Privacy Policy — Snake Reloaded

Effective date: 2026-08-23 Last updated: 2026-08-23 App: Snake Reloaded (com.acamposruiz.snakepowerup) Developer: Swedenvan (Antonio Campos) Contact: acamposruiz@gmail.com

This privacy policy explains what information Snake Reloaded ("the app", "we", "us") collects, how we use it, and the choices you have. We follow the principles of the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), regardless of where you live.

Summary in one paragraph

Snake Reloaded is an arcade game with a single-player campaign and an optional online multiplayer mode. We do not require an account, we do not show third-party advertising, and we do not sell your data. We collect anonymous gameplay analytics (so we can fix bugs and balance difficulty); if you make an in-app purchase or subscribe, a payment processor (RevenueCat + Apple App Store or Google Play) verifies it; and if you play online, your chosen nickname and your moves are relayed to the other players in your match. That's it.

1. What data we collect

1.1 Gameplay analytics (PostHog and our own backend)

Analytics are sent to two destinations: PostHog and our own backend, a Cloudflare Worker we operate with storage located in the EU. Both receive the same anonymous events; we run our own so we are not dependent on a single provider for the numbers we need to keep the game working. Everything in this section applies to both.

We use PostHog — a privacy-focused product analytics provider — to understand how players interact with the game and to detect crashes. In jurisdictions where consent is not legally required, anonymous gameplay analytics run on a legitimate-interest basis from launch; in regulated regions (e.g. the EU) they are sent only after you accept a consent prompt. The data collected is:

• Device model, manufacturer, OS version, app version, locale
• Game events: episode reached, score, power-ups used, paywall views, purchase funnel steps
• Crash and error reports (stack traces, error messages — never user-typed text since the game has no text input)

Personalization data is opt-in (off by default). A separate personalization consent gates two pieces of data, which are not sent unless you opt in:

• The anonymous device fingerprint (a deterministic SHA-256 hash used to correlate anonymous sessions from the same device — no advertising IDs, no IDFA, no Google Advertising ID).
• Your leaderboard nickname (display_name), if you set one. (Your nickname is still stored with your score on the public leaderboard you submit to — that is your own input, separate from analytics.)

We do NOT collect: name, email, phone number, contacts, photos, location, microphone, camera, browsing history, files outside the app's sandbox.

1.2 Purchases and subscriptions (RevenueCat + Apple / Google)

The game offers two paid products:

• a one-time purchase that unlocks the full single-player campaign permanently, and
• an auto-renewing annual subscription that unlocks online multiplayer and also includes everything in the one-time purchase, for as long as it is active.

Payment is processed by Apple App Store (on iOS) or Google Play Billing (on Android), and the receipt is verified by RevenueCat, a service that manages purchases and subscriptions. They handle:

• Anonymous user ID generated by RevenueCat on first launch
• Receipt token issued by Apple or Google
• Product ID purchased, timestamp, and — for the subscription — its expiry date and whether it is set to renew
• Country code

About the subscription. It renews automatically each year until you cancel it. Cancellation and auto-renewal are managed entirely in your Apple or Google account, not in the app — the app cannot turn renewal on or off; it can only show you the current status and open your store's subscription page. We store the expiry date on your device so the game keeps working offline for a limited grace period after the subscription would otherwise lapse.

We never see your credit card number, billing address, or your Apple ID / Google account email. Those stay between you, the store and your card issuer.

1.3 Local storage on your device

The app stores game progress (score, unlocked episodes, settings, paywall receipts) locally on your device using localStorage. This data never leaves your device and is deleted if you uninstall the app (or use Android's "Clear Storage" option).

1.4 Online multiplayer (optional)

The multiplayer mode is optional — the single-player campaign works without it and without any of the data below.

When you create or join an online match, your game connects through Photon (Exit Games GmbH, Germany), a real-time relay service. Matches are relayed through Photon's servers rather than connecting players directly to each other. What is involved:

• Your chosen nickname (up to 16 characters, whatever you type — we suggest you do not use your real name), shown to the other players in the match.
• Your moves and game state during the match (position, score, power-ups), relayed to the other players.
• A random room code and a random per-session player id.
• Your IP address, which is visible to Photon as part of establishing the connection. It is not shown to other players and we do not store it.

Nothing from a multiplayer match is retained after it ends: rooms are transient and we keep no match history on a server. Wins, losses and match statistics are stored only on your own device.

Push notifications (optional). If you allow notifications, we register a device push token together with an anonymous user id and the room id, so we can tell you when someone asks to join your match. You can revoke this at any time in your device settings.

There is no chat. Players cannot send each other free-form messages. The only text another player sees is the nickname you choose.

2. How we use the data

• Improve the game: identify hard-to-balance levels, broken power-ups, crashes
• Verify purchases: make sure unlocked content reaches paying players, even after reinstalls, and check whether a subscription is still active
• Run online matches: relay your moves and nickname to the other players while a match is in progress
• Detect abuse: rate-limit crash reports to avoid spam
• NOT used for: advertising, tracking across apps, profiling, sale to third parties, training AI models

3. Legal basis (GDPR)

• Analytics: consent (Art. 6(1)(a)) when required, or legitimate interest (Art. 6(1)(f)) for anonymous bug detection in jurisdictions where consent is not legally required
• Purchases and subscriptions: contract performance (Art. 6(1)(b)) — we need the receipt to deliver what you bought and to know whether a subscription is still active
• Multiplayer: contract performance (Art. 6(1)(b)) — a match cannot run without relaying your moves and nickname to the other players. You choose whether to play online at all
• Push notifications: consent (Art. 6(1)(a)) — the device permission prompt
• Legal compliance: tax reporting where applicable (Art. 6(1)(c))

4. Data retention

• Analytics events: retained for 12 months by PostHog, then deleted
• Purchase receipts: retained as long as you own the unlocked content (so we can re-validate after reinstalls). For the subscription, we also keep its expiry date so access can lapse correctly. RevenueCat retention is governed by their policy.
• Multiplayer matches: nothing is retained after the match ends. Photon's own retention is governed by their policy.
• Local device storage: kept on your device until you uninstall the app

5. Sharing with third parties

We share data only with:

We do not share data with advertisers, data brokers, social networks, or AI training companies.

6. Children's privacy

Snake Reloaded is suitable for all ages. We do not knowingly collect personal data from children under 13 (under 16 in the EU). The app does not require an account, does not include chat features, and does not show third-party ads.

⚠️ One thing parents should know about online multiplayer. There is no chat, but the nickname a player types is shown to the other players in the match. We ask players not to use their real name, and nothing else about them is shared. If you would rather your child did not play online, the single-player campaign works completely on its own. If you are a parent or guardian and believe your child has provided personal information, contact us at acamposruiz@gmail.com and we will delete it.

7. Your rights

Under GDPR (and similar laws), you have the right to:

• Access the data we hold about you
• Rectify inaccurate data
• Delete your data ("right to be forgotten")
• Object to processing
• Port your data to another service
• Withdraw consent at any time (in the app: Settings → Privacy → Disable Analytics)
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email acamposruiz@gmail.com with your anonymous device ID (Settings → About → Device ID). We will respond within 30 days.

8. International transfers

PostHog and RevenueCat process data in the United States. Data transfers from the EU/UK rely on the EU-US Data Privacy Framework and Standard Contractual Clauses. By using the app you acknowledge this transfer.

9. Security

We use HTTPS for all network communication. Receipts are signed by Google Play. Local storage uses standard Android sandboxing — other apps on your device cannot read it.

No system is perfectly secure. If we ever discover a breach affecting users, we will notify affected users and the appropriate authorities within 72 hours, as required by GDPR.

10. Changes to this policy

If we materially change this policy, we will notify users via an in-app message and update the "Last updated" date at the top. Minor edits (typos, formatting) do not require a notification.

11. Contact

For privacy questions, data deletion requests, or any concerns:

Email: acamposruiz@gmail.com Developer: Swedenvan / Antonio Campos Subject prefix: [Privacy] Snake Reloaded —

Snake Reloaded is an indie game developed by a single person. We take your privacy seriously because we'd want the same. If anything in this policy is unclear, just email us — we read every message.