Privacy policy

Your Spellbox profile

Spellbox uses Firebase anonymous authentication for an unlinked online profile and Google sign-in for a Google-connected profile. Anonymous authentication does not require your name, email address or password. Firebase assigns a unique user ID (UID) and authentication tokens. We use this identity to associate online records with the correct player and control access to private data. Having a player identity does not enrol you in competition, and offline gameplay does not require an online connection.

Your UID lets us recognise the same player across sessions and link scores and achievements to their profile. These linked records are personal data even if we do not know your real name. This is called pseudonymous data: an identifier is used in place of your name.

Google processes authentication information, IP addresses and technical client information to provide authentication and prevent abuse. An anonymous Spellbox profile is separate from the Google Play account used to buy a game. Clearing the app's data can remove your access to an unlinked anonymous profile without deleting its server records.

You choose one editable nickname for your Spellbox profile. Use a nickname rather than your real name, email address or other contact information. The same nickname can appear across the online games you choose to join. Changing it does not create a different account or erase previous activity.

Google Play purchases

Buying a full minigame is optional. Free content remains playable offline without a purchase. The purchase itself requires a connection to Google Play; once an unlock is verified and stored on the device, you can continue playing the installed full minigame offline. You do not need to enable competition to buy or play it.

Paid minigames offer a one-time purchase that unlocks the base content described in the offer. Little Viking is entirely free. Spellbox Full Access is a separate one-time purchase for the games and base content listed in its offer. These purchases are not subscriptions. Each product description explains what your purchase includes. Future games and additional content are not automatically included. See how purchases work for more information.

Google Play handles payments for minigame unlocks and Full Access. The app processes product identifiers, purchase tokens and purchase status to recognise, acknowledge and restore purchases and remember access for offline play. Purchase or order references may also be needed to resolve a purchase support request.

Google processes your payment details and transaction records under its own policies. Google Play Billing does not give us your payment-card number, Google account password or purchaser email address. Purchase tokens and payment information are not published on leaderboards. Restoring a purchase restores access to the game, not its saved progress.

Game results and leaderboards

Competition is off by default. Before enabling it, the app checks eligibility and explains which player and gameplay data is sent and which information other players see. You must make a separate, explicit confirmation for each game's rankings. Joining one game does not join the other games. Installing the app, continuing to play, reading this policy or purchasing a minigame does not count as confirmation. If you decline, you can keep playing free content and any purchased minigames offline.

Joining includes supported personal best scores and achievements already saved on your phone, then submits later eligible results while you remain enrolled. Unsupported results stay local. Demo and full-game players can rank on the supported levels they can play. Buying, restoring a purchase, linking an account or reconnecting to the internet never enrols you or imports your history by itself.

Submitted results are associated with your Firebase UID and include game and level identifiers, scores, completion results, achievements, game and scoring-rule versions, submission identifiers and timestamps. We use these records to maintain personal bests, calculate rankings, validate submissions and avoid counting the same result more than once. Online results are stored using Google's Firebase SQL Connect and Cloud SQL services.

Other players see your chosen nickname, scores, ranks and achievement results or counts. Entries can be associated with the same player. Your Firebase UID, authentication and purchase tokens, age, residence, email address and complete private game saves are not public leaderboard information. The nickname is editable text; Spellbox does not offer chat, direct messaging or a public profile biography.

The Leave rankings control stops new and queued uploads for that game immediately on your phone. Removal from public rankings and ranking statistics needs confirmation from the server. An offline request remains pending until it can be processed; other devices may still show previously downloaded entries until they refresh. Leaving preserves your local saves and purchased access and is separate from deleting your whole online profile.

To remove your profile and its associated online records across all games, use account deletion.

Children, families and ranking eligibility

Players who cannot join online rankings can continue playing locally, including free content and purchased minigames. A parent's installation or purchase does not establish the actual player's ranking eligibility or permission to publish their results.

Joining rankings requires checking the actual player's eligibility before creating a ranking identity or uploading saved results. The app explains the applicable rules and information needed for this check before collection. Eligibility information does not appear on leaderboards.

Spellbox does not offer parental-permission enrolment in rankings. Where parental authorisation is required, ranking enrolment remains unavailable. Buying a minigame does not change this. A parent or guardian can use our privacy contact about their child's data.

Eligibility for Google connection and private online play is separate from ranking participation. A parent's Google account or purchase does not by itself establish the eligibility of the child playing. Little Viking has no rankings or purchases and can be played entirely offline.

Data on your device

Spellbox keeps settings, local game saves, progress, achievements and remembered purchase access in app storage. Local play does not require an online profile. Results can leave the device through the online features you use: rankings, supported private backups or private online play. If you later join a game's rankings, supported saved results are included as explained above. While enrolled, eligible results may be queued until a connection is available, provided participation remains active. Local saves support offline play; submitting a score is not a complete cloud backup of your game.

We do not use advertising SDKs, Google Analytics or Firebase Crashlytics. Spellbox does not request access to your contacts, photos, location, microphone or camera, or collect advertising identifiers.

Google connection and private backups

Connecting Google creates or recovers a Spellbox profile, or links an existing anonymous profile to your Google identity. Firebase processes the Google account identifier and profile information supplied during sign-in, such as your name and email address, to authenticate and recover that profile. Your Google name and email are not public leaderboard information. Your Google account used for Spellbox recovery and the Google Play account that owns purchases have different roles.

Connecting Google also enables automatic backup for games that support cloud recovery; there is no separate backup switch. Existing local progress can become the first backup. Cloud saves hold private game progress, checkpoints, unlocked content, achievements and save-version information associated with your profile so progress can be recovered. These saves are not public leaderboard data. Local saves support offline play, and restoring a Google Play purchase is separate from recovering a cloud save.

Before uploading, the app checks for an existing backup. If progress differs, you choose which complete save to keep or decide later. Progress is not merged. Choosing cloud progress replaces the local save; choosing this phone's progress replaces the cloud copy. Offline changes wait for a connection, and a local save is not proof that a backup has completed. Games without cloud recovery keep their saves on the device.

Leaving rankings does not switch off private backups. Signing out on a device stops that device's connection while preserving the online profile and other signed-in devices. Deleting the online profile removes its associated private backups across games. If switching to another Google-linked profile requires deleting the current profile, the app asks you to confirm that separately.

Private online play

In games with private rooms, creating or joining a room uses your Spellbox profile. We process the room code, membership, nickname, game settings, submitted answers, round results and timestamps to run the match and recover interrupted requests. Other members of that room see the player names and match information shown by the game. A room code lets someone attempt to join, so share it only with people you want to play with. Private rooms do not enrol you in public rankings.

Closing or leaving a room is separate from deleting your profile. Profile deletion removes room records containing that player's data and can end affected matches for the other players. A room becoming unavailable does not by itself mean its stored records have been erased.

When you visit this website

The website uses no cookies, analytics or advertising trackers. Fonts and artwork are served from our own website address.

Google Cloud hosts the site. Your browser sends technical request data, including your IP address, requested page and browser information, to Google to deliver the page. Google also processes service and security data to operate and protect its infrastructure. See the Google Cloud Privacy Notice for its purposes, safeguards and retention periods. We do not use this information to build advertising profiles.

When you contact us

If you email us, we receive your email address, any name you provide, your message and attachments. We use this information to answer your request and resolve support or privacy issues, including identifying the relevant profile, verifying account-deletion requests and confirming their outcome. Providing it is voluntary; please do not send passwords, payment-card details or other unnecessary sensitive information.

Google Gmail handles our support email. Its processing and international transfer safeguards are described in the Google Privacy Policy and Google's data transfer frameworks.

Use, sharing and security

We do not sell personal data or share it for advertising. Google provides authentication, online data storage, Google Play billing, website hosting and email. Other players receive the leaderboard information described above. Information may also be disclosed if required by law.

Our selected database region for online results is Belgium. Firebase Authentication processes data in the United States. Google may also process service and support information outside Norway and the EEA. Google's Firebase privacy and security information explains its processing locations, retention and transfer safeguards. Gmail processing and transfer safeguards are described in the Google notices above.

Rankings are calculated automatically from game results; we do not use them for decisions with legal or similarly significant effects.

Connections to our online services and website use HTTPS. Android's app storage controls protect local data, and authenticated access controls separate private records from leaderboard information. Access to support correspondence is limited to handling your request and the service providers needed to deliver it.

Google Play and Android separately process store-account, download and diagnostic information under Google's policies and your account and device settings. See the Google Privacy Policy.

Retention and deletion

Local data remains until you clear Spellbox's storage in Android settings or uninstall the app. This can remove local progress and access to your anonymous identity. It does not automatically delete Firebase profiles, submitted results or Google's purchase records.

The Delete Spellbox profile and data control automatically deletes your Firebase identity and associated Spellbox online data across all games: your profile, submitted results, online achievement records, leaderboard entries and any associated cloud saves. Locally held online credentials and pending uploads are also removed or invalidated so they cannot recreate the deleted records. Completion requires confirmation from the online service; a queued or offline request is still pending.

After your confirmation in the app, deletion runs automatically for your authenticated profile. The in-app process does not require a support email, manual identity review or staff approval.

You can also request account deletion by email, without installing or signing in to Spellbox. We handle these requests manually, verify your authority to delete the profile and confirm the outcome. We handle requests without undue delay and normally complete them within one month of receipt. We explain any verification needed and notify you within that first month if a lawful extension is necessary, with the reason.

Online deletion preserves independent phone-local saves, achievements, settings and verified purchased access. Resetting local progress is a separate action. See Delete your Spellbox account and data for both deletion routes and an explanation of what is removed and what stays on your phone.

Deleting Spellbox data does not request a refund or delete purchase records that Google Play retains independently. If a legal obligation requires us to retain specific records, we will explain the records, reason and applicable retention period when handling the request.

The deletion service keeps a limited completion receipt for 30 days after deletion completes so the requesting device can confirm the outcome. It contains request and status information and hashed identifiers; it does not contain saved games or leaderboard results. A pending request is retained while the service completes or retries it.

Google's published Firebase Authentication policy keeps logged IP addresses for a few weeks and removes other authentication information from live and backup systems within 180 days after user deletion is initiated. These periods apply to Firebase Authentication; they are not retention periods for our results database, its backups or support correspondence. Other provider service data follows the retention rules in the linked Google notices.

Your rights and privacy contact

Depending on the circumstances, you can request access, correction, deletion, restriction or portability of personal data we hold about you, and object to processing based on legitimate interests. Contact HOGSETH SYSTEMUTVIKLING at:

support.hogsys@gmail.com ↗

You may complain to Norway's data protection authority, Datatilsynet, or your local data protection authority. A parent or guardian can contact us about a child's personal data.

Changes to this policy

We update this page and its date when our data practices change. Before introducing new uses of personal data, we explain the data involved and provide any required in-app notices and choices.