Privacy Policy
The short version. Chroma Strike has no accounts, and we run no servers for it: your progress is saved on your phone. The app does contain software from Google and from Unity that sends data from your phone — to show ads, to measure how the game is played, to report crashes and to handle purchases. This policy lists what each one receives, why, how long it is kept, and how you control or delete it.
Who we are
Orelia LLC ("Orelia", "we", "us") develops and publishes Chroma Strike, and appears on Google Play under the developer name Orelia. Orelia LLC is the data controller for the personal data processed in connection with the game.
Contact for anything in this policy: dardan@orelia.io.
What stays on your phone
Chroma Strike has no accounts and no sign-in. We never ask for your name, email address, phone number, contacts, photos or files, and we run no server that the game talks to.
- Your progress and settings — levels, stars, coins, unlocked items, achievements, your choices in Settings and the schedule of any reminders — are saved in the game's own storage on your device. We cannot see this data, copy it, or restore it for you.
- Android backup. If backup is switched on for your Google account, Android may include the game's save in your phone's backup and bring it back when you reinstall the game or set up a new phone. That copy is kept in your Google account under Google's terms; we have no access to it.
- Deleting it. Clearing the game's storage, or uninstalling the game, removes this data from your phone. See Keeping and deleting your data.
- The game can be played without an internet connection.
What leaves your phone, and who receives it
The Android app contains software made by Google and by Unity that communicates over the internet. This is the complete list. All of it is encrypted in transit.
| Software | What it is for | What it receives |
|---|---|---|
| Google AdMob | Shows the ads, measures them, detects fraud | IP address (general location), advertising ID and app set ID, app interactions, diagnostics |
| Google consent form | Asks for your ad and data choices where the law requires it | IP address, to tell which rules apply where you are; your answer |
| Google Analytics | Shows us how the game is played and what it earns | Gameplay, ad and purchase events; an app-instance ID; the advertising ID; device type and general location |
| Firebase Crashlytics | Reports crashes and errors | Crash details, device model, Android version, an installation ID |
| Google Play | Purchases and the rating sheet | Handled by Google under your Google account |
| Unity | The purchasing library that talks to Google Play | Possibly technical diagnostics and performance data about the library itself |
For advertising, Google decides for itself how the data is used, under Google's Privacy Policy; Google explains this in "How Google uses information from sites or apps that use our services". For analytics and crash reporting, Google processes the data on our behalf. We do not sell your personal data, and we pass it to nobody except the providers named here.
Google AdMob (advertising)
Serves the rewarded ads you choose to watch (for a revive or a bonus) and the interstitial ads shown between levels. To serve and measure ads and to detect invalid traffic, Google's Mobile Ads software collects:
- IP address, from which a general location (such as country or city) is estimated. The app has no location permission and never reads GPS;
- Device identifiers: the advertising ID and the app set ID;
- App interactions, such as app launches, taps and ad-video views;
- Diagnostics, such as app launch time, hang rate and energy use.
Where your choices allow it, Google uses this data to show ads based on your interests. Google's ad software may also use the ad-privacy features that are part of Android, where your phone has them; you control those in Android's settings. An ad you tap opens the advertiser's page or a store listing, which have their own privacy policies.
Google's consent form
Google's User Messaging Platform checks with Google whether a consent rule applies where you are (this uses your IP address) and, if one does, shows the consent form. Your answer is stored on your phone and passed to Google's advertising and analytics software in the app. See Consent.
Google Analytics for Firebase (analytics)
Records what happens in the game as events. They are tied to a random app-instance ID that the software creates on your phone and, where your choices allow it, to the advertising ID — never to your name or email address, which we do not have. The events are:
- Sessions and screens: first open, session start, which screen is shown;
- Play: a level or arcade run started and finished, with its result (stars, hits, PERFECT rate, duration, how the run ended); tutorial steps; achievements; worlds and games unlocked; the daily challenge completed; and whether you came back one, three and seven days after installing;
- Coins and items: coins earned and spent, what they bought, and items equipped;
- Ads: that an ad was offered, shown or not available, and Google's estimate of what an ad impression earned;
- Purchases: that the store was opened and a purchase was started, completed, cancelled, failed or restored; for a completed purchase, the product, its price and currency, and the Google Play order number;
- Reminders and rating: your answer to the reminder question, that a reminder was opened and which one, and that the rating sheet was requested.
It also records a few facts about your copy of the game (the highest level reached, a band for your star total, whether the arcade is open, whether a purchase has been made, whether ads are removed, whether reminders are on), the device model, Android version, language and app version, and a general location (country, region, city) that Google derives from your IP address; Google Analytics does not store the IP address itself. When the game is installed, Google Play also tells the analytics software which store page or advertisement the install came from.
We use this to see how the game is played, to find where players get stuck, to measure what the game earns, and to measure and steer our own advertising for the game: we may link Analytics to our Google Ads account, which then receives the install, purchase and ad-revenue events as results of our ads.
Firebase Crashlytics (crash reporting)
When the game crashes or hits an error, Crashlytics sends a report: the stack trace, the state of the app at that moment, the device model and Android version, and an installation ID created by the software. We use it only to find and fix bugs.
Google Play (purchases and ratings)
Purchases are made through Google Play Billing with your Google account. Google handles the payment: we never receive your card details, your name or your billing address. The game is told which product was bought, the order number and the price that was shown to you, so that it can give you what you bought and record the sale in Analytics as described above.
The "rate this game" sheet is Google Play's own. A rating or review you leave is sent to Google Play under your Google account, not to us.
Unity
The game is built with the Unity engine and uses Unity's in-app purchasing library to talk to Google Play Billing. That library may send technical diagnostics and performance data about itself to Unity. Unity states that this data is processed only transiently and that the library collects no personal identifiers; like any internet request, it would carry your IP address. See Unity's Privacy Policy. The engine's own hardware statistics are switched off, and the game uses neither Unity Analytics nor Unity Ads.
Reminders
If you say yes to reminders, the game schedules notifications on your phone — for example about the daily challenge, or that your level is waiting. They are written by the game on your device and delivered by Android itself. No push-notification service is used, and their text is never sent anywhere.
Analytics records your answer to the reminder question and that a reminder was opened, with the name of its slot (for example "day three, evening"), not its text. You can switch reminders off at any time in Settings → Reminders inside the game, or in Android's notification settings for the game.
Permissions
The app holds only the permissions that the software above needs: internet access, the advertising ID, Google Play Billing, notifications (requested only if you choose reminders, on Android 13 and newer), and technical permissions that let these libraries finish an upload and put your reminders back after the phone restarts. It has no access to your precise location, camera, microphone, contacts, photos or files.
Purposes and legal bases
| Processing | Purpose | Legal basis (EEA/UK) |
|---|---|---|
| Advertising | Show the rewarded and interstitial ads that fund the free game, measure them, detect fraud | Your consent, collected through Google's consent form |
| Analytics | Understand how the game is played and what it earns; measure our own advertising | Your consent where it is required; otherwise our legitimate interest in improving the game |
| Crash reporting | Detect and fix crashes and bugs | Our legitimate interest in keeping the game working |
| Purchases | Give you what you bought | Performance of our contract with you |
| Reminders | Remind you about the game, only if you switch them on | Your consent; processed on your phone only |
Consent in the EEA, the UK and Switzerland
If you are in the European Economic Area, the United Kingdom or Switzerland, the game shows Google's consent form the first time you open it. Until you have answered, the game requests no ads and Analytics collects nothing.
Your answer decides whether ads may be personalized and whether the advertising ID and similar identifiers may be used. If you refuse, the game works exactly the same: any ads you still see are not personalized, and the analytics software is told not to use those identifiers. You can review or change your answer at any time in Settings → Privacy options inside the game, which reopens the same form.
Where no consent rule applies, no form is shown: ads and analytics start when you first open the game, and the controls below apply.
Your controls
- Privacy options in the game: Settings → Privacy options reopens the consent form where one applies to you.
- Delete or reset your advertising ID: on Android, go to Settings → Privacy → Ads (the wording varies by device). Deleting the ID stops advertising-ID-based personalization in every app.
- Personalized-ads controls in your Google account: My Ad Center, and how Google uses data for ads.
- Reminders: Settings → Reminders inside the game.
- Fewer ads: the optional Remove Ads purchase turns off interstitial ads for good. Rewarded ads stay available as a choice; they are never forced.
- Delete your data: see the next section.
Keeping and deleting your data
We keep no player data on servers of our own. This is how long each kind of data is kept, and where:
| Data | Where it is | How long |
|---|---|---|
| Progress and settings | Your phone (and your own Android backup, if you use one) | Until you clear the game's storage or uninstall it |
| Analytics events | Google, on our behalf | Data tied to an identifier is deleted automatically after at most 14 months; totals that no longer point to a device are kept longer |
| Crash reports | Google, on our behalf | 90 days |
| Advertising data | Under Google's retention policy | |
| Purchase records | Google Play, in your Google account | Under Google's policies |
| Emails you send us | Our mailbox | As long as it takes to answer you and to keep a record that we did |
To delete your data:
- On your phone. Open Android's Settings → Apps → Chroma Strike → Storage → Clear storage, or uninstall the game. This erases your progress, your settings, your consent answer and the identifiers that the analytics and crash-reporting software created, so nothing collected afterwards can be joined to what was collected before.
- Your advertising ID. Delete or reset it in Settings → Privacy → Ads.
- Ask us. Email dardan@orelia.io. We hold no name, email address or account for players, and the analytics and crash data is filed under random identifiers, so we usually cannot pick out one player's records. We will tell you what applies in your case, and we will delete everything we are able to identify as yours. We answer within 30 days.
The same steps, with what is deleted and what is kept, are on the Delete your data page.
Security
Everything the software above sends is encrypted in transit (TLS); the app does not use unencrypted connections. We keep no player database, so there is no store of player data on our side to protect or to lose. Your save is a file in the game's own storage on your phone, protected by your phone's own security.
Your rights (GDPR)
If you are in the EEA or the UK you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, the right to withdraw consent at any time (without affecting earlier processing), and the right to lodge a complaint with your supervisory authority.
To exercise any of these rights, email dardan@orelia.io. Because we hold no account or profile for you, most requests are resolved by the controls above; for data held by Google we will point you to the corresponding Google control. We respond to every request within 30 days.
Your rights (California and other US states)
If you live in California or another US state with a comprehensive privacy law, you have rights to know, correct, and delete personal information, and to opt out of the "sale" or "sharing" of personal information. We do not sell personal information for money. The advertising described above may qualify as "sharing" for cross-context behavioral advertising under the CCPA/CPRA; you can opt out through the advertising-ID controls above (reset or delete the ID, or turn off personalized ads). We do not knowingly process the personal information of anyone under 16 for these purposes. We will not discriminate against you for exercising any right.
To exercise these rights, email dardan@orelia.io.
Children
Chroma Strike is not directed at children under 13 (or under the age at which your country requires a parent's consent, which is up to 16 in parts of Europe). It is not part of the Google Play Families program, and we do not knowingly collect personal data from children. If you believe a child has provided personal data through the software described above, contact us and we will help address it.
International transfers
Google and Unity may process the data described above on servers outside your country, including in the United States, under the safeguards described in their privacy policies (such as standard contractual clauses).
This website
This website is a static site hosted on Firebase Hosting (Google). It sets no cookies and runs no analytics. Like any web host, Firebase Hosting processes visitors' IP addresses in its server logs to deliver the pages. Fonts are served by Google Fonts, which receives your IP address when the font files load.
Changes to this policy
If we change this policy, we will post the new version at this address and update the effective date at the top. A material change (for example, new software that collects data) will be called out in the app's release notes.
Contact
Orelia LLC · dardan@orelia.io