The short version
- No account: your game is saved on your phone. A copy on Google Play Games is possible, only if you turn it on.
- The game may offer optional video ads: you choose to watch one to get a boost. No banners, no forced ads. For everyone, ads are requested as for a child: never personalised.
- There are no in-app purchases for now: nothing costs real money.
- Statistics and bug reports are optional, only offered from the permitted age, and you can say no without losing anything in the game.
- Daily reminders are notifications created on your phone, at most one a day, and you can turn them off.
- You can change your mind at any time in Settings › Privacy and support, and write to us with any question.
1. Who is responsible?
Crystal Shredder is a mobile game for Android, distributed on Google Play, developed and published by Romain Sonnet, an independent developer based in France. He is the controller of the processing described here. Contact for support, privacy or exercising your rights: romain.sonnet2003@gmail.com or the contact form. No data protection officer has been appointed.
This policy covers the game and this website. It is available from the Google Play listing and in the game (Settings › Privacy and support › Read privacy policy). The game is intended for a family audience, children included. It is played without an account and stays playable offline; only the features described below use the Internet.
2. First launch: age and country
On first launch, the game shows a “Privacy” page asking for your country of residence (France, another EEA country, United Kingdom, United States, other or not specified) and your age band (under 13, 13 to 17, or 18 and over). No name, date of birth or email address is requested. These answers stay on the device; they are never sent in statistics. One exception: in its advertising consent request, the game tells Google whether the declared age is under 18 or was not given (see 3.2). These answers never restrict access to the game.
Statistics and crash reports are only offered from 15 in France, 16 in other EEA countries and 13 in the United Kingdom and the United States. In other countries, or if no country is given, they are not offered. The game has no verified parental consent flow: below these ages, optional processing simply stays off.
| Feature | Under the required age, or age or country not given | From the required age to 17 | 18 and over |
|---|---|---|---|
| Optional video ads | The same for everyone: requests tagged “child”, non-personalised ads, content rated G (general audiences) | ||
| Google consent form | Not shown (reported to Google as under the age of consent) | Not shown (same report) | Shown where the law of your country requires it (EEA, United Kingdom, Switzerland…) |
| Statistics and crash reports | Off | Optional, with your consent | Optional, with your consent |
| Remote settings (Unity) | For everyone, as soon as Google allows ad requests, or after you accept statistics (see 3.5) | ||
| Reminders, Google Play Games save, review request | For everyone; reminders with Android’s permission, the save only if you turn it on | ||
3. What data, and what for?
3.1 Save and settings on the device
The game stores on your phone: your progress (levels, coins, upgrades, equipment, mine, boosts and tokens, daily calendar and quests), the log of videos watched (date and count for the day), the log of review requests (count, date, game version), your settings (language, volumes, vibrations, reminders), your answers on the Privacy page and, if you accepted statistics, the installation’s Analytics ID (kept for a possible deletion request). If you use the Google Play Games save, the sync state and any backup copies also stay on the device. This data makes the game work; it is not sent to us.
3.2 Optional video ads (Google AdMob) and Google consent (UMP)
The game may offer rewarded video ads provided by Google AdMob: from the Boosts menu, with the game paused, you can choose to watch one to get a boost (Turbo, Gold sale or Hold XL). It is always optional: the same boosts can also be obtained with tokens earned in the game or through frenzy. There are no banners and no interstitial ads. Videos are only offered after the tutorial, at most 5 a day, 3 minutes apart, and only if we have enabled them remotely (see 3.5).
- “Child” treatment for everyone: whatever the declared age, every ad request is tagged as directed to a child and limited to G-rated content. Google therefore serves no personalised ads and no remarketing, to any player.
- Advertising ID: the game does not declare the Android permission to access the advertising ID (AD_ID) and does not use it.
- Data processed by Google to serve a video: IP address (from which Google infers an approximate location), device, system and app information, a technical identifier specific to the device and our apps (app set ID), your interactions with the ad (display, click, video completion) and diagnostics. Purposes: showing the ad, limiting repetition, measuring delivery and preventing fraud.
- Google consent (UMP): once the Privacy page has been answered, the game queries Google’s consent platform at every launch, for all players. For a declared age of 18 and over, Google shows its form where the law of your country requires it (for example in the EEA, the United Kingdom and Switzerland); it covers storing information on the device and the use of advertising data. For under-18s or an undeclared age, the game tells Google the player is under the age of consent and no form is shown. If Google does not allow requests, no video is offered and the game remains fully playable.
We only receive aggregated statistics from AdMob (number of impressions, revenue), never an individual profile. The game only stores, on the device, the date and number of videos watched to apply the daily limit. Google acts as an independent controller for its advertising processing: see how Google uses advertising data and how Google uses data from partner apps.
3.3 Optional statistics (Google Analytics for Firebase)
Only if you are old enough (section 2) and tap “Allow and play”. Before your consent, Firebase is not started. Data: a pseudonymous instance ID created by the SDK, and game events: sessions and moves to the background, tutorial steps, levels, runs and progress milestones, active play and driving time, crystals broken (species and size), sales and deliveries, upgrades and equipment bought with in-game coins, evolutions, relays, boosts used and their source (token, video or frenzy), video rewards (boost type, no amount), automatic mine, airdrop crates, a reminder being opened (gift or quests), review requests, returns to the depot, new games, smoothness and memory used, and a few technical error codes. The SDK adds the game version, device model and system, language and an approximate country or region.
Purpose: understanding where players get stuck and improving the game. This data is pseudonymous, not anonymous. Never sent: your age, your declared country, a name, an email, the advertising ID or an account ID. Firebase’s advertising consent is always denied; Google Signals, ad personalisation and granular device and city data collection are turned off.
3.4 Optional crash reports (Firebase Crashlytics)
With the same consent and age conditions as statistics: crash and error reports, technical code traces (error messages included), an installation ID specific to the SDK, game version, system, device characteristics and limited context (level, current action, version). Purpose: finding and fixing bugs. No name, email or save content is added. Reports are sent at the next launch only if consent is still given; after withdrawal, unsent reports are deleted. Reports already sent before a withdrawal cannot be recalled by the game (see section 9 to have them deleted).
3.5 Remote settings (Unity Remote Config and Unity Authentication)
The game fetches a small settings file that lets us turn video ads and statistics on or off remotely (for example if a service misbehaves). To do so, it signs in anonymously to Unity’s service, which assigns the installation an anonymous, persistent player ID (kept on the device), and receives the connection’s IP address and the game version. This happens for all ages as soon as Google allows ad requests, or after you accept statistics. No gameplay data is sent and Unity’s own analytics (Unity Analytics) stay refused. Without a network, the game uses its default values (videos off). These settings never change your save or your earnings. The Unity engine may also send Unity technical statistics about the device hardware (model, processor, graphics card, system version).
3.6 Google Play Games save (optional)
In Settings › Google Play save, you can choose to sign in to Google Play Games to keep a copy of your progress on your account (the “Saved Games” feature), for example when you change phones. Nothing happens without this action: the Google Play Games service is not started before. While the copy is on, the game sends its latest save (progress, coins, upgrades, bonuses and game settings), the game version and the upload date, at most every 2 minutes of play and when the game goes to the background, only if something has changed. The game does not read your profile, gamer name, avatar, friends, achievements or leaderboards. Google shows its own sign-in window and processes this data under its own rules.
“Sign out” stops the copy; the copy already on Google Play remains until you delete it from the Google Play Games settings or your Google account. If two saves conflict, you choose, and the one not kept is stored as a backup copy on the device.
3.7 Daily reminders (local notifications)
The game may schedule a reminder on your phone when your daily gift or quests are waiting: at most one a day, at 6 pm local time, the day after you play and then at most two follow-ups within the week. These notifications are created by the phone itself: no server, no push notification, no data sent. On Android 13 and later, the game asks for Android’s permission after explaining its use (never at start-up or during the tutorial); on older versions, Android grants it automatically and reminders are on by default. You can turn them off in Settings › Notifications or in Android’s settings. Tapping a reminder simply opens the game, with no reward. Only if you accepted statistics does the game record that a reminder was opened and its type (gift or quests).
3.8 Google Play review request
After at least 10 minutes of play and a successful moment, the game may show Google’s official window to rate the game: at most 3 times in total, once per version, at least 30 days apart. Google may also decide to show nothing. The game does not know whether you rated it or what you wrote; it only keeps, on the device, the number and date of requests. A published review appears on Google Play, under your Google profile, under Google’s rules. The “Rate the game on Google Play” button in Settings opens the game’s listing. Only if you accepted statistics does the game record that a request was made.
3.9 Support
If you write to us (the game’s “Contact the controller” button, email or the contact form): your name, email address, the content of your message and, if you provide it, the ID shown in the game, only to reply to you or handle your request. Do not send passwords, identity documents or sensitive data.
What the game does not collect
No named account; no name, date of birth or email in the game; no GPS location; no access to contacts, microphone, camera or photos; no chat or exchanges between players; no advertising ID. We do not sell your data. No decision with legal effects is made automatically and no ad is personalised. Providing data is never required to play.
4. In-app purchases
The game currently contains no in-app purchases. Nothing costs real money: coins, boost tokens and rewards are only earned by playing, have no real-money value and cannot be exchanged outside the game. There are no random purchases. A few items and one skin are marked “Premium Pass” in the game: they stay locked, with no price and no buy button.
A paid Premium Pass is being considered for later. If it is offered, it will be through Google Play’s payment system, and this policy will be updated before it goes on sale to describe precisely the data then processed (for example order information sent by Google Play) and its legal basis. Until that update is published, no purchase is possible.
5. Legal bases
| Processing | Legal basis (GDPR, Article 6) |
|---|---|
| Save and settings on the device | Providing the service you ask for by playing (contract) |
| Non-personalised video ads | Legitimate interest in funding a free game; where the law requires it, your consent to storing information on the device (Google form, adults) |
| Google consent request (UMP) | Compliance with our consent obligations, and legitimate interest |
| Statistics and crash reports | Your consent, which you can withdraw at any time |
| Remote settings (Unity) | Legitimate interest in keeping the game working and safe (safety switches) |
| Google Play Games save | Providing the service you turn on (contract) |
| Daily reminders | Your choice, through Android’s permission and the in-game switch; no data leaves the device |
| Google Play review request | Legitimate interest in making the game known; posting a review remains your choice |
| Support and rights requests | Legitimate interest in replying to you; legal obligation for requests to exercise your rights |
| Website audience measurement (Umami, cookieless) | Legitimate interest in measuring the website’s audience |
6. Children and family audience
Crystal Shredder is also intended for children. For all players: no account, no chat, no location, no advertising ID, no in-app purchases, optional video ads that are non-personalised, tagged “child” and rated G. Statistics and crash reports are off below the required age (section 2) and are never offered to under-13s. We do not knowingly collect personal data from children under 13, apart from the technical identifiers needed to run the game, its safety switches and the delivery of non-personalised ads (frequency capping, fraud prevention).
The Google Play Games save and reviews go through the device’s Google account, whose use by a child is governed by Google’s rules and Google Family Link. A parent can write to us with any question, to exercise their child’s rights or to ask for the deletion of data they believe was collected by mistake.
7. Providers, recipients and transfers outside the EU
Only Romain Sonnet has access to statistics, crash reports and support messages. The following are involved:
- Google (Google Ireland Ltd and Google LLC): Firebase Analytics and Crashlytics (processor); AdMob and the UMP consent platform, Google Play, Google Play Games and Google Play reviews (Google acts as an independent controller, under its own rules); support email. Google Privacy Policy · Firebase privacy.
- Unity Technologies: remote settings and anonymous authentication (processor), engine technical statistics. Unity Privacy Policy.
- Brevo (Sendinblue SAS, France): delivery of contact form messages (processor).
- Hostinger (Hostinger International Ltd, Cyprus): hosting of this website and of its Umami audience measurement, on a server located in France (processor).
Some data is processed outside the European Economic Area, notably in the United States, by Google and Unity. These transfers rely on the EU–US Data Privacy Framework where the recipient is certified, and on the European Commission’s standard contractual clauses included in these providers’ terms. You can ask us for more information about these safeguards.
8. How long?
| Data | Period |
|---|---|
| Save, settings, privacy answers, local backup copies | On the device, until a new game, clearing the app’s data or uninstalling it (an Android system backup may keep a copy) |
| Google Analytics statistics | 2 months at event and identifier level; aggregated, non-individual reports are kept |
| Crashlytics reports | 90 days |
| Anonymous Unity ID | On the device until uninstalling; at Unity under its rules, or until deleted on request |
| Advertising data, Google consent | Under Google’s rules; the consent choice stays on the device and Google may ask again |
| Google Play Games copy | Until you delete it in Google Play Games or your Google account |
| Support exchanges and rights requests | While being handled, then at most 12 months after closure (unless there is a dispute) |
| Website audience statistics (Umami) | 13 months |
9. Your choices, your rights and deletion
In the game, Settings › Privacy and support, at any time:
- Allow / Decline statistics and crash reports, and change your country or age (which withdraws consent), with no effect on the game.
- Google advertising choices: reopens Google’s form when Google requires it for you.
- Reset Analytics on this device: clears local Analytics data and withdraws consent, without touching your progress. It does not delete data already sent.
- Request deletion of my data: opens our contact page. Choose the “Personal data” topic and copy the ID shown under “ID to include in a deletion request”: we then ask Google to delete the statistics linked to that ID, and handle crash reports and the Unity ID separately. We confirm the request to you; actual deletion at Google may take some time.
- Contact the controller: opens an email to us.
Elsewhere: Settings › Notifications for reminders, Settings › Google Play save for the copy (and Google Play Games settings to delete the copy), “New game” to start from scratch, and uninstalling to erase everything from the device.
You can request access, rectification, erasure, restriction and, where applicable, portability of your data, object to processing based on our legitimate interest, and withdraw your consent at any time. Write to romain.sonnet2003@gmail.com or use the contact form. As there is no account, please include the ID shown in the game if possible; we will not ask for an identity document unless necessary. Reply within one month. A reinstall or reset may make older data impossible to link to your request.
You can also lodge a complaint with the French data protection authority, the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France), or with the data protection authority of your country.
10. Players in the United Kingdom and the United States
United Kingdom: you have the same rights under the UK GDPR and can contact the ICO. The protective settings described above apply by default.
United States: we do not sell your personal data or share it for targeted advertising: no ad is personalised. Ad requests are treated as directed to children, in line with COPPA. Parents have the rights described in section 6.
11. Security
Exchanges with Google, Unity and this website are encrypted (HTTPS). The local save is written atomically and checked with a hash. Data is minimised and pseudonymous, and access to the service consoles is restricted to the controller. As no system is infallible, we will inform you if an incident affecting you requires it.
12. This website
This website sets no cookies and shows no ads. Fonts, images and 3D models are served from the website itself. The host processes connection data (IP address, pages requested, date) needed to deliver and secure the website. The contact form sends your message through Brevo without storing it on the website. To limit abuse, a non-reversible fingerprint of your IP address is kept for one hour at most.
Cookieless audience measurement
To know whether this website is useful, we use Umami, a statistics tool installed on our own server, in France (a server rented from Hostinger): no data is passed to a third party or to an outside analytics service.
- No cookies: nothing is kept on your device to count you. Only your choice to stop being counted, if you make it below, is remembered by your browser.
- Your IP address is only used, during the visit, to derive the country and compute an anonymous identifier that changes regularly; it is not recorded.
- We only see totals: page views, countries, device and browser types, language, referring websites, and the number of a few actions (contact form sent), with no personal data.
- This data is kept for 13 months, never combined with other data, and visitors are not tracked across websites.
- Legal basis: our legitimate interest in measuring the website’s audience. This measurement, limited to anonymous statistics without cookies, does not require consent: this is why this website shows no cookie banner.
Your browser’s “Do Not Track” signal is respected, and you can opt out of measurement on this browser:
13. Changes and versions
We will update this policy if the game or its services change, updating the date and version number at the top of the page. For a significant change (new collection, new partner, in-app purchases), the policy is updated before the new feature, and the game asks for your consent again where needed.
Version 9 (19 October 2026): launch alert removed from the website (sign-up form, button and sending to Brevo deleted). Brevo now only handles contact form messages; no change for the game.
Version 8 (10 October 2026): cookieless website audience measurement (Umami, on our own server in France), kept for 13 months, based on legitimate interest; no change for the game.
Version 7 (7 October 2026): rewarded video ads treated as “child” for all players; Unity remote settings without statistics consent; daily reminders, Google Play Games save and review request added; purchases, the pack and tickets removed, as they are not offered; deletion request button now leads to the contact page.
14. Contact
Romain Sonnet — publisher of Crystal Shredder
romain.sonnet2003@gmail.com · contact form
Suggested subject: “Crystal Shredder — support” or “Crystal Shredder — personal data”.