Scribble Hunt — Privacy Policy

Effective date: 17 September 2026

This policy explains what Scribble Hunt ("we", "us") collects, why, how long we keep it, and who we share it with. It is written in plain English, and it is written to match what the app actually does — every claim below was checked against the shipping code.

Scribble Hunt is a mobile hide-and-seek game. You can play as a guest without signing in. Signing in is optional.

The short version

• Play as a guest and we create an anonymous account for you — a random ID, plus a display name only if you type one. No email, and nothing from a sign-in provider.
• Sign in and we additionally store the account ID, display name, and email your provider gives us (Apple often hides the email; that is fine).
• We store your game progress — coins, gems, cosmetics, trophies, quests — because it has to survive reinstalling the app.
• If you buy something, we store the transaction ID so you are not charged twice and can restore your purchase.
• We show ads: rewarded ads you choose to watch, and a full-screen ad between matches. They are never personalised — not based on your past behaviour or interests.
• We record gameplay events — such as "a match started" — to find the parts of the game that confuse people. They carry no advertising ID or device fingerprint.
• You can delete your account and everything above from inside the app.

What we collect, and why

1. An account, always — anonymous if you do not sign in

The moment you start playing we create an account so your progress can be saved. If you have not signed in, it is an anonymous account: a random identifier, plus a display name if you choose to type one in the game (other players see it). It is not linked to your email, a sign-in provider, your device's advertising ID, or any other app.

Why: so that coins you earn and items you buy still exist tomorrow.

2. Sign-in identity (only if you sign in)

If you choose Sign in with Apple (iOS) or Google Sign-In (Android), we receive and store:

• a stable user ID — an opaque identifier from your provider;
• a display name, if one is provided;
• an email address, only if your provider passes one. Apple lets you hide your real address behind a private relay; if you do, we never see the real one. This field is often empty, and that is fine.

Why: to keep you signed in across devices, to show your name to other players in a lobby, and to let you recover your account.

We do not receive your password. Authentication happens with your provider.

Right after you sign in for the first time, we also ask you for two things directly:

• a username — you choose it, it must be unique, and it is permanent. Other players see it. Because it is the name attached to your progress, leaderboard entries and reports, it cannot be changed afterwards. Do not use your real name, and do not use anything you would not want another player to see.
• your age — a single number, typed by you. We do not verify it and we do not check it against anything. It is used only to understand who plays Scribble Hunt in aggregate. It does not change the game you get: nothing is unlocked, restricted or shown differently based on what you enter, and it is never shared with advertisers.

Both are deleted with the rest of your account (see Deleting your data), with one consequence worth stating plainly: deleting your account frees your username for someone else to take.

3. Game progress

Coins, gems, the cosmetics you own and have equipped, battle-pass level, quest progress, trophies and season badges. If you use the social features, also your friends list, friend requests and party invites, and any report you make about another player (the reason you pick, any detail you add, and the match it happened in).

Why: it is your save file. It lives on our server so a reinstall or a new phone does not wipe it.

4. Purchases

If you buy something, we store the store transaction identifier, the product ID, and whether it was a sandbox or production purchase.

Why: to give you what you paid for exactly once, to let "Restore Purchases" work, and to reconcile refunds. We never see your card details — the payment happens entirely inside Apple's or Google's system and they do not share payment information with us.

5. Ads

The game shows two kinds of ad, both served by Google AdMob:

• Rewarded ads — optional. You choose to watch one in exchange for in-game currency.
• Interstitial ads — a full-screen ad that can appear when you leave a finished match for the lobby. You do not choose these, and you can close each one using the button the ad shows. We limit how often they appear.

Ads are never personalised. The app instructs AdMob to serve only non-personalised ads, for every player in every country: an ad is chosen from the context of the game, not from your past behaviour or interests. If you are in a region where the law requires consent for ads (such as the EEA or the UK), Google's consent message may also be shown before ads load.

To serve and measure even a non-personalised ad, Google's ad software still collects some data from your device and processes it under Google's own policies: your device's advertising ID, your approximate location (derived from your IP address), device and app diagnostics, and how you interact with ads (for example, that one was shown or tapped). Google uses it to limit how often you see the same ad, to prevent fraud and to report on ads in aggregate. You can reset or delete your advertising ID in your phone's settings. See Google's advertising privacy notice.

6. Gameplay events

While you play, the app records short events about what happened in the game — for example that a match started, a pose was chosen, or a colour was picked — along with small details such as the map or game mode, and the age you entered at signup when onboarding completes.

Each event is stored on our own backend (Supabase) with:

• your account ID;
• a random install ID created by the app the first time it runs. It is not your device's advertising ID or hardware ID, it is not shared with any other app, and it is removed when you uninstall;
• a random session ID that changes every time the app starts, and a time.

We do not store your IP address with these events, and they are never used for advertising or shared with anyone.

Why: to see where players get stuck or leave, so we can fix those parts of the game. Events are deleted together with your account.

That is the complete list

We do not collect your contacts, your precise location, your photos, your microphone or camera, or your browsing history. We do not run a third-party crash-reporting or analytics SDK. The only gameplay analytics are the first-party events described in section 6, stored on our own backend.

Who processes it

• Supabase — our backend. It stores the account, progress, purchase records and gameplay events described above. (Supabase Inc., hosted in the EU/US depending on region.)
• Apple / Google — sign-in and payments, under their own privacy policies.
• Google AdMob — rewarded and interstitial ads, under Google's privacy policy.
• Our game servers — live multiplayer matches run on servers we operate on Oracle Cloud in India. During a match your display name, account ID, cosmetics and in-match actions (movement, paint, poses) pass through them and are relayed to the other players in that match. The servers do not keep them after the match.

We do not sell your data, and we do not share it with anyone else.

No cross-app tracking

We do not link your activity in Scribble Hunt to your identity or activity in other companies' apps or websites. On iOS this means Scribble Hunt does not show an App Tracking Transparency prompt, because there is nothing to ask about. On Android, ads are always non-personalised (see section 5).

Children's privacy

Scribble Hunt is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

How long we keep it

For as long as your account exists. Delete your account and it is removed immediately — not queued, not soft-deleted.

Anonymised purchase records may be retained where tax or accounting law requires it. These carry no name, email or account link.

How to delete your account and your data

In the app: Settings → Account → Delete account → confirm.

This permanently removes your account and everything attached to it: profile, progress, cosmetics, trophies and purchase links. It cannot be undone, and purchases are not refunded by it (refunds are handled by Apple or Google).

On the web, without opening the app: see our data deletion page, or email the address below from the address on your account.

Changes to this policy

If we change it materially we will update the effective date at the top and, for significant changes, tell you in the app.

Contact

devmadan2004@icloud.com