance to help first.
9. Storage on your device
The game stores your progress on your device so it works offline. The AdMob software in the app uses device identifiers and similar technology to show ads. You can reset or limit the advertising ID in your device settings.
10. Security
Data is sent over encrypted connections. Only you can read your game data, and reward points and age check results can only be changed by our servers.
11. Changes
If we change this policy we will update the date above and, for important changes, tell you in the game.
Privacy for younger players
You can play without an account. If you sign in, we save your game so you don't lose your progress.
We never use your information to show you ads about things you like. The ads you see are general ones.
You can't buy things on your own. A grown-up has to say yes.
If you want a gift card, we email your parent or guardian. They decide, and the card goes to them.
Sharing the game with friends never gives you prizes, and if you are under 13 the sharing buttons are switched off.
We don't collect statistics about how you play, and the game won't send you reminders unless you turn them on.
If you are 13 or over you can join the weekly leaderboard. The game gives you a fun name, so nobody sees your real name.
We don't sell your information to anyone.
If you are worried about anything, talk to a grown-up you trust. They can email us at support@thamesfoxgames.com, and we can delete your account if you want.