Choices & Hidden Storiesby Alsvarel
Privacy

Privacy Policy

Effective and last updated:

Alsvarel, a company registered in the Netherlands, is the controller of personal data processed for its purposes in connection with Choices & Hidden Stories, this website and app support.

Privacy contact: alsvarel.developer@gmail.com.

Current release: analytics, advertising, subscriptions and online story ratings described below are planned features and are not yet active.

01

Data and purposes

Gameplay. Progress, story choices, found objects, endings and preferences are stored on your device to provide gameplay and restore your position.

Analytics and attribution. Planned services AppsFlyer and Google Analytics for Firebase process installation or app-instance identifiers, advertising identifiers where permitted, IP address and derived approximate location, device and app information, installs, first launches, usage and purchase events. These support audience measurement, campaign attribution, app improvement and fraud prevention.

Diagnostics. Planned Firebase Crashlytics processes crash reports, error traces, timestamps, device and app information and installation identifiers to identify and fix failures.

Advertising. Planned Google AdMob and AppLovin, and their advertising partners, can collect, use and share device or advertising identifiers, IP address, approximate location, app and device information, ad views, clicks and reward events. Purposes include serving and personalising ads where permitted, measurement, rewards, fraud prevention and improving advertising services, including AppLovin's AI-powered technologies. Third-party measurement partners can process data for ad verification, including through the Open Measurement framework. Advertising can use device storage, identifiers, pixels and similar technologies.

Subscriptions. Google Play will process subscription payments. Purchase identifiers or tokens, product, transaction and subscription status, and related user or installation identifiers support verification, paid access, restoration, support and financial recordkeeping.

Story ratings. Submitted ratings will include story, score, time and a pseudonymous user or installation identifier. These support story improvement, aggregate scores and prevention of duplicate or abusive submissions. Pseudonymous records remain personal data where they can be linked to a person. The submission notice will identify the storage provider and any public display.

Support and platform feedback. We process contact details, messages, attachments and email metadata you provide to handle requests. Google Play can provide store reviews, ratings, statistics and technical diagnostics used to address feedback and reliability.

Website. Cloudflare hosts this page and processes network and security information, including IP address, URL, request time and browser headers, to deliver and protect it. Necessary security cookies or similar mechanisms may be used.

Provider information: AppsFlyer; Firebase; Google Privacy Policy; Google's use of data from partner apps; AppLovin; Cloudflare.

02

Legal grounds

Where European or UK law applies, processing relies on: performance of a contract for requested gameplay, subscriptions and related support; legitimate interests in security, reliability, feedback, fraud prevention and legal claims, subject to your rights; applicable legal obligations, including accounting and privacy requests; and consent for analytics, advertising, tracking or device storage where required.

Required consent will be requested before the relevant processing begins. Necessary purchase data is required to verify paid access. Ratings and support submissions are voluntary; their contents are needed to process them.

03

Sharing and international transfers

Data is accessible to authorised personnel and the relevant providers named above. Providers act as processors or independent controllers according to the service and their terms. Additional advertising recipients will be identified in the applicable privacy or consent notice before processing. Data may also be disclosed to advisers, authorities or a business successor where necessary and permitted by law.

Advertising data sharing can qualify as a “sale”, “sharing” or targeted advertising under applicable US laws and is subject to the corresponding consent or opt-out requirements.

Providers can process data outside your country, including in the United States. Transfers subject to European or UK restrictions require applicable safeguards, such as an adequacy decision or approved contractual clauses. Contact us for details or a copy of relevant safeguards.

04

Retention and deletion

Local progress remains until overwritten or removed through Android app-storage settings or uninstallation. Device backups are managed through operating-system settings.

Online records are retained according to their purpose: analytics and attribution for the measurement or investigation period; ratings while needed to maintain scores and address abuse; subscriptions for entitlement, restoration, disputes and applicable accounting or tax periods; and correspondence until requests and necessary follow-up or legal retention end. Firebase describes 90 days for Crashlytics traces and associated identifiers before deletion from live and backup systems begins.

Records under our control are then deleted or anonymised, subject to applicable legal retention and backup cycles. Providers set retention for data they control independently. Clearing local storage does not delete separately held online records; deletion requests can be sent to our privacy contact.

05

Your rights

Applicable law may give you rights to access, correct, delete or obtain a portable copy of data, restrict processing, object to legitimate-interest processing, and withdraw consent without affecting prior lawful processing. US rights may also include opting out of sale, sharing or targeted advertising, authorised-agent requests and appeals. Statutory exceptions and proportionate identity verification can apply.

Send requests or appeals to alsvarel.developer@gmail.com. We respond within applicable legal deadlines. Required consent withdrawal and opt-out controls will accompany the relevant services; recognised opt-out signals will be honoured where legally required. Device advertising settings offer additional controls. Exercising privacy rights will not result in unlawful discrimination.

You may complain to your data-protection authority, including the Dutch Autoriteit Persoonsgegevens or the UK ICO. Subscription cancellation is handled through Google Play; deleting data or uninstalling does not itself cancel billing.

06

Children

The app is not directed to children under 13. Higher local parental-consent thresholds and applicable restrictions on advertising to minors apply. Contact us about children's data that may require deletion.

07

Security and updates

We use appropriate safeguards, including HTTPS for this website and restricted access to records. Security cannot be guaranteed absolutely. Privacy incidents are handled in accordance with applicable law.

This policy is updated when processing changes. Material changes and any required consent will be addressed before the relevant new processing starts.