Starlight Run — Privacy Policy

1. Who We Are

Starlight Run is a game for iPhone and iPad, published by Olaverse Labs ("we", "us", or "our"), the trading name of Olumide Ola, which also maintains this website at olaverse.co.uk. On the App Store the game is listed under the developer name Olumide Ola. This policy covers the game only. Our website privacy policy covers olaverse.co.uk separately.

Starlight Run is an endless runner. You run as far as you can through a chosen sector, collect fragments along the way, and spend them on skins and new sectors. It requires iOS 18 or later and is not available on Android.

2. What Stays on Your Device

The game saves the following in its own storage on your device. It is never sent to us or to any server of ours. We do not have any servers for the game.

• Your progress: your fragment balance, total distance run, best distance, best score, and how many runs you have played.
• Your unlocks: which skins you own and which is selected, which sectors you have bought and which is selected.
• Your purchases, as flags: whether ads are removed, whether a pass is active, how many fragments were bought, and when the pass last paid out.
• Your settings: whether sound is on, whether haptics are on, and whether you have seen the intro.

That is the whole list — sixteen values in all. None of it is personal data and none of it is an identifier: it is currency totals, distances, unlocks, and two toggles. It is not synced to iCloud, so it does not travel between your devices, and deleting the game erases all of it. Because none of it is linked to an account, we have no record of your progress and cannot restore it for you after you reinstall or change phones.

3. What Leaves Your Device

The game's own code makes no network requests at all. There is no backend and no server you are talking to when you play. Three third-party components inside the app do connect to the internet:

• Google AdMob, which requests, shows, and measures ads. See section 5.
• Google's User Messaging Platform, which shows the consent form where the law requires one. See section 4.
• RevenueCat, together with Apple's App Store, which processes purchases and restores them. See section 6.

None of them receives your progress from us. We do not send your distances, scores, or fragment balance anywhere.

4. The Tracking Prompt and Ad Consent

The tracking prompt is the only permission request the game makes. It asks:

"Allow tracking so Starlight Run can show ads that are relevant to you. You can play with non-personalised ads either way."

• If you allow it, iOS gives Google your advertising identifier (IDFA), and Google may use it to personalise the ads you see and to measure them across other companies' apps and websites.
• If you decline, iOS withholds the IDFA. Google does not receive it and cannot use it to track you. Ads still appear, but they are non-personalised, and every part of the game stays playable. Declining costs you nothing.
• You can change your mind at any time under Settings → Privacy & Security → Tracking.

Separately, in the UK and the EEA, Google's consent form appears before any ad is requested, and your choice is stored on your device. Nothing is sent to Google for advertising until you have answered it.

5. Advertising

The game is free and is paid for by ads supplied by Google AdMob. There are three kinds:

• Banner ads, shown at the edge of the screen.
• Interstitial ads, shown full screen between runs.
• Rewarded ads, which are always optional. You choose to watch one in exchange for a reward in the game.

To serve and measure these ads, Google's SDK collects data from your device. According to the privacy manifest Google publishes with the SDK, that data is:

Google handles this data as its own controller, under the Google Privacy Policy. Google explains how it uses data from apps like this one in How Google uses information from sites or apps that use its services. We do not receive this data about you as an individual. We see only totals, such as how many ads were shown and what they earned.

Your IP address reaches Google with every ad request, and Google can derive a rough idea of your city or region from it. The game itself never asks for your location and has no access to it.

Install measurement. The game declares 45 SKAdNetwork identifiers. SKAdNetwork is Apple's privacy-preserving system for telling an advertiser that an install happened without identifying you. It is operated by Apple, works whether or not you allow tracking, and passes on no identifier of yours.

We never send Google your progress, your purchases, or anything that identifies you by name.

6. In-App Purchases

The game is free to play. You can also buy Remove Ads, packs of fragments, and a pass. Prices, and whether a given item is a one-off purchase or an auto-renewing subscription, are shown on the App Store product page before you buy, and vary by country. If you buy something that renews, it renews until you cancel it in your Apple ID subscription settings; deleting the game does not cancel it.

• Apple takes the payment, not us. Your card number, billing address, and payment details go to the App Store under Apple's own privacy policy. Neither we nor RevenueCat ever see them. See Apple's privacy policy.
• RevenueCat records the purchase. RevenueCat, Inc. processes purchases and restores for us as our data processor. It creates an anonymous user ID for your installation — a random string that RevenueCat generates. The game never signs you in and never attaches any attribute to that ID, so it is not connected to your name, your email address, or your advertising identifier. RevenueCat receives the App Store receipt and transaction data for the purchase, plus basic technical context with each request: device and OS information, store country, and the IP address the request comes from. See RevenueCat's privacy policy.
• What we see: purchase counts and revenue tied to those random IDs. We cannot work out who you are from it, and we do not try.

Restoring purchases. If you reinstall or move to a new device, use Restore Purchases to get Remove Ads and an active pass back. Fragments cannot be restored: they are consumed when you buy them, and your balance is stored only on your device.

Refunds are handled by Apple. Go to reportaproblem.apple.com.

7. What We Never Collect

• No account. No name, email address, phone number, postal address, sign-in, or user profile. Buying something does not create an account.
• No permissions. The game does not ask for your location, camera, microphone, photos, contacts, health data, Bluetooth, or notifications. The tracking prompt in section 4 is the only system prompt it shows.
• No analytics or crash reporting of our own. There is no Firebase, Crashlytics, Mixpanel, Sentry, or third-party analytics of any kind in the game. We do not know how often you play or how far you get. The diagnostic data in the table above goes to Google for its ad service, not to us.
• No payment details. Apple handles all payments.
• No selling. We do not sell, rent, or trade your information.

If we ever change what the game sends off your device, we will update this policy and the app's store privacy disclosures before that version ships, not after.

8. Your Choices

• Personalised ads: decline the tracking prompt, or turn tracking off later under Settings → Privacy & Security → Tracking. Ads become non-personalised and the game keeps working in full.
• Ad consent in the UK and EEA: your answer to Google's consent form is stored on your device. Reinstalling the game lets you answer it again.
• Fewer ads: buy Remove Ads to switch off banner and interstitial ads. Rewarded ads are only ever shown when you choose to watch one.
• Delete all your game data: delete the game. Your progress exists only on your device, so this removes it completely.
• Data held by Google or RevenueCat: contact those companies directly using the links in sections 5 and 6, or email us and we will help.

9. Device Backups

The game does not sync your progress to iCloud. However, if you have iCloud Backup or a Mac backup switched on, a full backup of your device may include the game's stored values along with everything else on it, and restoring that backup may bring your progress back. The backup is created and held by Apple under its own privacy policy and encryption. We have no access to it and no involvement in it, and we cannot recover progress from it for you. You can turn backups off in your device settings.

10. Deleting Your Data

For anything the game stores, you do not need to ask us. Delete the game and its local storage goes with it. There is no account to close and no copy of your progress on our side.

Some records can persist after you uninstall. RevenueCat and Apple keep the purchase record, and Google keeps the ad data it holds under its own policy. You can ask us to erase our side of the purchase record by emailing us. It is held under a random ID, so you may need to send us that ID or your store receipt for us to find it, and we may need to keep the underlying transaction record where tax or accounting law requires.

11. If You Email Us

The one case where we receive personal information directly is when you choose to contact us. If you email us for support, we receive your email address and whatever you write. We use it only to reply, keep it only as long as needed to resolve the matter and for basic records, and do not add you to a mailing list.

12. Children

Starlight Run is not a Kids Category app and is not directed at children under 13, or under 16 in EU countries that set a higher age for consent to data processing. It shows advertising, and it is not registered as a child-directed app on the App Store. We do not knowingly collect personal information from children. If you believe a child has used the game in a way that caused their data to be collected, contact us and we will help. In-app purchases should only be made by the holder of the App Store account, or with the account holder's permission. Apple provides parental controls for purchases and for the tracking prompt.

13. The App Store

Downloading the game and making purchases are transactions between you and Apple. Apple collects its own data about downloads, purchases, and crashes under its own policy, which we do not control. Any crash reports Apple shares with us are aggregated and provided by the platform, not gathered by the game.

14. Changes to This Policy

If we change this policy, we will update the date at the top of this page. We will do so before shipping any version of the game that changes what data is handled.

15. Contact

Questions about this policy: contact@olaverse.co.uk

Appendix: Legal Detail

The sections above are the whole picture in plain English. This appendix restates the same facts in the formal terms that data protection law uses, for anyone who needs them.

A. Controller, Processors, and Scope

For the purposes of the UK GDPR and EU GDPR, the controller is Olaverse Labs, the trading name of Olumide Ola, contactable at contact@olaverse.co.uk. Game progress and settings are processed entirely on your own device and are never transmitted to us, so they are not personal data under our control.

For purchase data we are the controller, and RevenueCat, Inc. acts as our processor under a data processing agreement. Apple acts as its own controller for the payment itself.

For advertising, Google acts as an independent controller for the data its AdMob SDK collects from your device, and for the consent record gathered through its User Messaging Platform. We do not receive either at the individual level.

We are also the controller for correspondence you send us directly.

B. Lawful Basis for Processing

• Game progress and settings: no lawful basis is required of us, as we carry out no processing. Processing on your own device, under your sole control, is not processing by us.
• Purchase and entitlement data: performance of a contract (Article 6(1)(b)), to deliver and restore what you bought. For the underlying transaction records, compliance with a legal obligation (Article 6(1)(c)) under tax and accounting law.
• Advertising in the UK and EEA: consent (Article 6(1)(a)), and consent under the UK PECR and the EU ePrivacy Directive for storing or accessing information on your device, collected through Google's consent form before any ad is requested. You can withdraw it by reinstalling and answering the form again, or by turning tracking off in iOS settings. Where you decline, Google serves non-personalised ads under its own policies.
• Email correspondence: legitimate interests (Article 6(1)(f)), to respond to a request you chose to send us.

C. Your Rights Under UK and EU GDPR

You have the right to request access to your personal data, and its rectification, erasure, restriction, or portability, and to object to processing. For game progress these rights are exercised directly on your device, since we hold no copy: you already have full access, and deleting the game is immediate erasure.

For purchase records and any email correspondence you have sent us, you can exercise all of these rights by writing to contact@olaverse.co.uk. We respond within one month, as required. Purchase records are keyed to a random identifier rather than to you, so we may need you to supply that identifier or your store receipt to locate them. For advertising data, Google is the controller, and you can exercise your rights with Google directly.

If you believe we have handled your personal data unlawfully, you may complain to the UK Information Commissioner's Office at ico.org.uk, or to your national supervisory authority if you are in the EEA.

D. United States State Privacy Rights

Under laws including the California Consumer Privacy Act as amended by the CPRA, and the comprehensive privacy laws of states such as Virginia, Colorado, Connecticut, Utah, and Texas, we disclose the following:

• Categories of personal information collected through the app: identifiers, limited to a random, app-generated purchaser identifier and the IP address accompanying a purchase request; and commercial information, being your purchase history. Both reach us only through RevenueCat. Game progress remains on your device and is not collected by us.
• Advertising: Google's AdMob SDK collects your advertising identifier where you have allowed tracking, your IP address and the coarse location derived from it, ad interactions, and diagnostic data. Where you allow tracking, Google may use this to personalise ads, which some state laws treat as "sharing" for cross-context behavioural advertising or as "targeted advertising". You can opt out by declining the tracking prompt or turning tracking off in iOS settings, as described in sections 4 and 8. Buying Remove Ads stops banner and interstitial ads.
• Sensitive personal information: none. Neither we nor the game collect precise geolocation.
• Sold: we do not sell personal information for money.
• Sources: your device, via RevenueCat, for purchase data; and you directly, when you email us.
• Retention: purchase records for as long as needed to provide and restore your purchases, and thereafter only as long as tax and accounting law requires; email correspondence for as long as needed to handle your enquiry.

You may exercise your rights of access, correction, deletion, opt-out, and appeal by emailing contact@olaverse.co.uk. We will not discriminate against you for doing so.

E. International Transfers

Your game progress is not transferred anywhere: it stays on your device. Purchase data is processed by RevenueCat, Inc. in the United States, and advertising and consent data are processed by Google in the United States and elsewhere. Both rely on the Standard Contractual Clauses, with the UK International Data Transfer Addendum where applicable. Email you send us is handled by our email provider in the course of ordinary email delivery.

F. Security

Your game progress is protected by your device's own security: its passcode, biometrics, and platform encryption. Purchase data travels over encrypted connections to RevenueCat and to the App Store, and ad requests travel over encrypted connections to Google. No system is perfectly secure, but because we hold no game data, a breach of our systems could not expose your progress.

G. Automated Decision-Making

The game calculates distances, scores, and fragment payouts on your device. We make no automated decisions producing legal or similarly significant effects and do not profile you. Where Google personalises ads for those who allow tracking, it does so as its own controller under its own policies.